Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1cce03-c2bd-4309-9698-9b9cadaf0b60.roa
File:                     fd1cce03-c2bd-4309-9698-9b9cadaf0b60.roa (raw, json)
Hash identifier:          4o/XHB/IAUhi5+6xD5n3Ncu2QWmarTtzoEV/u+Et93Q=
Subject key identifier:   89:96:6B:63:19:7F:76:9F:21:C8:99:49:58:A0:77:93:2D:BE:CF:8F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3C10D1CC871431CD5D8BF6F9FE2BC438949F3CFF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1cce03-c2bd-4309-9698-9b9cadaf0b60.roa
Signing time:             Mon 27 May 2024 00:00:00 +0000
ROA not before:           Mon 27 May 2024 00:00:00 +0000
ROA not after:            Mon 01 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:4800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Jun 2024 00:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:10:d1:cc:87:14:31:cd:5d:8b:f6:f9:fe:2b:c4:38:94:9f:3c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 27 00:00:00 2024 GMT
            Not After : Jul  1 23:59:59 2024 GMT
        Subject: serialNumber=0e65fc347aa248829b7b4c1e1d4f7392d4501a55f9eb5bc1ffb3fe75eb87a135, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:b4:e9:ab:1d:cf:ba:21:7e:7c:a2:34:d0:
                    80:66:3d:93:9f:87:02:56:aa:54:ab:ce:a1:39:02:
                    18:b9:92:05:07:11:57:78:b3:08:38:b9:a3:39:8c:
                    5c:34:11:83:52:60:bc:b6:9f:44:e2:77:eb:aa:a4:
                    8b:e1:a0:a6:89:4b:24:7c:91:65:25:11:51:9f:97:
                    73:37:bf:5d:b5:3f:8b:75:20:e9:39:19:1e:50:c4:
                    5e:74:f2:d7:a6:6e:d5:19:6e:3b:c0:58:59:ff:17:
                    5c:92:22:59:65:92:6f:b1:4b:f0:f6:d5:8f:f1:39:
                    66:e5:cb:e8:df:c1:f6:da:8f:3f:6b:01:67:33:71:
                    82:7e:d0:ff:06:6a:5a:b8:6d:19:41:f6:c0:c8:db:
                    6c:4b:d6:46:07:4e:88:8c:c6:92:40:a1:93:d7:f1:
                    fa:e6:e5:31:34:45:ed:5c:94:da:2c:ec:b6:2c:89:
                    34:0f:0a:7d:d1:bb:1e:6e:a8:3b:90:b2:03:f8:e3:
                    42:24:de:65:f6:1d:a3:0f:42:fd:16:29:24:74:a6:
                    cd:13:e3:b4:cf:87:52:26:80:64:6e:1e:fe:dd:e8:
                    27:4e:47:e0:ee:a2:35:82:b8:8e:95:71:ef:89:de:
                    c3:ba:b4:99:d2:28:bf:96:db:2c:05:52:4b:a1:a0:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:96:6B:63:19:7F:76:9F:21:C8:99:49:58:A0:77:93:2D:BE:CF:8F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1cce03-c2bd-4309-9698-9b9cadaf0b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:ec:44:ac:25:02:d7:b2:a3:2c:5a:75:db:67:a7:22:1d:46:
         79:85:08:e9:28:73:a6:bf:c0:c4:da:f7:1b:ca:32:d3:aa:ff:
         a5:19:99:4f:2d:55:f7:b0:35:50:17:fb:67:64:bd:cb:bb:c7:
         02:7a:a2:e6:9b:06:fd:6c:92:49:88:2e:b0:07:08:c5:8f:0a:
         01:4c:d1:00:ae:d3:8e:c1:6a:c9:a2:89:33:08:d3:7f:43:6a:
         c5:be:4c:0a:d2:1c:13:20:00:20:08:97:07:e9:85:dc:03:ce:
         e3:26:8d:6a:b5:21:66:eb:4a:5a:7d:6a:32:97:89:52:ad:6b:
         c9:6e:e8:63:11:13:35:e4:4a:4e:af:93:35:03:01:34:f5:a4:
         49:1f:b4:28:45:88:a7:3f:6f:d8:14:c1:f1:cb:4c:e0:d3:4c:
         65:b1:79:3c:4c:da:5c:3d:eb:ce:bc:97:fc:93:26:4a:29:d4:
         46:53:1a:2b:79:f2:1d:39:c9:ad:45:cd:4c:df:56:11:34:ca:
         7a:c9:10:61:ab:cb:82:82:3b:6e:08:ca:b6:7e:4b:9a:00:26:
         f9:74:f7:5c:ee:b0:f7:4b:fc:1b:04:18:4f:ef:13:a6:11:40:
         d3:f0:24:16:9c:b0:f0:4e:25:99:8d:d0:d3:a9:38:af:b9:e3:
         3d:7a:b0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 16:48:08 2024 by rpki-client on console-fra.rpki-client.org