Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d13b2d76-a2f8-43ce-8976-3dc7df2b46ff.roa
File:                     d13b2d76-a2f8-43ce-8976-3dc7df2b46ff.roa (raw, json)
Hash identifier:          Jb++4A0jBgb9jC83deWoGwpIDHTQsKsKQRJuP3caGVE=
Subject key identifier:   F8:37:3D:23:3B:F6:A6:41:3C:B5:8F:69:7C:88:B4:B6:03:BA:04:08
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6BF190B705D67E12456A3EA8108DED522AF3804C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d13b2d76-a2f8-43ce-8976-3dc7df2b46ff.roa
Signing time:             Tue 12 May 2026 00:10:29 +0000
ROA not before:           Tue 12 May 2026 00:10:29 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        126.190.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 00:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f1:90:b7:05:d6:7e:12:45:6a:3e:a8:10:8d:ed:52:2a:f3:80:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 12 00:10:29 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=82198ba88ecb290ce3b25661a7bd4fa0e4969c4831071bc6ae98f38942beac2d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:5e:1b:76:38:1d:32:29:79:a0:95:aa:ba:
                    d8:a6:00:5f:90:52:99:95:90:66:35:7d:b5:60:ed:
                    7c:d9:f9:f0:d2:d0:95:05:10:2a:e7:38:6d:b1:9b:
                    ea:32:21:42:61:ba:27:f7:ae:83:8a:05:fc:46:8a:
                    01:06:c3:98:a8:92:fc:c0:37:a1:fe:bb:06:77:cd:
                    97:22:16:16:50:38:97:72:95:51:e3:7c:ef:f4:b9:
                    64:f1:a9:f5:c7:d6:ba:ff:4c:ed:df:0e:c0:cd:33:
                    37:cb:cf:ae:33:e4:55:0e:3f:e7:c9:cc:8f:7e:db:
                    af:e7:0e:7a:53:81:09:eb:65:82:06:b8:16:5f:ec:
                    22:4a:b6:9e:5e:96:0f:8f:ae:fa:77:23:8f:60:51:
                    79:e9:e7:c0:a5:7e:c8:18:48:79:7a:34:e6:69:43:
                    94:8c:3d:10:6a:93:02:c7:4a:c7:15:cc:75:6d:b3:
                    94:76:03:26:c5:5f:91:d8:e0:c6:36:46:e7:ed:18:
                    54:02:00:7f:71:00:28:a5:bd:d8:31:a3:9a:56:d1:
                    d6:97:f3:ff:e6:0e:02:78:34:ef:4d:fe:08:0c:41:
                    df:cb:71:ec:90:e4:15:2b:70:a1:da:3b:08:d0:3c:
                    9e:81:91:fe:ce:b8:13:a9:9d:b3:df:66:1a:26:0f:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:37:3D:23:3B:F6:A6:41:3C:B5:8F:69:7C:88:B4:B6:03:BA:04:08
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d13b2d76-a2f8-43ce-8976-3dc7df2b46ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         af:24:95:0e:60:14:26:40:30:bb:8a:bc:b1:e8:ad:9d:e3:11:
         2d:a8:f2:b6:4f:d1:3f:10:4f:d0:7e:bc:23:7c:96:ed:61:71:
         e1:86:f1:b7:9a:92:1c:20:18:f2:c6:a8:27:b8:aa:ed:35:55:
         16:63:fa:8d:10:17:0b:c4:4d:73:be:c0:fb:bc:f7:e2:64:0e:
         7d:32:11:ab:7c:f3:17:2d:18:df:a8:5d:53:eb:0f:a7:89:8f:
         56:de:89:37:8b:db:bf:fa:c0:ff:27:9c:47:fc:40:be:42:13:
         ad:fe:cd:ae:96:a9:34:ba:87:46:c1:49:f9:44:d7:ec:b9:bf:
         f6:98:b3:7a:7c:89:34:a6:ca:06:8c:f7:58:82:96:f1:f5:00:
         d4:1e:7b:79:36:23:38:99:93:52:fa:62:61:72:5e:b4:c5:28:
         47:68:17:ce:e9:e3:7b:09:51:e9:39:1c:58:41:43:6c:d5:9f:
         37:60:bf:71:d5:1c:0d:93:6d:ec:02:68:cd:a9:fb:48:0d:75:
         b5:81:f5:9d:77:72:cc:d6:b1:23:08:b6:fe:99:6c:c3:ca:63:
         69:b8:1d:2e:fc:67:8e:8b:ed:05:fa:00:66:c6:bf:8d:81:e1:
         ba:73:7f:72:29:da:e0:98:8e:09:31:df:82:25:65:49:61:f9:
         49:12:f2:d5
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUa/GQtwXWfhJFaj6oEI3tUirzgEwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMTAyOVoX
DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAODIxOThiYTg4ZWNiMjkwY2UzYjI1
NjYxYTdiZDRmYTBlNDk2OWM0ODMxMDcxYmM2YWU5OGYzODk0MmJlYWMyZDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswheG3Y4HTIpeaCVqrrYpgBfkFKZ
lZBmNX21YO182fnw0tCVBRAq5zhtsZvqMiFCYbon966DigX8RooBBsOYqJL8wDeh
/rsGd82XIhYWUDiXcpVR43zv9Llk8an1x9a6/0zt3w7AzTM3y8+uM+RVDj/nycyP
ftuv5w56U4EJ62WCBrgWX+wiSraeXpYPj676dyOPYFF56efApX7IGEh5ejTmaUOU
jD0QapMCx0rHFcx1bbOUdgMmxV+R2ODGNkbn7RhUAgB/cQAopb3YMaOaVtHWl/P/
5g4CeDTvTf4IDEHfy3HskOQVK3Ch2jsI0DyegZH+zrgTqZ2z32YaJg+WqQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFPg3PSM79qZBPLWPaXyItLYDugQIMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2QxM2IyZDc2LWEyZjgtNDNjZS04OTc2LTNkYzdkZjJiNDZmZi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAfr4wDQYJKoZIhvcNAQELBQADggEBAK8klQ5gFCZAMLuKvLHorZ3j
ES2o8rZP0T8QT9B+vCN8lu1hceGG8beakhwgGPLGqCe4qu01VRZj+o0QFwvETXO+
wPu89+JkDn0yEat88xctGN+oXVPrD6eJj1beiTeL27/6wP8nnEf8QL5CE63+za6W
qTS6h0bBSflE1+y5v/aYs3p8iTSmygaM91iClvH1ANQee3k2IziZk1L6YmFyXrTF
KEdoF87p43sJUek5HFhBQ2zVnzdgv3HVHA2TbewCaM2p+0gNdbWB9Z13cszWsSMI
tv6ZbMPKY2m4HS78Z46L7QX6AGbGv42B4bpzf3Ip2uCYjgkx34IlZUlh+UkS8tU=
-----END CERTIFICATE-----
Generated at Wed May 13 00:38:27 2026 by rpki-client