Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa
File:                     b9e1c759-db10-4a48-b586-da1f1ff39287.roa (raw, json)
Hash identifier:          EXSJXXtoZTZQ1IYDdeKOkr27fQ1K2uFwsHSDdd7w0bU=
Subject key identifier:   14:CA:F3:86:D4:88:7B:EC:20:AD:44:DA:A1:7A:DC:AD:82:B2:26:B8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0BB65F8F642F006956E905F7860113FD23B9D3D4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa
Signing time:             Sun 19 Oct 2025 00:00:08 +0000
ROA not before:           Sun 19 Oct 2025 00:00:08 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daed:9000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b6:5f:8f:64:2f:00:69:56:e9:05:f7:86:01:13:fd:23:b9:d3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Oct 19 00:00:08 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=bf3f000eb74fbc085c4d9239e200e42236b7e69450e4a0e3e3599d792a087adc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:76:93:2f:5f:27:51:3a:c6:d3:21:2b:fd:60:
                    02:90:99:ed:42:67:ea:74:09:d5:e7:4a:d5:27:97:
                    39:51:b6:ea:86:97:23:91:f2:a3:1d:90:14:d7:32:
                    c9:34:32:69:dd:22:86:4d:74:99:10:99:d2:04:bf:
                    4f:d6:35:d7:98:40:2c:e8:6b:ba:df:56:8e:c3:d9:
                    15:46:fd:37:c9:e1:30:12:ad:8e:5d:c8:06:2b:b2:
                    5d:5c:78:cb:97:a9:07:5b:33:39:2f:e2:ba:78:ca:
                    c4:82:7f:9c:7c:6e:b6:74:62:0e:6c:88:24:79:00:
                    e9:85:be:67:37:8b:8a:43:8d:3f:f8:91:3b:a6:4f:
                    3e:b6:95:2b:23:9e:63:00:12:ec:54:34:57:34:fe:
                    26:20:e3:be:bb:44:dd:1a:b7:b4:28:ac:54:77:52:
                    87:5f:d5:49:b8:d7:8f:31:14:cb:83:ea:46:4c:17:
                    08:2c:ab:53:07:6b:9b:06:0f:b9:d4:26:18:75:bb:
                    b0:7e:1e:b7:cf:84:4c:2e:54:d8:e8:d6:96:77:ac:
                    9c:72:3f:3a:e2:38:9f:f3:ac:d8:fe:f1:90:5d:8c:
                    e6:ec:12:95:d4:49:90:5a:55:98:9c:f2:46:54:95:
                    12:33:e8:3d:97:d4:96:1c:05:41:f1:00:b3:c8:09:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CA:F3:86:D4:88:7B:EC:20:AD:44:DA:A1:7A:DC:AD:82:B2:26:B8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9e1c759-db10-4a48-b586-da1f1ff39287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daed:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:20:0e:05:d6:41:9c:25:53:1a:db:35:5d:09:46:2f:ed:51:
         94:c3:44:8b:bc:87:9b:d8:9d:d7:c5:8c:75:17:78:8e:27:47:
         37:78:54:ad:6b:7e:55:c8:ca:45:aa:a5:a1:62:6a:8a:26:af:
         cd:97:96:f2:10:3e:40:fe:29:5e:ba:fe:fe:60:fa:40:db:d1:
         e8:8d:b3:13:71:3d:46:ca:47:d5:1b:c7:30:00:9b:a6:08:1e:
         60:f8:73:9f:3c:82:da:75:bf:1b:1e:2c:de:d6:53:2a:c0:23:
         0f:96:d6:a1:e8:e6:d3:03:4a:c7:b1:96:25:8a:10:79:08:c2:
         f0:80:10:ee:45:4b:07:03:1b:61:f8:4b:32:91:7d:21:bc:7a:
         f7:c7:4a:61:8b:4e:9c:14:4b:61:ad:38:fb:7e:7c:4b:82:ca:
         69:5d:da:6a:b5:f9:d8:71:35:8b:56:60:a1:90:ee:c0:48:55:
         d9:28:ac:ff:f2:37:2c:ec:8d:ed:c2:a9:15:39:9b:ba:ea:01:
         ea:8c:2f:f4:12:d6:76:39:26:00:99:5b:a1:4c:82:ae:c7:53:
         2e:08:92:db:3f:e0:a7:2c:d8:19:04:ce:ab:66:49:22:c6:89:
         e6:a4:e8:66:6d:26:53:e8:d0:48:78:25:3b:68:68:9e:55:59:
         05:62:59:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:28:24 2025 by rpki-client