Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5e8f8-01ee-4887-9403-cad800717cc9.roa
File:                     25d5e8f8-01ee-4887-9403-cad800717cc9.roa (raw, json)
Hash identifier:          dOFBSQLWh7rIK0Cro2bUIedvnwP5uJ9fsBWyx+hCN2I=
Subject key identifier:   09:CF:8A:0F:3B:6C:B0:5C:B1:47:1A:98:37:BF:78:A1:69:54:C4:9F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       24CAFC26C0826BA0EB1F03ACF69000F6607B5A28
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5e8f8-01ee-4887-9403-cad800717cc9.roa
Signing time:             Wed 15 Oct 2025 00:20:28 +0000
ROA not before:           Wed 15 Oct 2025 00:20:28 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da70:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ca:fc:26:c0:82:6b:a0:eb:1f:03:ac:f6:90:00:f6:60:7b:5a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Oct 15 00:20:28 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=96ac0c5a5fee73627c56916705cc3aa74306bb117298b76f546e548fc7e05ffc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:75:d1:5a:75:3c:08:9b:b8:5e:15:e3:c1:3a:
                    14:0f:ce:cb:67:69:b5:77:3c:45:12:6a:1e:f8:65:
                    cb:4f:ca:96:51:50:b3:17:6f:70:b6:ae:2d:56:b8:
                    98:9d:68:01:be:99:ef:a3:03:17:0d:43:19:73:da:
                    93:c7:27:4b:37:d2:68:47:9c:69:47:62:11:ff:e3:
                    ef:8a:2a:51:e4:58:70:cd:cf:c5:f6:aa:1a:63:4e:
                    77:52:63:3f:8c:75:a5:b8:1f:dc:28:56:27:d6:10:
                    97:f1:1e:47:9f:22:64:c1:3b:91:a8:8e:2c:28:61:
                    38:e9:82:2c:b7:c6:7b:fd:e5:62:98:83:83:45:8a:
                    86:18:73:d1:0e:98:49:8d:3d:2a:ad:f4:02:36:8d:
                    c7:3a:7e:59:5d:72:d0:28:44:a0:9b:c7:8f:45:35:
                    b8:1f:35:a7:a8:28:c1:b4:b6:11:23:97:c1:dc:2c:
                    60:a0:ad:e3:68:e6:3c:90:b1:5b:36:b6:26:43:54:
                    b0:ed:87:b9:a3:a7:7e:59:ac:56:3d:8a:c1:72:76:
                    2d:6c:b9:86:62:2c:b3:c5:0f:37:30:ac:26:5c:3a:
                    9a:98:02:7e:6f:71:b5:e8:bf:13:7e:c6:38:08:0e:
                    b5:2a:94:8c:67:da:b1:93:62:78:90:a4:e2:32:ae:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CF:8A:0F:3B:6C:B0:5C:B1:47:1A:98:37:BF:78:A1:69:54:C4:9F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5e8f8-01ee-4887-9403-cad800717cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da70:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:08:1d:8f:51:4d:6a:6d:a9:72:e8:7f:39:2d:cd:b2:42:4d:
         15:11:b3:16:fd:e9:a4:c8:cf:06:a3:3b:a7:22:17:fd:ae:c2:
         ce:2a:5e:d5:ba:8d:34:a1:00:b4:a3:76:2a:31:6b:67:be:aa:
         ec:f9:aa:c5:29:1e:7e:17:35:9f:63:72:21:ed:39:9b:c1:fc:
         ba:9c:6f:9e:d4:73:e4:7b:22:a9:05:1c:83:cd:e7:cd:cd:94:
         c1:0a:80:f8:8d:e6:f5:c7:e3:78:15:9a:c2:70:f7:dd:3f:a8:
         f8:8f:79:11:f5:07:2a:1d:e0:bb:ae:18:a2:ea:cd:d8:b8:9c:
         7b:06:1c:db:cc:42:b0:ea:91:51:e2:66:6b:18:64:bb:f3:08:
         6a:b5:33:c5:31:27:01:6c:a9:cc:76:b2:c3:1d:22:c0:79:79:
         f9:1e:f3:7d:a4:af:1c:34:f5:a9:16:ec:2e:c2:cc:a3:79:c5:
         03:09:3c:6a:12:08:de:bb:4a:18:d0:af:ff:6f:a7:50:90:c7:
         5c:62:3b:f2:cf:20:55:61:9e:88:81:e7:a7:34:c8:03:c2:d6:
         34:64:21:f1:df:6f:0a:36:15:6e:a4:a4:33:81:59:08:56:de:
         f1:b5:eb:70:cf:67:42:40:27:83:0e:35:c6:49:8f:fa:53:a8:
         65:e9:5b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:30:49 2025 by rpki-client