Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4cc854d-e1b5-4a72-a4e1-0c7288d181cc.roa
File:                     f4cc854d-e1b5-4a72-a4e1-0c7288d181cc.roa (raw, json)
Hash identifier:          bjd5hLY8J+tNJBSNPB48Sc0wgSfup27XZob7HdnTheY=
Subject key identifier:   AE:67:46:FB:A6:54:B4:FA:20:80:D5:4E:06:79:6D:22:98:40:3C:56
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       52775D100B91241027FD929067D2EE905ABB5BEE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4cc854d-e1b5-4a72-a4e1-0c7288d181cc.roa
Signing time:             Fri 21 Jun 2024 00:00:00 +0000
ROA not before:           Fri 21 Jun 2024 00:00:00 +0000
ROA not after:            Fri 26 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafc:c000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Jun 2024 00:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:77:5d:10:0b:91:24:10:27:fd:92:90:67:d2:ee:90:5a:bb:5b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun 21 00:00:00 2024 GMT
            Not After : Jul 26 23:59:59 2024 GMT
        Subject: serialNumber=6807a3167fb5327f3e4906a41929905ca2acf17a55522a287d8b7be410832ccb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:23:d5:89:72:a2:a4:5d:dc:20:cd:a0:30:60:
                    bc:78:21:76:a2:30:11:80:d6:ac:12:26:9e:17:7f:
                    59:13:06:d0:2f:16:40:5e:6e:b4:46:97:70:54:1d:
                    d4:bd:31:48:4e:39:11:32:45:06:d7:e9:93:f4:09:
                    a8:88:a2:23:90:28:80:b3:02:64:2e:86:fb:14:fe:
                    fa:2f:21:ec:0e:8d:4c:eb:a4:ff:71:cc:6f:ab:ac:
                    ce:28:36:cc:ae:2b:b8:d3:be:21:89:b8:6b:54:f1:
                    ed:35:07:cd:3d:91:e7:c1:04:72:ba:d4:29:43:2f:
                    b6:32:64:e1:16:4f:fc:8a:47:db:c9:dc:49:82:a8:
                    d9:81:ae:6d:7d:c7:32:95:fa:70:81:c4:10:5c:08:
                    14:54:e9:00:0b:ae:77:37:b4:7f:3a:a2:73:e2:b3:
                    d5:eb:c5:77:ee:b4:e8:41:2f:21:9a:00:32:72:fc:
                    c6:b4:8b:af:cd:35:ce:51:b6:bc:d0:b2:88:b6:34:
                    08:54:f3:66:5b:a7:cd:ee:54:0f:9a:ad:0f:96:27:
                    a1:ff:9a:62:43:9a:9f:1b:e0:2b:df:98:ca:67:b3:
                    10:54:ce:b1:b0:cd:07:9c:0a:f9:76:8e:a1:33:c2:
                    37:22:45:55:7d:11:79:0a:04:46:58:e0:a7:d1:fa:
                    45:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:67:46:FB:A6:54:B4:FA:20:80:D5:4E:06:79:6D:22:98:40:3C:56
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4cc854d-e1b5-4a72-a4e1-0c7288d181cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafc:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:81:e3:7e:5e:a5:87:c3:b8:56:db:e2:0f:17:d0:05:33:cf:
         31:76:cd:26:37:41:2e:0a:d7:6d:c6:d4:9c:92:67:51:53:42:
         12:5c:91:4c:a9:e5:4e:40:ab:0e:6f:4b:66:c4:c6:17:a1:6f:
         ee:fb:b5:95:a9:33:53:9a:19:17:8a:70:4d:f7:03:04:93:48:
         44:56:90:78:09:f0:59:bc:2d:45:9a:4f:b1:34:86:77:5f:37:
         26:f1:9e:12:8c:16:b1:d3:79:57:1d:a0:a5:e3:4f:61:65:79:
         29:a8:11:82:d2:b8:ac:ca:b7:51:65:77:00:3d:e8:b1:71:24:
         5a:06:26:3f:1f:56:70:60:4a:ba:aa:8c:eb:03:59:de:af:6c:
         f6:c3:49:1d:ae:45:02:ea:47:06:4d:17:a1:e6:ba:9b:21:71:
         71:ac:ed:84:c4:24:f3:bb:05:19:36:b6:ce:ea:14:c5:92:3c:
         aa:eb:ad:da:0c:55:cc:0f:14:d9:6f:04:48:27:ba:7c:72:14:
         46:4f:fd:a1:ed:58:4f:cb:a7:0c:e1:f5:c4:6e:8c:fd:6d:6b:
         59:3b:f3:31:86:18:3a:89:f4:e8:e4:67:b4:70:bb:f9:b8:c0:
         a7:f5:54:0a:11:2e:01:53:b6:cf:c1:21:ee:ed:61:c1:43:c7:
         20:22:c2:78
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUUnddEAuRJBAn/ZKQZ9LukFq7W+4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDYyMTAwMDAwMFoX
DTI0MDcyNjIzNTk1OVowejFJMEcGA1UEBRNANjgwN2EzMTY3ZmI1MzI3ZjNlNDkw
NmE0MTkyOTkwNWNhMmFjZjE3YTU1NTIyYTI4N2Q4YjdiZTQxMDgzMmNjYjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iPViXKipF3cIM2gMGC8eCF2ojAR
gNasEiaeF39ZEwbQLxZAXm60RpdwVB3UvTFITjkRMkUG1+mT9AmoiKIjkCiAswJk
Lob7FP76LyHsDo1M66T/ccxvq6zOKDbMriu4074hibhrVPHtNQfNPZHnwQRyutQp
Qy+2MmThFk/8ikfbydxJgqjZga5tfccylfpwgcQQXAgUVOkAC653N7R/OqJz4rPV
68V37rToQS8hmgAycvzGtIuvzTXOUba80LKItjQIVPNmW6fN7lQPmq0Plieh/5pi
Q5qfG+Ar35jKZ7MQVM6xsM0HnAr5do6hM8I3IkVVfRF5CgRGWOCn0fpFAwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFK5nRvumVLT6IIDVTgZ5bSKYQDxWMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2Y0Y2M4NTRkLWUxYjUtNGE3Mi1hNGUxLTBjNzI4OGQxODFjYy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba/MAwDQYJKoZIhvcNAQELBQADggEBAEuB435epYfDuFbb4g8X
0AUzzzF2zSY3QS4K123G1JySZ1FTQhJckUyp5U5Aqw5vS2bExhehb+77tZWpM1Oa
GReKcE33AwSTSERWkHgJ8Fm8LUWaT7E0hndfNybxnhKMFrHTeVcdoKXjT2FleSmo
EYLSuKzKt1FldwA96LFxJFoGJj8fVnBgSrqqjOsDWd6vbPbDSR2uRQLqRwZNF6Hm
upshcXGs7YTEJPO7BRk2ts7qFMWSPKrrrdoMVcwPFNlvBEgnunxyFEZP/aHtWE/L
pwzh9cRujP1ta1k78zGGGDqJ9OjkZ7Rwu/m4wKf1VAoRLgFTts/BIe7tYcFDxyAi
wng=
-----END CERTIFICATE-----
Generated at Mon Jun 24 01:28:16 2024 by rpki-client on console-ams.rpki-client.org