Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa
File:                     589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa (raw, json)
Hash identifier:          gtS2TewX+zjEAAffyCiJs01VQOuueMmRVg/AUJP/aAs=
Subject key identifier:   5D:E7:8C:6D:CF:64:9D:C5:78:EC:57:45:64:8D:A8:D4:D8:E7:EB:5F
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       3EE50865978744AC096B7C872CAD76F33E4115C2
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa
Signing time:             Mon 11 Mar 2024 00:00:00 +0000
ROA not before:           Mon 11 Mar 2024 00:00:00 +0000
ROA not after:            Mon 15 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:8000:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Mar 2024 03:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e5:08:65:97:87:44:ac:09:6b:7c:87:2c:ad:76:f3:3e:41:15:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Mar 11 00:00:00 2024 GMT
            Not After : Apr 15 23:59:59 2024 GMT
        Subject: serialNumber=527a366a7afc68203b28733fbde996c0530452d35bbcc67e6c201b42d1921e21, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:6f:f7:bc:65:1f:ca:fa:bd:4b:88:a3:c5:
                    1f:4d:f5:59:50:23:e1:7f:1e:b5:67:40:75:33:cd:
                    5a:5b:da:1a:e8:66:78:5c:2c:c6:40:09:db:ed:d7:
                    a6:07:07:43:1f:75:0d:2d:48:dd:aa:4c:52:24:6b:
                    05:89:81:c6:c8:84:28:2d:a3:06:be:fa:dc:e4:4a:
                    da:87:04:38:59:fb:ee:a0:0b:e8:b9:3b:39:32:f1:
                    f6:4f:15:e0:cf:e9:a3:37:25:e1:bf:0f:90:ff:2a:
                    e5:eb:99:7f:05:2c:b0:c5:e2:f3:1a:93:73:d9:c6:
                    e4:e9:8b:2d:2c:a4:93:9c:af:fc:e6:1e:4a:fa:4a:
                    1b:99:02:40:08:32:a0:d4:35:5a:26:6d:09:87:9c:
                    1d:53:5f:be:4c:ff:6d:a4:e6:9d:a9:52:d3:59:37:
                    ae:4c:3e:00:02:57:6a:95:6f:d4:f2:6f:7e:67:eb:
                    df:b3:09:71:2c:37:b3:26:7e:4c:48:05:5a:58:e9:
                    06:f0:42:93:01:35:ef:ee:12:0c:79:87:f0:3a:a6:
                    8d:b4:1f:4d:23:c9:d6:d8:60:31:b6:df:ac:ec:29:
                    7b:80:d4:41:c9:46:6a:2b:df:8e:be:09:69:ae:3a:
                    0c:62:0e:ff:2a:82:ae:c1:8c:1f:70:7c:a0:0a:d7:
                    f0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E7:8C:6D:CF:64:9D:C5:78:EC:57:45:64:8D:A8:D4:D8:E7:EB:5F
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:8000:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:f1:4c:a9:03:91:6f:1d:a1:6e:eb:17:84:24:02:48:97:2b:
         bb:48:83:f7:5f:eb:a6:60:f9:6c:de:56:6f:df:bd:18:32:c1:
         a7:2e:4f:a8:37:5c:3f:e7:0f:bb:59:30:f9:cb:2a:7e:17:f6:
         92:6a:14:d4:4a:e9:de:b5:c3:94:d6:33:6f:1b:6d:34:c7:6d:
         37:88:4f:c0:bd:c3:f2:7e:75:7b:f2:b5:f1:d1:a9:22:72:8f:
         a1:e6:a1:88:d0:d7:b1:36:f4:f6:bd:87:5d:0e:34:03:8f:45:
         c5:a4:06:d8:b4:41:27:c5:29:6d:50:2e:0c:95:0e:83:38:44:
         c8:d7:b3:19:68:fd:66:f8:85:ed:86:eb:58:25:d1:72:9d:a0:
         8d:8b:3d:aa:3b:50:ce:67:3f:5e:a0:ad:fd:5c:17:f0:e6:f6:
         4c:0e:f8:47:b9:ef:ca:91:05:42:16:b9:a3:41:68:2b:3e:66:
         b7:a4:35:2a:65:be:92:60:1e:f5:bd:36:5c:b0:1a:77:dd:46:
         59:7e:73:13:34:18:34:6e:70:ae:78:15:cc:b1:4e:24:14:93:
         b6:59:d1:75:36:9b:9f:d0:cd:3b:d1:dd:c5:9e:6b:a4:62:d0:
         1d:80:6d:4e:2c:42:56:8a:31:71:6c:11:2d:33:e4:c8:46:83:
         76:58:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:07:34 2024 by rpki-client on console-ams.rpki-client.org