Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46bb148e-b1fe-4d40-9bbe-51d7ced3806f.roa
File:                     46bb148e-b1fe-4d40-9bbe-51d7ced3806f.roa (raw, json)
Hash identifier:          pJors7RgJGOViFsniu6cOwQY7IYvZPRhL4f5dL4X1Eg=
Subject key identifier:   4E:EB:01:E9:B6:86:98:28:C3:EF:7A:9B:4D:0B:B7:8F:83:EA:3A:F8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5FD41D5C1F9E7BF1F7E3BD1F69D6F42E4C5D0726
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46bb148e-b1fe-4d40-9bbe-51d7ced3806f.roa
Signing time:             Tue 21 Jul 2026 00:01:18 +0000
ROA not before:           Tue 21 Jul 2026 00:01:18 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf3:90c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 00:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d4:1d:5c:1f:9e:7b:f1:f7:e3:bd:1f:69:d6:f4:2e:4c:5d:07:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 21 00:01:18 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=be1d57730c6c5d4018f90890c3ad03cc7646b4291f65ecec183a05063e7ee4a1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:79:53:92:68:d8:4b:13:f9:32:81:5a:50:
                    56:27:cd:b7:44:60:8a:e8:d9:b5:24:3e:89:12:77:
                    3e:a9:b4:f8:a0:78:ed:e8:fd:5d:89:7f:95:75:3c:
                    a8:7a:57:0d:92:44:a3:ef:66:30:46:b6:57:52:92:
                    6e:35:c5:26:fe:28:e2:77:74:06:dd:d9:83:ff:d0:
                    37:6d:4a:86:20:6c:5c:42:a5:44:0c:17:15:cf:8e:
                    dc:cb:76:4b:d5:c9:84:49:de:55:af:dd:e9:08:b2:
                    7a:0d:b2:f7:92:83:6c:a0:08:57:e5:54:d9:fe:5c:
                    2f:48:e6:45:79:9d:48:d1:17:44:16:f9:15:f7:57:
                    54:b6:43:c3:b6:ce:06:68:d9:e4:35:bd:34:1c:82:
                    7d:46:14:f9:49:38:f9:08:bf:3c:13:de:9a:63:b8:
                    86:a9:2a:73:6c:7c:9c:62:fd:09:90:ad:7e:bb:3e:
                    ba:66:9d:bb:af:cf:9c:2c:4f:aa:f4:30:1e:93:9d:
                    d4:c7:4a:ab:a0:66:50:d5:b8:6b:23:1b:47:f1:89:
                    47:2f:d5:a3:96:f5:e1:68:f3:c8:fc:e8:bb:6e:de:
                    76:f7:91:ba:8c:ed:ac:2f:54:e0:38:c6:be:3e:76:
                    78:1a:68:bd:16:b0:c1:dd:b0:8f:a5:5e:15:cc:a2:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EB:01:E9:B6:86:98:28:C3:EF:7A:9B:4D:0B:B7:8F:83:EA:3A:F8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46bb148e-b1fe-4d40-9bbe-51d7ced3806f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf3:90c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         b1:72:f5:d0:0f:55:5f:bc:1f:b2:e5:80:8b:2d:f4:77:da:ca:
         9a:25:f0:9b:25:6c:bc:df:09:a2:b2:a2:d4:26:26:99:09:c9:
         e2:c0:e4:5f:1a:9c:cd:d5:82:b7:12:0a:50:ea:58:59:00:11:
         82:0b:b3:a6:25:1c:f8:7b:b2:5e:37:b0:8a:26:55:f6:b4:88:
         e8:83:8d:46:e8:0f:f6:56:66:d6:2b:2f:25:04:2d:78:55:b0:
         d3:e3:ea:a4:5e:4e:e5:21:8f:d6:b6:36:93:4c:83:48:11:59:
         e0:ed:81:3b:6d:0e:b0:c9:ff:11:f6:23:3e:d7:88:b5:8f:ca:
         88:be:e9:93:89:1c:e6:fe:20:25:17:45:fa:2a:8e:a3:40:e4:
         89:13:0d:be:d7:61:70:4f:ef:4d:d5:2e:1f:a9:8e:ed:be:39:
         71:22:93:25:26:18:12:c7:6b:d7:19:84:d8:22:88:6d:f9:9d:
         15:13:8d:d5:2e:f4:90:d1:71:0d:47:4a:09:c4:9d:2c:85:01:
         78:56:3e:2d:e9:a3:7e:f8:cf:86:d5:bd:23:bd:ca:c0:fd:e4:
         d2:56:19:32:f6:9b:d9:12:9b:c4:56:99:61:3f:c4:74:de:51:
         c2:43:32:53:5d:9a:36:38:c4:78:22:a0:65:8c:5f:c9:da:a0:
         f4:e1:88:1d
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUX9QdXB+ee/H3470fadb0LkxdByYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMDExOFoX
DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAYmUxZDU3NzMwYzZjNWQ0MDE4Zjkw
ODkwYzNhZDAzY2M3NjQ2YjQyOTFmNjVlY2VjMTgzYTA1MDYzZTdlZTRhMTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4R5U5Jo2EsT+TKBWlBWJ823RGCK
6Nm1JD6JEnc+qbT4oHjt6P1diX+VdTyoelcNkkSj72YwRrZXUpJuNcUm/ijid3QG
3dmD/9A3bUqGIGxcQqVEDBcVz47cy3ZL1cmESd5Vr93pCLJ6DbL3koNsoAhX5VTZ
/lwvSOZFeZ1I0RdEFvkV91dUtkPDts4GaNnkNb00HIJ9RhT5STj5CL88E96aY7iG
qSpzbHycYv0JkK1+uz66Zp27r8+cLE+q9DAek53Ux0qroGZQ1bhrIxtH8YlHL9Wj
lvXhaPPI/Oi7bt5295G6jO2sL1TgOMa+PnZ4Gmi9FrDB3bCPpV4VzKJeNwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFE7rAem2hpgow+96m00Lt4+D6jr4MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzQ2YmIxNDhlLWIxZmUtNGQ0MC05YmJlLTUxZDdjZWQzODA2Zi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba85DAMA0GCSqGSIb3DQEBCwUAA4IBAQCxcvXQD1VfvB+y5YCL
LfR32sqaJfCbJWy83wmisqLUJiaZCcniwORfGpzN1YK3EgpQ6lhZABGCC7OmJRz4
e7JeN7CKJlX2tIjog41G6A/2VmbWKy8lBC14VbDT4+qkXk7lIY/WtjaTTINIEVng
7YE7bQ6wyf8R9iM+14i1j8qIvumTiRzm/iAlF0X6Ko6jQOSJEw2+12FwT+9N1S4f
qY7tvjlxIpMlJhgSx2vXGYTYIoht+Z0VE43VLvSQ0XENR0oJxJ0shQF4Vj4t6aN+
+M+G1b0jvcrA/eTSVhky9pvZEpvEVplhP8R03lHCQzJTXZo2OMR4IqBljF/J2qD0
4Ygd
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:31:14 2026 by rpki-client