Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc74e646-f238-4ce9-a399-9ad2f67be94f.roa
File:                     dc74e646-f238-4ce9-a399-9ad2f67be94f.roa (raw, json)
Hash identifier:          gz5sqHtdcSOMBnyeZtHrp3tiEcb7YEPnH6GeSehV8wc=
Subject key identifier:   1B:E1:87:D0:E1:5C:68:38:33:BB:14:F1:F1:31:29:B9:0E:1F:35:56
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3AD25A8CF1986925961F3C216EC3A215AC54D2A7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc74e646-f238-4ce9-a399-9ad2f67be94f.roa
Signing time:             Tue 16 Jul 2024 00:00:00 +0000
ROA not before:           Tue 16 Jul 2024 00:00:00 +0000
ROA not after:            Tue 20 Aug 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafe:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jul 2024 23:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d2:5a:8c:f1:98:69:25:96:1f:3c:21:6e:c3:a2:15:ac:54:d2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 16 00:00:00 2024 GMT
            Not After : Aug 20 23:59:59 2024 GMT
        Subject: serialNumber=0af5d6a345e3fcfd03ae0e7061045add9e256a77abba547980bbe1a325d1b356, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:07:2a:cc:4a:bb:ff:fa:3d:cd:97:c8:20:
                    22:a8:c0:b1:4f:c9:6d:b1:03:7e:22:99:68:44:37:
                    3a:78:5a:04:f3:95:90:6b:2e:0e:ad:38:2b:16:d1:
                    7e:dc:28:11:9e:20:40:11:49:f8:de:f6:e6:8b:ac:
                    39:d8:94:10:90:d6:bb:d8:8f:fc:b7:61:7a:d4:22:
                    f6:7c:cd:a8:6d:3f:cb:cf:cb:4c:24:ba:8c:42:c1:
                    2b:4c:fc:05:a5:66:ce:fa:e0:e4:33:5d:b1:c3:77:
                    12:45:0b:4f:26:e3:47:a7:d5:9e:70:74:14:4c:42:
                    61:51:0f:8d:97:9e:6a:70:99:bf:1a:a6:65:89:76:
                    21:91:19:17:4e:2a:0c:a3:b2:e4:ed:9d:cb:70:4c:
                    7d:85:7f:8f:9e:3a:54:7c:cc:56:7e:bb:dd:2a:b6:
                    a0:a9:72:2a:d4:6d:f6:88:1e:ce:9c:ed:a0:e6:18:
                    f2:48:c4:0f:9c:7e:a2:1d:9f:33:08:45:ae:3e:18:
                    d7:ad:e6:17:82:d6:32:bc:d0:54:de:d7:b0:15:2d:
                    aa:3e:96:58:bc:71:ae:fa:2c:33:f7:9c:d8:58:fa:
                    1d:42:91:77:bb:dd:9f:11:93:a3:c5:22:8b:66:eb:
                    4e:06:9b:53:30:a1:b8:96:c2:3d:fb:ee:50:55:1e:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E1:87:D0:E1:5C:68:38:33:BB:14:F1:F1:31:29:B9:0E:1F:35:56
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc74e646-f238-4ce9-a399-9ad2f67be94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafe:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:da:bd:55:51:f0:61:4e:d5:f8:50:3c:df:f5:96:97:48:92:
         90:83:e4:cf:08:98:70:f5:de:05:e3:7e:6b:94:d3:da:da:d2:
         6b:65:aa:2d:9b:c6:a8:92:af:e0:7c:c8:ce:38:53:a8:a7:22:
         a3:71:64:8a:73:ac:ae:f7:6b:42:24:3d:75:46:0c:c9:3d:57:
         69:aa:cf:1d:71:a9:41:a2:a2:8f:d3:af:30:3c:a5:5e:c1:39:
         3d:ab:90:59:a3:f4:f5:8c:7e:2f:0c:83:56:4c:81:ff:93:9a:
         0d:2a:b7:fa:53:c3:0d:d6:b5:52:46:ed:f0:cb:98:16:fe:43:
         55:2f:0a:d3:89:d4:9a:d9:88:20:83:cb:f2:85:f4:e4:44:9a:
         17:4c:b6:ca:56:57:0e:0d:e3:95:b8:13:c2:02:13:34:7d:1e:
         d5:f7:8d:a2:28:e5:71:ec:15:00:7c:6a:3e:92:20:2b:78:a1:
         d4:25:00:34:d3:0f:01:6d:5a:e6:37:25:ff:75:fe:56:b2:be:
         93:cf:8e:1d:05:92:68:8f:5e:fe:f5:3a:e3:22:8b:fb:2c:19:
         6b:c8:df:8e:24:65:c1:0f:5d:63:85:e2:a2:c8:6d:0d:c5:c7:
         23:dc:46:b1:d1:2e:ef:ce:59:6b:ae:f8:74:79:5e:c1:99:37:
         17:90:e0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 02:05:58 2024 by rpki-client on console-fra.rpki-client.org