Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e69d97aa-b68a-4fc2-846c-38f589c4786e.roa
File:                     e69d97aa-b68a-4fc2-846c-38f589c4786e.roa (raw, json)
Hash identifier:          YrkQpgbu5vdyfAHye8GOUtWBxkK3Pjr6KiU+iSiBuTA=
Subject key identifier:   88:ED:53:D9:BE:19:B2:83:D0:4B:EA:D6:BB:4F:C1:F1:26:BF:45:89
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       47FA4077F5472CA2E013B2ADFE7253B9F667C6F5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e69d97aa-b68a-4fc2-846c-38f589c4786e.roa
Signing time:             Tue 29 Jul 2025 00:10:13 +0000
ROA not before:           Tue 29 Jul 2025 00:10:13 +0000
ROA not after:            Tue 02 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:7040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 Aug 2025 18:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fa:40:77:f5:47:2c:a2:e0:13:b2:ad:fe:72:53:b9:f6:67:c6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 29 00:10:13 2025 GMT
            Not After : Sep  2 23:59:59 2025 GMT
        Subject: serialNumber=f241fc5cf011ad92358afa94163040e1b771132f3dd41fb59cd481d39d90d19e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c0:6a:12:e2:f1:51:d7:9a:d5:65:4d:e3:96:
                    d4:54:b1:4e:a9:af:3b:4d:ea:33:26:16:fe:ea:e4:
                    0d:3f:18:21:69:9a:f1:9a:be:93:38:9c:98:76:2f:
                    58:65:61:1e:43:df:8b:59:f8:d1:54:31:74:e6:02:
                    2f:be:46:b3:f8:d9:9d:7e:c4:a0:1b:8d:92:95:86:
                    65:c0:56:e3:ad:68:fa:1d:6b:50:c5:24:2d:4e:89:
                    8b:a0:42:b6:f7:59:2d:9c:ce:84:a8:fd:60:45:16:
                    f2:2e:28:48:82:4f:22:fa:23:c4:1e:fe:46:27:8e:
                    58:a2:55:6a:f8:0e:b3:a8:f8:1e:ae:52:da:3b:4c:
                    73:3c:5e:42:26:22:ca:c0:7a:19:d3:ef:85:ad:97:
                    06:f2:e8:48:72:eb:99:63:3d:fd:33:e7:d8:8d:89:
                    c0:cb:50:ca:b8:90:17:06:49:84:4d:ee:6d:7a:5a:
                    50:3e:c4:24:86:e8:e2:07:da:69:f9:12:39:1e:6d:
                    ad:9d:ff:f9:64:ad:f4:b2:aa:60:fc:6e:cd:70:b8:
                    cb:fc:a9:6b:3d:94:c3:91:74:fe:38:bb:ef:4a:dc:
                    9e:de:14:ab:72:56:63:ba:56:2e:38:95:1a:56:2d:
                    de:19:8b:76:73:41:bc:95:f2:c5:c5:61:f2:fd:d1:
                    4b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:ED:53:D9:BE:19:B2:83:D0:4B:EA:D6:BB:4F:C1:F1:26:BF:45:89
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e69d97aa-b68a-4fc2-846c-38f589c4786e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:7040::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:94:72:6b:f5:bf:7d:82:ee:29:10:d3:2d:60:ed:d4:4e:aa:
         4c:7a:b6:ef:78:0f:0e:4a:53:4f:14:c9:54:8e:28:11:ca:01:
         52:2c:aa:3c:73:d3:62:a9:19:84:b4:d4:b9:1d:8c:33:74:33:
         c9:0e:ae:98:62:4e:5a:98:01:e4:15:2a:cc:d0:7e:c8:5a:81:
         29:f1:b3:ff:f3:2e:66:c2:1c:d3:1e:82:28:85:ce:41:6f:a0:
         c3:e2:1b:c9:18:ee:fd:ac:66:27:dc:11:4c:2c:27:b9:c4:1e:
         ab:5e:38:d0:4f:53:3a:a2:d6:59:1c:27:f4:76:04:34:98:8f:
         35:be:09:ee:38:36:55:3a:ce:c6:b5:4b:7b:fb:7c:f1:bb:bc:
         1e:ce:7d:dc:e5:39:1c:2b:67:e1:3c:75:ae:4f:3f:da:16:0c:
         ca:86:bd:5c:f2:70:05:bc:44:e5:7d:ec:df:e4:bc:da:8d:81:
         af:b5:d6:d8:78:da:cf:cf:e7:db:cb:c2:09:dc:17:50:ea:80:
         99:f5:9c:f5:99:3d:0e:3c:24:c3:04:a3:22:00:9f:ab:f2:7c:
         c0:7c:85:41:5b:7e:e7:5d:dc:3e:86:34:e0:f2:79:2f:44:f4:
         e5:68:c0:15:2e:49:f7:bc:ad:8a:9e:3d:8f:34:87:ef:71:c0:
         7c:0b:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:03:53 2025 by rpki-client