Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd8bb927-2445-4a8c-afa9-cc9fd2839c51.roa
File:                     dd8bb927-2445-4a8c-afa9-cc9fd2839c51.roa (raw, json)
Hash identifier:          gjFlk4luaIdUNivGkfo1s60XhRFKVu/2HnZ8kTGg3YE=
Subject key identifier:   15:0F:25:8E:69:AB:19:B8:37:85:B2:D2:C7:E0:D8:33:B6:3B:6E:1F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       32AA066F3DBD26B906312A71F727C871627F1A39
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd8bb927-2445-4a8c-afa9-cc9fd2839c51.roa
Signing time:             Fri 31 May 2024 00:00:00 +0000
ROA not before:           Fri 31 May 2024 00:00:00 +0000
ROA not after:            Fri 05 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafc:800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:aa:06:6f:3d:bd:26:b9:06:31:2a:71:f7:27:c8:71:62:7f:1a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 31 00:00:00 2024 GMT
            Not After : Jul  5 23:59:59 2024 GMT
        Subject: serialNumber=dcb3731c04ecabbfb75aa3db4790a13852ca7afa3df8e34991e931255252b6fc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:d7:7c:7e:9f:9e:ff:58:a7:bc:a1:1a:72:
                    47:83:46:04:29:1e:ed:37:9f:a7:06:c8:13:8b:27:
                    fb:66:cc:6b:7a:1a:9a:8c:a1:29:25:cc:be:e6:27:
                    8e:f0:fe:89:e6:84:b9:3d:49:3b:00:c5:38:97:8c:
                    0b:41:7a:f7:22:d7:fe:7f:8e:0d:d9:f7:2c:36:b1:
                    0c:8f:5d:f4:fb:29:9b:61:37:7c:da:e8:69:8d:7b:
                    4d:d8:48:55:38:88:b3:f6:5a:79:66:1a:4e:87:78:
                    63:c4:eb:9f:35:0c:e2:04:6e:97:4c:f6:e0:36:3f:
                    e9:50:ba:c2:2f:11:37:0a:ec:52:38:fa:6c:cc:ae:
                    d1:46:53:46:53:48:f5:2c:af:eb:32:de:da:c5:ac:
                    7f:e8:d3:92:1d:16:6f:db:5e:47:38:d5:6e:0f:80:
                    13:92:af:f1:2d:22:4b:2c:85:9f:a6:69:b3:8e:20:
                    93:25:f2:c1:8c:f4:ab:c7:85:34:aa:90:b4:2c:b2:
                    07:9a:25:12:5b:0d:3f:b4:90:fc:ca:86:54:3c:66:
                    fa:7b:e3:6f:b8:9f:a6:3f:70:82:d5:0d:9f:30:dd:
                    53:f7:5a:f6:f0:cf:e9:9e:79:df:91:92:d9:0a:bd:
                    ca:99:48:f6:91:3e:31:5d:24:3d:8e:c1:81:01:44:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0F:25:8E:69:AB:19:B8:37:85:B2:D2:C7:E0:D8:33:B6:3B:6E:1F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd8bb927-2445-4a8c-afa9-cc9fd2839c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafc:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:f4:f6:d1:f8:7d:8e:aa:d5:06:47:ab:ed:a0:ba:01:22:10:
         da:45:a9:fc:69:9c:d7:b1:f2:0d:cf:41:8e:d3:8a:a4:9c:70:
         0e:1b:f9:f2:82:15:fd:de:cc:48:52:b9:f2:0c:ea:e5:88:7f:
         6d:21:9b:93:58:4c:5f:1f:6a:0d:86:bd:3d:4b:6a:ae:f4:d0:
         96:5a:2a:ea:1a:a5:4c:c7:fe:71:8a:1e:98:d7:31:07:1d:1a:
         ef:9f:11:9a:2f:b3:8d:f4:2f:bd:cb:8a:07:9d:8c:eb:21:b7:
         a0:e7:f2:42:6e:5c:79:7b:5d:fa:dd:dd:f7:98:73:ef:df:f4:
         91:4c:e6:5d:e0:2d:37:6e:4c:1c:93:2f:88:55:84:b5:ed:8c:
         62:77:f4:82:f7:d2:ce:6c:13:f1:b3:bf:91:03:ab:8d:f5:bc:
         68:d6:17:8d:5e:08:9f:ad:ef:1a:51:d2:51:77:66:67:fd:c6:
         f6:ed:e1:d3:8a:7e:65:2c:cf:cf:cd:a8:4f:7c:0d:cf:2c:61:
         b8:02:4f:c1:c3:16:d2:ab:d5:ce:88:f7:6d:cd:ce:84:a0:43:
         e4:ed:7a:38:09:f5:ea:0e:94:35:b4:f1:a4:a8:de:12:ee:a2:
         69:87:69:b8:91:39:a5:9b:fb:e1:4e:b8:67:03:e1:c3:02:34:
         ce:16:f5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:56:26 2024 by rpki-client on console-fra.rpki-client.org