Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ffa6b6d9-2bc2-429d-a6a8-618638babf4a.roa
File:                     ffa6b6d9-2bc2-429d-a6a8-618638babf4a.roa (raw, json)
Hash identifier:          BjkUeViOpoJpnJLEvjzWVG8SAbQycZBlD6tEj091XGw=
Subject key identifier:   DA:A2:62:FC:12:81:90:7E:61:C5:88:E5:17:4E:43:C9:D4:0B:1B:75
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3180C2A04219D999E120C10C2CF2CE8AD0AB4E32
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ffa6b6d9-2bc2-429d-a6a8-618638babf4a.roa
Signing time:             Wed 09 Jul 2025 00:00:38 +0000
ROA not before:           Wed 09 Jul 2025 00:00:38 +0000
ROA not after:            Wed 13 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        43.208.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 Aug 2025 18:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:80:c2:a0:42:19:d9:99:e1:20:c1:0c:2c:f2:ce:8a:d0:ab:4e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul  9 00:00:38 2025 GMT
            Not After : Aug 13 23:59:59 2025 GMT
        Subject: serialNumber=854103874e10e6af819b18ba59a9c3b66c25276781dcd382c9649ce702ce570e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f1:09:0c:9a:b2:a4:8f:7d:42:93:d4:ca:1c:
                    df:4b:86:21:76:87:54:cd:81:42:48:12:40:6f:ad:
                    8d:a2:50:dd:14:b4:1a:6d:13:1f:e6:61:1a:f9:25:
                    cd:fa:d1:d4:9c:9f:94:fa:0c:65:e8:53:53:22:f8:
                    2d:cb:d9:80:14:85:da:67:0b:a3:8e:20:1d:17:2c:
                    e4:86:98:4b:2a:a5:13:65:f9:66:23:01:2d:5e:89:
                    4b:68:d7:ca:aa:a6:1f:1b:e6:72:97:1f:fa:4a:b7:
                    6f:b2:e6:55:6e:ae:ba:97:2c:7f:a2:97:5b:c5:da:
                    9a:03:3a:0b:a7:ce:30:b9:51:f4:9f:79:48:9a:0e:
                    18:2d:c5:f2:13:0c:a1:c7:cc:0c:b3:b4:51:0c:79:
                    ef:23:04:13:d0:75:dd:8d:74:4b:72:f0:69:92:0a:
                    65:22:fc:25:10:83:f1:47:92:48:ae:d1:e5:d7:3b:
                    9c:26:11:00:68:90:31:d2:f3:ff:96:2a:e8:d7:7a:
                    87:d8:2c:9a:e3:7d:f7:71:72:49:67:7e:15:58:90:
                    7e:76:e1:de:01:23:ae:db:7a:9c:59:95:74:fe:04:
                    6d:b9:3f:19:5f:6f:21:d8:14:6f:a0:47:cb:40:84:
                    1f:83:1f:5d:d1:43:d2:fd:20:95:9c:1d:fa:63:93:
                    d0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A2:62:FC:12:81:90:7E:61:C5:88:E5:17:4E:43:C9:D4:0B:1B:75
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ffa6b6d9-2bc2-429d-a6a8-618638babf4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.208.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         5d:43:c9:f3:4d:74:43:96:2e:5a:49:f3:4b:06:ee:dc:9e:7c:
         a1:bb:52:10:0b:50:c2:d3:1f:29:14:3b:9d:5a:04:6f:68:f2:
         18:ef:4b:3a:85:f4:f3:a7:21:1a:56:6f:3c:08:ef:b5:5b:d0:
         57:97:11:97:12:e3:cc:50:92:e8:55:cd:fd:2c:46:de:0e:81:
         57:59:d7:be:69:f4:bf:23:1f:ea:63:73:f0:5b:77:50:e6:f4:
         9d:ad:5f:96:bc:eb:c8:e1:af:a8:2e:ec:b2:5f:d2:b8:aa:c0:
         04:37:af:41:aa:89:ec:8b:b5:ab:44:ce:9b:82:ca:b0:fb:25:
         b1:df:1a:e9:d1:41:b9:6a:d7:25:a3:5c:e5:1e:fd:2e:b2:8d:
         20:0b:63:49:84:82:9e:e7:bf:fc:5b:fc:8b:58:ef:2b:26:ab:
         e3:29:db:cf:a6:26:ea:96:54:4b:45:96:e2:0d:83:84:51:3a:
         cd:b8:a1:a3:79:51:e4:7b:3d:38:27:a6:a4:9f:17:a8:59:e3:
         5b:50:4e:2c:a8:31:07:b1:20:84:b5:34:ea:a0:82:0d:cb:77:
         bc:a7:ab:d0:13:3e:15:c9:40:cb:2f:6e:7a:cb:bf:6e:2d:6c:
         8e:d7:f9:82:af:99:2f:ff:7b:80:e2:7b:91:34:c6:5a:2f:2f:
         a1:7f:0e:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 31 00:57:21 2025 by rpki-client