Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbe634bd-91d9-4786-a244-0783a5787526.roa
File:                     fbe634bd-91d9-4786-a244-0783a5787526.roa (raw, json)
Hash identifier:          dNJD+ccMdWPjvB1NYUQBQloIvqAtCZDeFFLsjvdq+XM=
Subject key identifier:   70:C5:14:8C:A0:2B:55:3A:C1:C5:04:1F:31:2D:98:A9:50:ED:62:2E
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       795E7C2F436E94717AE3C795BF46E11115D7B966
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbe634bd-91d9-4786-a244-0783a5787526.roa
Signing time:             Sat 16 Mar 2024 00:00:00 +0000
ROA not before:           Sat 16 Mar 2024 00:00:00 +0000
ROA not after:            Sat 20 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:6000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Mar 2024 12:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5e:7c:2f:43:6e:94:71:7a:e3:c7:95:bf:46:e1:11:15:d7:b9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Mar 16 00:00:00 2024 GMT
            Not After : Apr 20 23:59:59 2024 GMT
        Subject: serialNumber=acb42209706bd1d1504ffd1d732ffe0fb3aa3311e58cc1e6a042fb1b36016b39, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f8:5d:16:d1:7f:e5:ff:ab:b8:cf:17:62:88:
                    9c:f6:b9:48:9f:2e:a9:5c:0b:12:15:51:a0:6b:f1:
                    7d:60:c0:fb:78:9d:07:5e:ef:d7:13:1c:b7:27:f6:
                    5f:66:24:ee:73:3c:81:79:f8:93:31:46:2e:cf:53:
                    86:09:01:f9:d3:c2:29:66:fa:64:fa:72:26:a5:f6:
                    61:e2:9c:e2:a8:3b:f9:68:ef:30:a4:c4:6f:ce:b0:
                    a7:dc:5d:05:f2:65:4c:97:97:d9:53:9d:12:0e:c3:
                    e4:f9:3c:17:70:17:01:b7:70:b2:ff:f2:fd:72:9f:
                    49:2c:35:68:26:d1:b6:d8:7a:85:db:45:ba:11:a0:
                    1a:bf:86:bd:b2:63:3a:47:2c:28:42:65:1f:75:d1:
                    c6:1c:f4:fd:b5:a8:20:46:96:1d:f2:fd:75:a2:0c:
                    d6:85:11:81:e3:06:b9:5b:db:62:2a:66:1e:7f:6a:
                    76:d2:d4:63:55:e8:e5:ff:60:14:f3:0f:52:09:d4:
                    a3:ed:79:d7:1b:d0:95:7c:22:d5:81:2b:f6:d0:cb:
                    10:27:f2:cd:0d:bf:b1:7f:c4:8b:db:fa:b2:31:bc:
                    10:cb:6e:40:d8:33:ca:a9:9e:fc:ea:06:0e:76:b3:
                    f3:57:89:15:37:e7:e8:a9:b9:e5:43:5d:b3:ab:be:
                    1b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C5:14:8C:A0:2B:55:3A:C1:C5:04:1F:31:2D:98:A9:50:ED:62:2E
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbe634bd-91d9-4786-a244-0783a5787526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:74:38:84:5a:58:7d:c6:e4:27:08:7c:09:df:22:ae:fe:fd:
         45:97:33:b5:ef:a0:4a:98:bb:26:ec:8e:b2:19:42:30:59:37:
         70:79:0b:99:07:e4:65:15:f1:53:a1:89:b3:fc:97:98:c0:3b:
         25:c0:31:13:6b:cf:ab:84:1f:1c:c8:c4:63:8d:0e:1d:c4:3c:
         3b:16:04:48:e9:53:42:15:ee:08:07:4f:fa:63:1f:8b:82:01:
         f4:17:f9:4b:92:c5:2b:6d:92:12:fc:be:a0:33:63:74:9a:9b:
         a7:26:ff:c2:7a:99:1e:cd:d4:3f:0b:f1:71:c2:1e:45:98:2a:
         96:fa:c6:56:36:d9:a7:4d:76:12:74:f1:f3:7b:55:db:a8:94:
         b0:0e:12:81:2d:80:b0:26:b3:bb:97:e3:ee:69:12:2b:5d:12:
         6c:66:c3:71:0c:13:13:a3:5b:e0:f5:d9:a2:d0:d9:1c:ad:0b:
         d3:11:71:26:34:7b:f5:15:b8:17:91:dc:68:6f:c4:b9:65:d6:
         b8:df:72:9d:2e:f7:9b:2e:dd:e3:3c:a6:35:92:c3:de:66:80:
         af:6f:1d:2e:34:05:63:4a:b7:83:a0:3e:bc:d5:b1:95:64:f4:
         02:45:d1:7c:b5:22:70:cf:65:98:1c:8b:46:1c:37:77:48:d8:
         99:65:e0:54
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUeV58L0NulHF648eVv0bhERXXuWYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDMxNjAwMDAwMFoX
DTI0MDQyMDIzNTk1OVowejFJMEcGA1UEBRNAYWNiNDIyMDk3MDZiZDFkMTUwNGZm
ZDFkNzMyZmZlMGZiM2FhMzMxMWU1OGNjMWU2YTA0MmZiMWIzNjAxNmIzOTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vhdFtF/5f+ruM8XYoic9rlIny6p
XAsSFVGga/F9YMD7eJ0HXu/XExy3J/ZfZiTuczyBefiTMUYuz1OGCQH508IpZvpk
+nImpfZh4pziqDv5aO8wpMRvzrCn3F0F8mVMl5fZU50SDsPk+TwXcBcBt3Cy//L9
cp9JLDVoJtG22HqF20W6EaAav4a9smM6RywoQmUfddHGHPT9taggRpYd8v11ogzW
hRGB4wa5W9tiKmYef2p20tRjVejl/2AU8w9SCdSj7XnXG9CVfCLVgSv20MsQJ/LN
Db+xf8SL2/qyMbwQy25A2DPKqZ786gYOdrPzV4kVN+foqbnlQ12zq74bywIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFHDFFIygK1U6wcUEHzEtmKlQ7WIuMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2ZiZTYzNGJkLTkxZDktNDc4Ni1hMjQ0LTA3ODNhNTc4NzUyNi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba92AwDQYJKoZIhvcNAQELBQADggEBAE50OIRaWH3G5CcIfAnf
Iq7+/UWXM7XvoEqYuybsjrIZQjBZN3B5C5kH5GUV8VOhibP8l5jAOyXAMRNrz6uE
HxzIxGONDh3EPDsWBEjpU0IV7ggHT/pjH4uCAfQX+UuSxSttkhL8vqAzY3Sam6cm
/8J6mR7N1D8L8XHCHkWYKpb6xlY22adNdhJ08fN7VduolLAOEoEtgLAms7uX4+5p
EitdEmxmw3EMExOjW+D12aLQ2RytC9MRcSY0e/UVuBeR3GhvxLll1rjfcp0u95su
3eM8pjWSw95mgK9vHS40BWNKt4OgPrzVsZVk9AJF0Xy1InDPZZgci0YcN3dI2Jll
4FQ=
-----END CERTIFICATE-----
Generated at Thu Mar 28 00:59:37 2024 by rpki-client on console-fra.rpki-client.org