Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07c6407-4a6d-4c72-8e3f-4f2d148c1b6d.roa
File:                     e07c6407-4a6d-4c72-8e3f-4f2d148c1b6d.roa (raw, json)
Hash identifier:          yEGCVJIEIErIeeMTbvU3wmGtjNYbkRwn2BXhkW85bH0=
Subject key identifier:   ED:0C:63:30:A7:72:DD:BC:44:16:33:FB:59:F9:39:7A:03:13:5F:E3
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5807572546AC004AA105B68D866FD83EE3C2B6A8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07c6407-4a6d-4c72-8e3f-4f2d148c1b6d.roa
Signing time:             Wed 12 Jun 2024 00:00:00 +0000
ROA not before:           Wed 12 Jun 2024 00:00:00 +0000
ROA not after:            Wed 17 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab8:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Jun 2024 00:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:07:57:25:46:ac:00:4a:a1:05:b6:8d:86:6f:d8:3e:e3:c2:b6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun 12 00:00:00 2024 GMT
            Not After : Jul 17 23:59:59 2024 GMT
        Subject: serialNumber=09b8a4f937a2dbeb70dfc29939babdb746f0936c211a09da67180b05f26709a7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:50:ec:8a:22:e8:62:b2:47:e1:f9:4e:d7:
                    90:a6:8e:ec:e2:6b:93:e2:5d:65:14:00:68:0c:19:
                    c6:79:e0:d4:18:24:da:a0:e8:93:f5:48:16:f9:fe:
                    1b:bb:79:6c:0e:75:7d:98:a4:3a:4c:58:ad:4a:88:
                    84:91:7a:8d:23:10:1e:f1:87:1a:bd:64:13:8b:7c:
                    0f:68:80:48:7a:1b:a6:c2:48:44:5a:d2:77:a6:9e:
                    54:a6:7b:5c:59:15:c1:69:97:fe:11:3b:f3:95:72:
                    32:d7:f7:ab:ab:e6:54:fa:dc:18:74:51:47:c6:ae:
                    49:d0:03:b0:ce:9d:00:50:eb:56:f0:37:5d:ae:f8:
                    b6:78:b5:da:53:bf:db:de:57:3d:33:50:57:ed:c3:
                    ca:40:6d:c2:d2:69:51:83:0d:46:b1:0e:f1:fd:01:
                    9d:7e:8c:44:de:f6:6f:e2:b2:e0:ac:5e:45:2e:d7:
                    d0:1f:e4:25:28:ea:5f:b7:82:66:af:94:cb:f6:f3:
                    4d:30:81:9b:87:8d:a1:36:5c:85:aa:8d:1f:8c:62:
                    7d:f4:08:01:18:52:49:ff:32:e8:ee:39:1c:f9:0b:
                    57:36:9e:1b:db:2c:51:ce:43:db:66:e6:cf:cd:35:
                    7e:da:a2:9b:39:7a:70:6e:e0:f2:28:3c:c3:dc:1a:
                    09:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0C:63:30:A7:72:DD:BC:44:16:33:FB:59:F9:39:7A:03:13:5F:E3
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07c6407-4a6d-4c72-8e3f-4f2d148c1b6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab8:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:ad:b6:97:d8:a7:2a:13:5b:c9:39:ab:72:4a:cd:a7:46:48:
         67:92:cb:32:dc:49:02:8f:8c:0a:0d:37:18:db:86:6d:d8:2b:
         9d:57:c2:5e:9c:bb:93:eb:a7:bd:02:fd:d8:a2:39:f4:83:7a:
         17:77:c5:03:a3:dc:4a:a5:49:64:bc:db:64:60:e6:ac:ea:fe:
         47:18:b4:60:41:a8:e0:77:29:2e:f0:e4:0d:1b:84:a3:43:11:
         27:3b:27:59:a2:b6:86:7f:43:56:3b:9d:a8:71:38:70:61:2c:
         45:f0:18:c2:f7:c1:51:f9:95:af:a1:43:a5:ca:c8:b0:e5:be:
         58:f3:b4:3e:8d:0d:98:bc:e0:ae:84:b4:1b:db:a5:48:36:7d:
         fc:24:de:b5:4a:eb:0d:5c:8c:73:af:1c:ce:b5:0a:71:1e:cb:
         61:ef:42:32:ce:4f:22:54:0d:70:c0:dd:7f:86:3c:56:cc:7f:
         08:f8:ef:37:81:7c:bc:31:40:fc:1b:6b:d9:2b:3e:d5:a8:48:
         56:ec:6c:be:d8:45:8a:0c:0b:30:43:aa:f5:18:7f:97:f9:0b:
         e6:62:e4:86:6f:7b:da:8f:ee:cb:27:82:d5:2b:27:f4:70:22:
         23:d5:00:96:8d:66:8a:bb:44:b1:43:65:a2:a8:ed:95:0b:07:
         b7:8d:ea:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 01:28:16 2024 by rpki-client on console-ams.rpki-client.org