Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f08523a3-9e09-448f-83cd-696ae8bf3990.roa
File:                     f08523a3-9e09-448f-83cd-696ae8bf3990.roa (raw, json)
Hash identifier:          G/iG2QcSDH0qV5994H6v0j4kTGiJuE+rXy0JSk5sHx4=
Subject key identifier:   11:58:3D:B5:50:1E:D2:0D:F7:39:FE:83:EE:9D:1A:90:FA:F3:39:D0
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       321F5D93535926D25557D0BED705EFB69530274F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f08523a3-9e09-448f-83cd-696ae8bf3990.roa
Signing time:             Mon 27 May 2024 00:00:00 +0000
ROA not before:           Mon 27 May 2024 00:00:00 +0000
ROA not after:            Mon 01 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:a000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1f:5d:93:53:59:26:d2:55:57:d0:be:d7:05:ef:b6:95:30:27:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 27 00:00:00 2024 GMT
            Not After : Jul  1 23:59:59 2024 GMT
        Subject: serialNumber=b696865f789fc91cf4cbc308298ca9f2dc7c482cf68207e1fed7a80618f97a6d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2d:6d:56:75:82:17:4a:9c:c7:41:35:98:61:
                    8e:16:ed:dc:ca:cd:5a:3c:b4:44:92:ea:7b:d3:cd:
                    d3:25:2f:e9:43:ec:71:fb:ba:76:e6:e3:d3:b7:52:
                    4e:4f:a6:f1:c6:15:5c:98:f0:90:d7:b0:40:e8:bd:
                    da:16:93:cb:b0:d7:6c:2e:69:b3:49:99:4a:18:43:
                    13:74:62:ae:d6:b8:5f:ac:3f:a3:0e:1a:18:d3:b1:
                    03:7d:cb:b4:4a:d2:3e:30:eb:e1:22:e1:60:51:90:
                    51:41:30:a0:59:70:5d:53:3a:8a:af:44:7b:07:76:
                    78:13:1a:66:65:77:56:3a:c5:8d:90:4c:0d:0e:a5:
                    70:3a:b7:bf:72:58:f1:b6:03:de:93:25:9e:77:84:
                    56:a3:3d:e7:f5:9f:e7:be:8d:e3:13:7e:fb:4e:04:
                    89:fa:39:ab:91:a3:d9:40:cb:7d:8a:d2:ca:59:dd:
                    c1:e8:63:8d:e3:80:1e:ea:1e:53:de:da:be:69:b6:
                    5b:94:31:6f:8d:45:bc:fa:9d:e6:e4:78:65:33:19:
                    4a:66:79:3a:a0:1a:35:22:79:0b:94:a9:28:6a:b6:
                    9a:5c:17:8a:4e:e9:ca:de:4c:9a:3c:5a:3d:45:72:
                    a3:64:cf:38:33:76:66:c0:06:05:85:40:b9:48:59:
                    a1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:58:3D:B5:50:1E:D2:0D:F7:39:FE:83:EE:9D:1A:90:FA:F3:39:D0
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f08523a3-9e09-448f-83cd-696ae8bf3990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:ad:55:f5:5f:69:61:17:5a:5a:11:f4:77:d2:6d:aa:db:34:
         0f:62:ef:ab:12:1a:4a:fd:9d:46:43:4a:bb:97:73:aa:f4:33:
         e0:9f:4f:fe:26:9d:af:13:8f:9c:6f:f2:9c:0f:4b:4c:64:17:
         e5:a5:99:f7:e1:60:91:1e:76:2e:31:4c:6f:ab:56:71:f9:d9:
         5e:3d:c1:9b:61:a7:51:10:3e:af:d7:1a:a3:f4:33:ef:91:fd:
         75:41:b5:ac:59:fd:27:42:92:5b:60:49:36:6d:69:0b:90:50:
         08:91:96:c1:a3:bf:7f:16:48:95:b2:40:27:8d:5e:c0:ad:aa:
         bb:04:70:0b:e0:b4:25:38:a5:51:0a:f5:5b:d8:07:df:03:de:
         9f:dd:32:be:40:be:67:3d:58:d7:8a:1a:f5:7d:7b:c5:aa:0d:
         e8:5f:91:ff:14:5c:24:26:d2:f9:a5:80:e3:5f:28:22:d0:b9:
         81:0a:4b:c4:3a:ec:1f:8b:c2:73:e4:21:ba:72:fb:4b:c3:06:
         67:7c:54:9b:1f:0e:5f:29:f9:11:ab:28:ee:b7:7f:23:c5:f2:
         f9:51:2c:9d:d8:27:4d:86:ce:9d:f8:6a:65:ac:97:10:a3:c7:
         51:b3:0e:a6:e5:3e:f8:b3:57:b5:a7:05:32:47:a1:9c:30:b1:
         cf:ab:ed:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:56:27 2024 by rpki-client on console-fra.rpki-client.org