Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa
File:                     25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa (raw, json)
Hash identifier:          1TLAuVcTuYRkp7BstshvfFF/KuB51pqu6wdpEuJVgOY=
Subject key identifier:   FC:A0:98:E9:04:B6:40:63:49:E0:A0:27:0D:16:F6:40:3B:7A:55:6A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       12DF24F7DC0CA053EDF6CEA6A03B27C55EDB92B9
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa
Signing time:             Fri 10 Oct 2025 00:00:51 +0000
ROA not before:           Fri 10 Oct 2025 00:00:51 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:df:24:f7:dc:0c:a0:53:ed:f6:ce:a6:a0:3b:27:c5:5e:db:92:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Oct 10 00:00:51 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=20d65dcbe82ddd3bfc1f67af5ef41fef8f2ddbc06988a7eceb2e5c24bc08e0f2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:86:66:4b:56:a5:46:22:b2:dd:7e:54:43:05:
                    b6:4b:09:e0:60:b9:88:13:98:38:ed:fd:96:39:9d:
                    63:f1:25:77:3e:d5:42:69:b2:16:c6:cb:ca:32:60:
                    ac:4b:4f:64:c9:2f:95:22:37:7b:a2:2f:1b:03:d4:
                    06:3a:cf:90:be:b3:c9:bc:f1:60:e4:e7:a4:eb:f5:
                    1a:31:68:3d:56:b5:4a:71:4b:ef:31:ab:d7:b3:6a:
                    3a:c2:63:8e:de:02:8a:96:38:e6:8c:a8:92:8d:f5:
                    4b:43:69:53:a7:15:1e:8e:01:70:9c:17:9c:f0:e4:
                    df:66:ca:53:f0:c4:01:52:d3:c1:5e:8e:ce:d0:44:
                    da:e5:a7:4b:5c:b5:11:2a:4c:93:a7:9f:41:f8:69:
                    c9:02:fa:67:f7:9e:d9:7e:4a:b9:23:6b:7d:7a:34:
                    20:da:bf:84:a7:0f:99:74:25:5b:26:73:e6:4b:89:
                    b1:ed:69:e3:3b:2d:96:3b:37:be:64:b9:09:b5:3b:
                    37:1e:97:5c:4a:77:82:09:1f:bc:b4:69:da:03:97:
                    4c:d0:cd:77:ba:e0:b4:d3:de:66:25:57:38:26:1d:
                    6e:a5:a6:a2:e1:51:e6:d2:19:94:db:db:07:00:6f:
                    44:3d:f3:ca:84:5f:e2:a9:89:b3:fb:da:36:e4:86:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A0:98:E9:04:B6:40:63:49:E0:A0:27:0D:16:F6:40:3B:7A:55:6A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:8e:f5:16:85:f0:f1:15:09:b0:cd:58:4d:95:cb:e1:ef:fd:
         d7:0b:55:f6:c3:df:49:65:d9:8e:bc:d2:c3:46:df:d9:5d:65:
         65:f5:1b:c0:5e:96:39:7c:76:36:b9:1d:bc:21:e1:0b:d8:d8:
         55:d0:e7:a3:c6:e8:95:14:25:14:ec:16:f4:b4:f9:f4:13:2c:
         b7:b1:2f:29:8e:02:65:e2:39:25:eb:1f:ab:2f:71:d7:77:40:
         a5:c0:6c:d2:1f:82:60:56:fd:ae:fd:c1:57:75:f1:2d:49:9b:
         2a:26:52:c3:6f:02:de:e1:d1:0e:c4:0c:de:84:91:2f:67:92:
         4c:59:99:18:e2:bd:dd:e5:4e:79:20:23:f6:c1:a6:6a:43:9e:
         3c:e8:07:65:fd:42:c9:1a:a9:dc:68:b8:26:4c:b2:8f:8d:af:
         a8:cf:ac:e4:72:e3:06:ce:e0:27:15:4c:ef:79:3a:ee:d5:13:
         27:4d:95:7b:3b:26:26:c6:b8:11:57:5f:84:2e:a6:96:63:05:
         51:88:03:05:c8:d1:56:f4:8b:99:1f:71:48:0a:81:2d:2c:af:
         c5:82:67:ce:19:a8:0f:4e:54:b5:a8:2e:cf:3a:ed:b4:8c:17:
         ed:a7:4a:42:ff:dc:6f:fa:18:02:20:0d:e3:78:db:7f:22:5e:
         67:c3:b8:31
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUEt8k99wMoFPt9s6moDsnxV7bkrkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxMDAwMDA1MVoX
DTI1MTExNDIzNTk1OVowejFJMEcGA1UEBRNAMjBkNjVkY2JlODJkZGQzYmZjMWY2
N2FmNWVmNDFmZWY4ZjJkZGJjMDY5ODhhN2VjZWIyZTVjMjRiYzA4ZTBmMjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ZmS1alRiKy3X5UQwW2SwngYLmI
E5g47f2WOZ1j8SV3PtVCabIWxsvKMmCsS09kyS+VIjd7oi8bA9QGOs+QvrPJvPFg
5Oek6/UaMWg9VrVKcUvvMavXs2o6wmOO3gKKljjmjKiSjfVLQ2lTpxUejgFwnBec
8OTfZspT8MQBUtPBXo7O0ETa5adLXLURKkyTp59B+GnJAvpn957Zfkq5I2t9ejQg
2r+Epw+ZdCVbJnPmS4mx7WnjOy2WOze+ZLkJtTs3HpdcSneCCR+8tGnaA5dM0M13
uuC0095mJVc4Jh1upaai4VHm0hmU29sHAG9EPfPKhF/iqYmz+9o25IaHMwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFPygmOkEtkBjSeCgJw0W9kA7elVqMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzI1ZDVhZDdlLWYyNWMtNDdjNi05YTllLTRlYzFkNDgyNDc2Zi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9ggAMA0GCSqGSIb3DQEBCwUAA4IBAQCHjvUWhfDxFQmwzVhN
lcvh7/3XC1X2w99JZdmOvNLDRt/ZXWVl9RvAXpY5fHY2uR28IeEL2NhV0OejxuiV
FCUU7Bb0tPn0Eyy3sS8pjgJl4jkl6x+rL3HXd0ClwGzSH4JgVv2u/cFXdfEtSZsq
JlLDbwLe4dEOxAzehJEvZ5JMWZkY4r3d5U55ICP2waZqQ5486Adl/ULJGqncaLgm
TLKPja+oz6zkcuMGzuAnFUzveTru1RMnTZV7OyYmxrgRV1+ELqaWYwVRiAMFyNFW
9IuZH3FICoEtLK/FgmfOGagPTlS1qC7POu20jBftp0pC/9xv+hgCIA3jeNt/Il5n
w7gx
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:33:07 2025 by rpki-client