Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa
File:                     eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa (raw, json)
Hash identifier:          5/F7tuq55PFQ4hpIwoRAO+wHR2+/qelE+EqY7lU6Syw=
Subject key identifier:   80:F5:F3:0F:42:C9:A7:A9:9C:4F:F5:F6:80:9A:C3:5B:4B:CA:69:F8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5BB794C10F8B57BA94D9C19BB6B4401963A25219
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa
Signing time:             Wed 15 Oct 2025 00:00:03 +0000
ROA not before:           Wed 15 Oct 2025 00:00:03 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf1:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b7:94:c1:0f:8b:57:ba:94:d9:c1:9b:b6:b4:40:19:63:a2:52:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Oct 15 00:00:03 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=4425481b2aa7b926178d4b094c6df5cd380c38070c9da6515ccddaa055028a72, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:82:89:f3:42:da:0e:bc:80:c8:1d:fe:fe:
                    91:0c:16:ce:21:78:b4:7d:fd:d7:6c:f8:8e:e3:84:
                    d9:c1:28:f0:98:71:5f:e0:29:07:26:bb:40:bc:b9:
                    b1:89:cb:ea:f0:bc:82:f7:5d:51:35:b3:d6:d6:d1:
                    b5:5c:83:21:3d:44:e4:0e:0c:ff:de:68:1c:38:1f:
                    83:6c:0c:30:90:f6:9c:21:1f:10:52:33:a9:6c:3b:
                    4b:a4:63:33:12:09:ff:8e:7d:e5:82:6a:a3:c6:e7:
                    32:b6:fa:30:b5:fd:3c:fd:80:d3:85:2c:64:ea:67:
                    0f:8c:6f:d9:40:2e:ce:13:7b:75:de:db:59:a3:7b:
                    30:3a:0b:3a:95:6d:32:41:7d:ba:58:67:c8:71:db:
                    44:a4:08:36:87:d7:a2:83:e5:07:89:44:ed:dc:73:
                    27:14:7b:76:7e:83:b8:3f:9e:e3:d4:aa:3f:14:5b:
                    87:6c:02:e5:4f:1d:d0:3b:f9:28:e8:4f:3b:61:b2:
                    22:d0:5c:5e:f2:45:c9:89:5a:6b:02:b0:51:88:a9:
                    6e:75:9c:19:c0:4c:cf:26:06:3b:09:a0:6e:30:13:
                    73:c6:2d:e5:5e:de:e9:d9:f6:3d:99:7c:7c:31:e4:
                    2d:28:8e:cb:f2:b8:8c:96:58:68:31:10:9c:de:cc:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F5:F3:0F:42:C9:A7:A9:9C:4F:F5:F6:80:9A:C3:5B:4B:CA:69:F8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf1:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:38:1d:62:b4:92:83:d1:0f:66:cd:8c:6e:2e:ab:48:5a:03:
         40:10:48:39:80:c6:12:39:f2:f7:3f:be:f7:0c:32:48:2b:8b:
         d6:88:2c:7a:2e:04:72:85:01:13:2b:2d:34:29:b3:c4:20:2f:
         a5:f0:82:ec:ca:21:a3:ca:ba:82:80:5e:b6:d5:e6:a9:55:1b:
         14:c4:0f:fa:a4:80:3a:2f:7f:d2:29:29:1d:4b:70:cb:4c:19:
         35:1b:cb:c1:dc:76:17:b3:84:ef:f9:b0:0a:0e:7b:af:df:c1:
         80:27:d1:5e:63:65:e4:4b:3e:2c:05:6b:b3:3a:5b:65:ff:21:
         d1:92:04:5e:fc:0b:76:ab:80:4b:30:3a:75:cd:87:d3:49:83:
         a1:3b:30:06:aa:83:93:09:ff:64:36:2c:67:85:75:21:1e:a8:
         bb:f3:f8:86:30:89:bc:51:6c:55:2f:6c:9b:ff:6f:2f:45:46:
         16:92:f9:d7:0b:30:1f:7a:b0:be:4d:bf:b8:79:8f:2e:a8:95:
         5e:27:4b:be:38:0f:57:cc:e5:cc:97:2e:ab:b9:c5:e5:d9:b2:
         97:bc:7c:0c:ba:45:3b:a3:83:49:e6:d7:f5:8f:67:7d:8e:df:
         01:5e:27:c6:75:52:35:da:24:2b:95:ff:e2:fe:06:9e:92:af:
         38:e4:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:16:06 2025 by rpki-client