Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa
File:                     589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa (raw, json)
Hash identifier:          +JqMWS09keV1WslqzPsNAJcFVyJRth9Jy0jVZQKPemw=
Subject key identifier:   B5:38:25:AE:E5:58:DE:52:B6:00:9F:5C:37:9E:33:43:B5:05:96:AD
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       5A4D64CD3BA7AC930E25722D69D0E562FD44AA36
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa
Signing time:             Sat 16 Sep 2023 00:00:00 +0000
ROA not before:           Sat 16 Sep 2023 00:00:00 +0000
ROA not after:            Sat 21 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:8000:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 Sep 2023 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4d:64:cd:3b:a7:ac:93:0e:25:72:2d:69:d0:e5:62:fd:44:aa:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Sep 16 00:00:00 2023 GMT
            Not After : Oct 21 23:59:59 2023 GMT
        Subject: serialNumber=95c4740392c721093abd3ba6ef9f5df19b1a5ea70caa4b5eeee4fa5c1fe242cb, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:de:69:c2:3b:e7:7b:2a:48:36:61:0c:78:
                    8a:8c:b1:8f:42:ec:03:39:25:fe:2b:8f:97:80:73:
                    77:58:e2:d4:82:48:9a:43:99:ea:56:75:d1:01:a4:
                    d4:0e:22:dc:a5:b3:f1:af:2e:89:71:7f:0f:de:49:
                    3f:36:b8:0d:76:e8:a6:83:8d:97:dc:64:ec:5e:54:
                    12:90:dc:0e:5b:52:e0:94:1a:46:d4:6d:f4:32:2c:
                    e0:4a:0e:81:d4:f5:99:12:ba:de:39:c8:6f:0c:4d:
                    e0:5f:37:3c:3a:8d:bb:77:b5:ef:54:e4:92:91:ae:
                    6e:7a:5e:f5:36:b2:20:0b:70:d0:6d:70:0d:0c:e4:
                    7f:ae:59:d3:80:3f:64:bf:d9:64:96:a8:18:b1:4b:
                    3e:b5:8d:56:3b:a6:83:1b:d5:5c:80:bc:1f:2f:3e:
                    93:72:ab:0d:57:32:7c:2c:a6:b1:1b:87:42:02:1b:
                    39:ed:3a:01:80:49:d6:f5:2c:9a:19:72:d8:da:66:
                    61:8a:bc:23:9b:f9:ba:a6:e4:8e:12:12:32:2e:74:
                    aa:6c:aa:b9:bd:be:35:85:3a:9c:6f:e2:5a:c9:09:
                    34:9a:ea:fd:35:6c:2d:0d:5f:c6:6b:bb:38:91:32:
                    54:53:2c:d0:31:67:57:91:a4:f0:f1:fd:a0:1a:3e:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:38:25:AE:E5:58:DE:52:B6:00:9F:5C:37:9E:33:43:B5:05:96:AD
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:8000:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:b6:86:2a:9a:d2:cc:c7:84:cb:1b:45:58:b9:31:60:09:89:
         c4:90:1b:6a:92:0f:d3:7b:70:ac:82:67:68:77:45:19:16:2a:
         df:6c:44:a5:09:7f:27:4b:6d:fa:7e:ea:04:9e:e9:e1:88:29:
         dc:e8:60:18:64:66:8a:b5:ed:ce:19:c0:c8:1c:21:d4:08:cc:
         f2:06:85:c1:9c:6f:7a:00:22:cc:36:cc:7c:0f:7a:16:1f:26:
         a4:72:36:df:30:09:e0:7b:7f:3b:fd:c9:3e:32:d5:0d:a6:56:
         81:d3:c0:1a:7c:35:1d:db:6b:83:fa:2a:23:70:49:2a:68:87:
         40:7d:16:6f:36:38:ef:69:ed:3b:ef:51:a4:df:5f:dd:37:88:
         0a:70:98:bc:50:38:69:04:5f:c1:d7:29:c9:0c:cc:90:e0:70:
         1e:12:d0:e6:10:a3:9e:ca:df:7e:72:9f:e5:77:a6:b2:72:51:
         66:0f:01:8e:bf:27:b3:c9:a9:6d:95:44:33:fd:bb:90:9a:73:
         f6:b0:ed:c4:88:5a:d7:94:0a:66:8d:8b:fc:51:45:21:0f:4b:
         6e:44:5b:83:fd:8e:ac:b4:0d:19:d1:bc:03:fc:97:29:cb:b3:
         fc:98:45:bf:6c:ef:a1:d9:68:82:f4:e9:40:ac:10:5d:3b:59:
         be:78:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 16 00:30:27 2023 by rpki-client on console-ams.rpki-client.org