Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecadad04-3a27-41ee-a687-4b1661f3c07e.roa
File:                     ecadad04-3a27-41ee-a687-4b1661f3c07e.roa (raw, json)
Hash identifier:          ldnY7LNukv05Xn+bw14K/oI+MAIaoPDyZPDZ5wJ0cWk=
Subject key identifier:   7E:7A:E7:78:86:BC:C4:E3:B3:2F:3B:A9:C9:53:2C:44:60:F4:9A:8F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0E35936E8DCABC577D86EBB0A620A0D28516F14D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecadad04-3a27-41ee-a687-4b1661f3c07e.roa
Signing time:             Fri 21 Jun 2024 00:00:00 +0000
ROA not before:           Fri 21 Jun 2024 00:00:00 +0000
ROA not after:            Fri 26 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf1:4800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Jun 2024 00:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:35:93:6e:8d:ca:bc:57:7d:86:eb:b0:a6:20:a0:d2:85:16:f1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun 21 00:00:00 2024 GMT
            Not After : Jul 26 23:59:59 2024 GMT
        Subject: serialNumber=3d07d0a0cb7817b0308fa5c66802bdd653f2a2832ee20df040e7f921ac8d4af7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:11:3b:ef:87:ad:e4:5d:91:cd:76:01:89:
                    a0:37:aa:fe:b2:8d:23:c5:ff:b5:a5:ad:b8:4c:45:
                    b1:e6:7f:3e:af:93:b0:98:f3:77:04:88:73:68:cd:
                    cc:8b:82:2d:9e:99:85:b3:0a:70:b1:0f:b3:61:18:
                    ac:97:98:9a:f1:16:2c:7e:f3:25:88:0a:5e:72:8c:
                    e4:0e:5d:e7:b2:26:b1:78:9c:2b:81:05:85:ff:3c:
                    ae:92:19:7d:4d:ac:37:6e:6f:31:0c:e4:5f:a6:c9:
                    97:f9:15:f0:4c:35:9d:d0:25:75:1d:f3:e4:82:34:
                    0a:b2:03:34:1b:7d:a3:82:91:e4:2a:cf:8f:af:43:
                    bf:77:a0:2a:d0:cf:73:32:fc:79:7e:37:ee:e5:e4:
                    9e:82:50:b3:5e:62:93:0d:ba:3c:ab:1c:3a:75:6b:
                    cc:89:84:53:b2:3a:5d:89:8f:2c:52:42:3e:fc:5f:
                    a7:d2:6f:35:03:cb:30:8d:09:1d:90:f3:6e:af:0d:
                    e9:5b:67:26:0e:9c:a4:3a:7b:89:de:6d:f5:eb:de:
                    2e:60:2e:c7:15:cc:f3:65:15:bc:00:d4:3e:ee:4a:
                    35:9d:67:b8:2d:6b:2d:16:78:5d:39:ea:d4:fb:38:
                    1e:de:b7:e1:f6:60:cb:aa:27:91:f3:6d:86:b6:51:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7A:E7:78:86:BC:C4:E3:B3:2F:3B:A9:C9:53:2C:44:60:F4:9A:8F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecadad04-3a27-41ee-a687-4b1661f3c07e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf1:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:8a:75:8e:8b:cf:fb:08:fd:6d:b1:d5:da:77:46:3f:26:43:
         a6:86:a0:b2:72:bf:84:37:60:70:19:a4:62:38:df:d5:d8:83:
         24:17:e4:fd:c4:88:1f:72:54:63:2d:43:f9:85:89:b2:c5:3f:
         fe:82:f2:32:99:1b:9a:20:0b:f7:b0:98:26:f1:a1:a4:63:3b:
         ba:6e:0d:09:3e:29:85:87:f6:3a:7e:76:0f:a1:e6:6d:1b:45:
         84:a6:03:2e:9b:0c:a2:4c:89:2a:f2:80:12:fc:a9:42:e8:42:
         aa:7b:f2:97:2a:6d:4f:89:42:f0:3c:8e:74:1a:03:51:e6:cf:
         b7:2e:38:dc:61:8b:20:c8:57:0b:74:ce:ee:6c:f5:1a:1d:bf:
         8e:c2:e3:fd:a9:3b:f4:04:50:04:f0:b3:e7:69:95:cc:33:1d:
         32:4a:43:3a:5d:7c:c3:a6:ff:74:a0:aa:3c:c1:3c:81:12:7d:
         7c:51:43:bb:29:10:13:00:1b:2f:4f:02:f5:08:1a:4b:15:99:
         f1:0d:49:26:59:f7:1b:21:93:e1:23:bd:c2:5b:60:4e:9b:df:
         c6:1a:1f:9e:13:a1:c6:16:58:2b:04:ea:2a:e7:ec:c3:d1:cf:
         e2:b9:59:c3:50:65:41:6b:34:41:d8:26:20:38:a5:1b:60:42:
         39:36:05:51
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUDjWTbo3KvFd9huuwpiCg0oUW8U0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDYyMTAwMDAwMFoX
DTI0MDcyNjIzNTk1OVowejFJMEcGA1UEBRNAM2QwN2QwYTBjYjc4MTdiMDMwOGZh
NWM2NjgwMmJkZDY1M2YyYTI4MzJlZTIwZGYwNDBlN2Y5MjFhYzhkNGFmNzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNURO++HreRdkc12AYmgN6r+so0j
xf+1pa24TEWx5n8+r5OwmPN3BIhzaM3Mi4ItnpmFswpwsQ+zYRisl5ia8RYsfvMl
iApecozkDl3nsiaxeJwrgQWF/zyukhl9Taw3bm8xDORfpsmX+RXwTDWd0CV1HfPk
gjQKsgM0G32jgpHkKs+Pr0O/d6Aq0M9zMvx5fjfu5eSeglCzXmKTDbo8qxw6dWvM
iYRTsjpdiY8sUkI+/F+n0m81A8swjQkdkPNurw3pW2cmDpykOnuJ3m31694uYC7H
FczzZRW8ANQ+7ko1nWe4LWstFnhdOerU+zge3rfh9mDLqieR822GtlHxTwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFH5653iGvMTjsy87qclTLERg9JqPMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2VjYWRhZDA0LTNhMjctNDFlZS1hNjg3LTRiMTY2MWYzYzA3ZS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba8UgwDQYJKoZIhvcNAQELBQADggEBAGSKdY6Lz/sI/W2x1dp3
Rj8mQ6aGoLJyv4Q3YHAZpGI439XYgyQX5P3EiB9yVGMtQ/mFibLFP/6C8jKZG5og
C/ewmCbxoaRjO7puDQk+KYWH9jp+dg+h5m0bRYSmAy6bDKJMiSrygBL8qULoQqp7
8pcqbU+JQvA8jnQaA1Hmz7cuONxhiyDIVwt0zu5s9Rodv47C4/2pO/QEUATws+dp
lcwzHTJKQzpdfMOm/3SgqjzBPIESfXxRQ7spEBMAGy9PAvUIGksVmfENSSZZ9xsh
k+EjvcJbYE6b38YaH54TocYWWCsE6irn7MPRz+K5WcNQZUFrNEHYJiA4pRtgQjk2
BVE=
-----END CERTIFICATE-----
Generated at Tue Jun 25 02:50:52 2024 by rpki-client on console-fra.rpki-client.org