Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b837fbb2-31ae-4620-add9-a5933bff88c4.roa
File:                     b837fbb2-31ae-4620-add9-a5933bff88c4.roa (raw, json)
Hash identifier:          yNoaOoTm0i2fcQ5QaoqdytRqC0+IknQaJl0M2B1lJic=
Subject key identifier:   C9:FF:9B:5E:C9:CD:41:36:90:D5:D5:1C:86:D7:21:49:65:07:7F:4B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       74A0B48BE747460076FE692A47066B056F50D3B3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b837fbb2-31ae-4620-add9-a5933bff88c4.roa
Signing time:             Mon 06 Oct 2025 15:00:44 +0000
ROA not before:           Mon 06 Oct 2025 15:00:44 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafd:4040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a0:b4:8b:e7:47:46:00:76:fe:69:2a:47:06:6b:05:6f:50:d3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Oct  6 15:00:44 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=06bb522b17d5e417fee0b617608d44ddcbc219a2665654e614403601dca404cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:1c:a0:4e:ff:bf:6d:3d:25:0e:25:56:6a:
                    45:c8:8e:c2:3a:c4:63:59:e0:85:34:c5:48:d8:2c:
                    d7:f7:3d:fb:63:5c:da:ae:51:fe:7e:6a:ef:b4:e5:
                    6a:6a:a6:05:c6:d1:00:d6:98:80:0f:3d:e2:06:85:
                    36:57:02:f9:3c:7d:0f:00:48:4b:5b:85:6a:5e:c0:
                    03:fb:8c:e3:dd:c0:5c:08:08:76:1b:8a:fe:dc:e4:
                    d0:ca:68:f6:8f:57:55:f5:4c:a1:4c:4e:2e:8f:57:
                    67:83:8b:02:63:5c:fc:69:0d:df:81:4c:12:b0:cf:
                    ce:81:20:6b:de:2e:80:5c:4a:21:d0:11:91:67:a6:
                    64:cd:ea:9b:95:88:f2:a3:fb:b3:36:e3:de:e3:57:
                    14:d3:44:eb:50:da:a7:8e:15:44:00:df:a7:b5:0f:
                    94:ec:5f:1e:3a:4f:b0:bb:d3:ce:7a:21:6b:16:a1:
                    c0:51:19:41:1f:24:a1:b9:5e:cd:52:f0:54:4f:aa:
                    3b:b7:cc:5b:7a:c8:5f:9c:69:1b:ca:5b:0a:e0:82:
                    d0:1d:94:a8:82:82:59:85:58:9b:26:5a:23:fb:4e:
                    c1:9a:1a:7b:0c:43:4b:2e:94:d4:64:0a:52:96:36:
                    21:71:6a:db:ed:86:ab:69:db:ac:04:dd:a0:ab:49:
                    4a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FF:9B:5E:C9:CD:41:36:90:D5:D5:1C:86:D7:21:49:65:07:7F:4B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b837fbb2-31ae-4620-add9-a5933bff88c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafd:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:ff:48:ca:32:83:5b:5d:95:6f:cd:a0:af:16:d3:f6:07:03:
         28:c4:f1:87:57:c1:bf:35:10:af:5e:0c:08:24:b9:08:4d:05:
         b1:e9:8a:a8:2f:54:cd:2a:87:01:96:85:d4:26:5e:79:e4:2c:
         7e:25:e3:ab:0f:49:15:5a:fc:38:62:da:20:01:c3:4e:78:60:
         92:40:56:6a:bb:23:2b:30:ca:c0:ab:16:98:03:a8:10:5c:fc:
         7a:a5:96:3b:52:2d:fc:db:37:d6:71:f2:fb:68:45:40:2b:53:
         d3:96:18:ed:25:2f:18:73:98:a8:9f:9f:ac:a1:05:8c:cd:46:
         36:51:08:04:c1:45:de:b7:73:9b:06:03:36:ac:57:d0:3d:22:
         0f:a0:97:f0:37:48:ee:04:3b:b5:82:dc:29:4b:f8:41:d9:bb:
         42:61:8f:68:39:7c:4c:f8:4c:62:9c:3b:ad:90:e9:d1:2b:14:
         46:4d:aa:2d:08:67:3a:ab:3c:db:0d:b2:95:29:0d:70:62:d1:
         36:95:26:19:4f:aa:6a:dd:66:b7:92:be:a7:04:e1:00:a8:68:
         eb:24:5b:3f:5b:2b:c7:c3:28:a1:b7:ae:22:87:3f:5b:e7:e2:
         fa:74:e9:10:d6:85:26:ba:16:84:7a:f7:1f:cf:31:a0:97:7a:
         bf:98:97:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:08 2025 by rpki-client