Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e24f6e7d-d541-4c32-b687-f5f034742eb4.roa
File:                     e24f6e7d-d541-4c32-b687-f5f034742eb4.roa (raw, json)
Hash identifier:          Gy/P8Dtr+woOLU21pWlnw83DyjhIlipAz5Zx42ZrPOE=
Subject key identifier:   77:5D:D0:39:72:69:DA:FD:FA:C7:AF:F7:40:6B:29:8F:89:5E:29:90
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       18734B89E5E787B59F057AA1AC592F951AB2511B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e24f6e7d-d541-4c32-b687-f5f034742eb4.roa
Signing time:             Tue 16 Jul 2024 00:00:00 +0000
ROA not before:           Tue 16 Jul 2024 00:00:00 +0000
ROA not after:            Tue 20 Aug 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da70:b000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jul 2024 00:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:73:4b:89:e5:e7:87:b5:9f:05:7a:a1:ac:59:2f:95:1a:b2:51:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 16 00:00:00 2024 GMT
            Not After : Aug 20 23:59:59 2024 GMT
        Subject: serialNumber=8252dded5fa0e5baf5590c209ae101518cbf652fbad488cef0ddd2c247453cac, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:25:ae:65:dc:d6:2e:f8:67:cb:15:e4:d5:
                    78:25:88:4c:76:37:83:12:4e:87:3d:23:11:c7:4a:
                    fc:e0:24:22:8e:b3:b9:d5:e5:c0:af:5c:04:54:10:
                    b0:b6:c2:a3:84:cd:58:2d:1e:c2:29:95:2a:13:d1:
                    ab:8c:94:0d:a6:f8:ec:bd:bc:81:a8:99:dd:f7:68:
                    30:d7:da:22:c4:97:ab:da:4d:c2:ef:cd:8b:62:b1:
                    9a:56:78:00:28:a8:58:ac:f2:9b:72:d9:36:31:86:
                    ab:5e:35:e4:86:fd:4b:b0:06:67:a9:93:5c:e3:c1:
                    e5:3b:c8:9f:be:76:17:e6:1e:71:34:71:0e:29:ce:
                    21:ac:3f:10:db:31:be:75:38:6b:fe:31:bd:bf:11:
                    b7:b2:a0:04:f0:46:7a:ef:20:9f:05:3f:9e:1f:f3:
                    79:2f:66:16:a5:de:35:50:7b:41:cd:bc:e0:02:1e:
                    1b:f4:df:f2:31:87:a0:da:ee:70:7a:a2:ab:dc:d7:
                    52:b6:fb:31:42:cb:22:42:1b:69:48:a2:4e:4a:dd:
                    34:91:47:ef:2e:70:e6:4d:68:ae:ee:df:e6:57:b5:
                    40:9a:20:39:14:b7:ba:73:3d:e4:a1:f5:55:c3:df:
                    7e:90:df:51:44:56:d9:5b:e9:70:b2:9e:66:c4:bd:
                    75:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5D:D0:39:72:69:DA:FD:FA:C7:AF:F7:40:6B:29:8F:89:5E:29:90
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e24f6e7d-d541-4c32-b687-f5f034742eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da70:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:c7:fd:7d:60:d7:c3:cd:6a:fe:e3:31:41:58:40:db:66:ab:
         0f:e8:f3:d3:84:d9:df:07:0b:58:6b:c0:8a:b2:07:e4:65:38:
         a1:fd:be:d6:6d:92:ec:73:fe:2c:21:09:3c:6d:f9:f7:62:13:
         05:35:be:f4:5d:7f:d8:6c:2a:e9:60:7c:0a:1c:74:5f:c0:6b:
         cb:1c:29:2b:b0:37:09:c9:cb:14:a7:48:8c:ee:3d:c2:9e:9d:
         b0:34:79:1f:33:51:5c:f1:19:95:d2:9a:47:4c:71:b8:8b:c7:
         70:39:50:3f:7a:d0:d2:3d:aa:9d:61:29:bd:2f:67:f3:73:15:
         c7:e9:4f:1c:47:88:cc:2c:2e:e7:cd:ec:a5:50:2f:fa:6b:70:
         f4:67:98:09:59:1d:a0:8c:6d:31:6c:26:2c:4b:3a:29:f0:89:
         10:b7:d1:4b:f7:26:97:26:f4:53:45:b6:0c:15:e2:3b:8d:ed:
         ee:44:5f:1d:f8:72:a8:6c:14:bf:6e:7f:82:44:ab:43:4e:37:
         46:97:19:3a:24:7c:11:eb:19:19:e9:93:fb:52:70:97:b2:cf:
         8d:8f:97:58:2a:12:12:fc:21:7e:4d:28:0c:6b:40:68:77:5b:
         83:fb:d4:b8:55:65:56:d7:58:c7:32:5d:14:c2:c9:4c:59:5f:
         cb:04:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 01:05:27 2024 by rpki-client on console-ams.rpki-client.org