Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3050c822-214a-42c8-80c6-ab24f49ef5df.roa
File:                     3050c822-214a-42c8-80c6-ab24f49ef5df.roa (raw, json)
Hash identifier:          7KMgEJ0SrZR4ZzZ1i6fROe1SDN8RLX4SEQYjf1oqDxE=
Subject key identifier:   56:44:68:11:AF:41:F3:55:C9:10:B5:C0:43:E5:43:AA:2F:6F:AE:F8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7A117F4E6EC9483BAC1D500BBCB6CCEA0743D266
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3050c822-214a-42c8-80c6-ab24f49ef5df.roa
Signing time:             Sat 11 Oct 2025 00:00:38 +0000
ROA not before:           Sat 11 Oct 2025 00:00:38 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:c040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:11:7f:4e:6e:c9:48:3b:ac:1d:50:0b:bc:b6:cc:ea:07:43:d2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Oct 11 00:00:38 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=0ed216fa9a342d6f7977aac4a2dfaee9decfa8adb8aa818e90fe71c56b0fb966, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:22:cd:cf:f7:ff:d3:52:ea:7a:0e:2e:ea:
                    6c:a8:5a:f9:bf:6f:df:94:22:9d:f3:c9:42:46:0f:
                    6c:3a:ae:6c:d6:eb:ab:7f:8f:9b:35:81:ce:18:da:
                    a6:1c:48:fd:cb:f9:f4:7a:2c:74:5e:d3:e5:69:a1:
                    b3:05:7d:f4:db:ad:6c:a7:aa:9e:f2:5b:a1:0f:54:
                    c3:79:91:ce:2f:95:c1:79:55:5f:f2:1e:b5:64:1d:
                    5e:79:20:3f:58:c4:f7:3f:fa:db:35:c6:43:01:5f:
                    22:6f:d4:18:45:a6:6c:08:81:b1:1a:ee:a8:c2:b9:
                    20:d9:94:80:34:bf:23:fb:35:a0:27:91:b0:05:a6:
                    62:91:63:a4:f9:7f:c0:ca:4b:46:cd:62:b0:c4:18:
                    58:98:76:8f:11:fb:6c:2e:76:92:fe:fd:94:cd:f6:
                    31:bb:4e:0a:a8:c4:5b:27:25:aa:ca:85:e6:f2:1e:
                    1e:05:77:2f:27:54:ef:0a:0c:4b:a5:fa:2b:2e:5c:
                    3d:95:86:2c:70:92:b2:1a:14:38:c5:85:b9:14:22:
                    9b:35:30:58:c0:bd:b3:f9:e1:81:c1:b7:aa:63:0c:
                    54:95:d3:c0:cf:77:3c:25:71:d3:94:ad:d8:b1:8b:
                    65:f2:f5:b6:31:0b:45:a3:0d:cf:fb:5a:96:a5:0b:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:44:68:11:AF:41:F3:55:C9:10:B5:C0:43:E5:43:AA:2F:6F:AE:F8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3050c822-214a-42c8-80c6-ab24f49ef5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:c040::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:b1:04:75:3c:7f:02:76:55:86:3c:58:1e:37:3e:31:6a:0a:
         f2:32:36:b1:a3:ef:11:94:13:93:98:ed:61:14:a0:07:ea:ae:
         7e:a8:21:b7:16:2a:9a:17:71:1d:11:ee:02:ea:fd:56:d8:2f:
         8d:27:3b:bf:f0:fe:d8:5e:03:79:b2:e3:01:61:fd:af:f2:76:
         d8:25:22:5a:dd:7b:51:a9:6e:79:c1:2b:c3:7b:cb:73:ca:1f:
         5f:6d:d8:85:54:3a:c8:6e:dc:29:2d:b1:92:6b:45:e0:f1:95:
         19:d5:0e:a5:ba:ec:1d:5c:17:0d:2c:4f:dc:82:13:d4:46:be:
         79:bc:52:e3:93:e9:27:65:fe:f0:aa:5e:d8:c6:24:b8:a8:c4:
         cf:b6:d3:2a:53:71:a1:70:ce:8f:66:3a:21:4d:c4:71:15:c2:
         83:d9:2f:32:ce:ec:c7:ed:a0:df:d2:8e:c5:b8:d9:c0:f1:2f:
         82:e9:7b:3c:da:1e:3c:97:93:a3:d1:5f:2d:49:67:6a:d2:da:
         66:a8:06:46:cf:e2:0f:02:e1:b6:5c:8c:83:45:1d:e0:ba:ee:
         56:c2:22:6f:13:fb:52:e7:92:9a:70:13:d8:78:ee:6c:fa:62:
         e9:c1:04:c0:93:58:c0:93:0b:34:05:3c:6e:0f:15:55:76:06:
         42:16:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:32:45 2025 by rpki-client