Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17fabf22-42c2-40f2-a722-0048c9eebd2c.roa
File:                     17fabf22-42c2-40f2-a722-0048c9eebd2c.roa (raw, json)
Hash identifier:          DDzgH01ATv0sCRiH5CvfFYGQ39P0cCFHJwc+RMYpYZE=
Subject key identifier:   06:AA:8D:4E:18:13:5F:F4:C7:80:D9:47:EE:D1:7E:5A:DE:85:03:43
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       485DE776E3F7C2AF9DE4A1C33FE8351F2134C58F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17fabf22-42c2-40f2-a722-0048c9eebd2c.roa
Signing time:             Wed 15 Oct 2025 00:50:51 +0000
ROA not before:           Wed 15 Oct 2025 00:50:51 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5d:e7:76:e3:f7:c2:af:9d:e4:a1:c3:3f:e8:35:1f:21:34:c5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Oct 15 00:50:51 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=30da017d0389457e2f4d01b3dfc80c568c65c8fa2e21f64d5aed22dbfcba2f08, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:76:ca:82:db:69:c8:36:91:43:9a:33:ea:
                    05:41:76:63:3c:a1:e8:ec:6d:a3:e6:ce:38:39:5c:
                    80:47:63:9f:f0:15:85:f9:24:c0:23:d6:7e:87:7b:
                    29:21:e7:06:30:f4:bc:aa:51:58:0b:cf:f9:3e:87:
                    8f:f0:a3:84:29:48:67:7d:06:d2:1e:71:03:68:ff:
                    1c:d3:a0:05:44:f6:e2:ca:fc:56:ab:8e:e1:6b:3a:
                    20:32:ea:5f:c0:60:ad:18:7a:ea:55:1f:3c:45:fc:
                    f1:d9:bb:be:c3:7b:ce:d0:15:0c:76:3c:34:ff:33:
                    8c:88:54:a5:87:a6:ae:7d:9d:2c:c9:5e:45:e9:20:
                    a8:1a:02:62:00:57:4d:fc:63:98:a4:0c:d2:2b:92:
                    97:7e:24:b2:15:57:b7:23:aa:84:f5:1a:ed:ca:1c:
                    4c:ac:65:55:55:92:47:e6:25:f8:34:71:b9:1b:7d:
                    be:45:a7:7f:c6:c3:a6:a1:3d:f0:ea:db:ad:45:ec:
                    12:be:b0:ab:1e:ce:15:27:f7:d9:6e:9d:fa:55:b3:
                    22:3b:98:7f:f5:90:2e:65:d9:04:fb:66:a9:1c:da:
                    9a:df:ff:57:ec:c7:07:27:e4:4c:c9:37:73:e1:3f:
                    84:b6:ee:ee:6a:02:89:60:38:36:8e:a5:d0:ef:c4:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AA:8D:4E:18:13:5F:F4:C7:80:D9:47:EE:D1:7E:5A:DE:85:03:43
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17fabf22-42c2-40f2-a722-0048c9eebd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:f8:fd:69:5e:a2:c6:d1:97:50:25:8c:05:c5:ec:05:f1:73:
         8f:1c:07:a4:f9:24:42:07:19:72:a5:ce:46:e0:9d:87:3a:c3:
         df:46:3f:8d:c9:0a:1f:4f:17:0a:d0:f4:93:e7:a3:55:0a:1d:
         56:ea:6d:9e:a1:42:f6:78:dd:76:21:f6:d3:4a:f7:24:53:73:
         b7:69:28:24:e8:52:3c:02:76:53:c8:bc:be:3c:3d:a9:64:d8:
         14:f1:64:70:f3:ad:f4:59:bf:65:a0:de:7a:be:4c:ac:e6:59:
         d6:68:18:ff:00:86:e6:0a:91:ee:19:5e:50:fe:a1:fc:8a:ac:
         d2:36:d6:31:8f:4f:6b:6a:79:5e:96:ac:cd:d5:0d:8f:9a:7e:
         81:f1:a3:fb:88:a9:ef:31:74:c5:ec:9d:c6:98:95:8e:40:0c:
         bc:d4:43:2f:54:d0:07:c4:14:e9:86:da:d3:29:f2:9b:21:87:
         53:63:47:33:32:62:03:42:bc:00:bf:38:b0:4e:b1:53:a1:73:
         b3:ea:3e:43:50:74:35:da:41:a6:12:94:db:b3:63:b5:f9:f6:
         66:ed:c2:81:fa:55:6b:0d:ab:d6:dd:d3:9b:32:bd:61:c5:b4:
         ed:69:57:90:88:8b:0f:0c:4a:2d:76:00:fc:2f:f9:0e:68:2c:
         ee:34:12:70
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIUSF3nduP3wq+d5KHDP+g1HyE0xY8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNTA1MVoX
DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAMzBkYTAxN2QwMzg5NDU3ZTJmNGQw
MWIzZGZjODBjNTY4YzY1YzhmYTJlMjFmNjRkNWFlZDIyZGJmY2JhMmYwODEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1N2yoLbacg2kUOaM+oFQXZjPKHo
7G2j5s44OVyAR2Of8BWF+STAI9Z+h3spIecGMPS8qlFYC8/5PoeP8KOEKUhnfQbS
HnEDaP8c06AFRPbiyvxWq47hazogMupfwGCtGHrqVR88Rfzx2bu+w3vO0BUMdjw0
/zOMiFSlh6aufZ0syV5F6SCoGgJiAFdN/GOYpAzSK5KXfiSyFVe3I6qE9RrtyhxM
rGVVVZJH5iX4NHG5G32+Rad/xsOmoT3w6tutRewSvrCrHs4VJ/fZbp36VbMiO5h/
9ZAuZdkE+2apHNqa3/9X7McHJ+RMyTdz4T+Etu7uagKJYDg2jqXQ78Ql5wIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFAaqjU4YE1/0x4DZR+7RflrehQNDMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzE3ZmFiZjIyLTQyYzItNDBmMi1hNzIyLTAwNDhjOWVlYmQyYy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAba8DANBgkqhkiG9w0BAQsFAAOCAQEAE/j9aV6ixtGXUCWMBcXs
BfFzjxwHpPkkQgcZcqXORuCdhzrD30Y/jckKH08XCtD0k+ejVQodVuptnqFC9njd
diH200r3JFNzt2koJOhSPAJ2U8i8vjw9qWTYFPFkcPOt9Fm/ZaDeer5MrOZZ1mgY
/wCG5gqR7hleUP6h/Iqs0jbWMY9Pa2p5XpaszdUNj5p+gfGj+4ip7zF0xeydxpiV
jkAMvNRDL1TQB8QU6Yba0ynymyGHU2NHMzJiA0K8AL84sE6xU6Fzs+o+Q1B0NdpB
phKU27Njtfn2Zu3CgfpVaw2r1t3TmzK9YcW07WlXkIiLDwxKLXYA/C/5Dmgs7jQS
cA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:28:21 2025 by rpki-client