Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/adeabc19-780e-43ac-afd2-4be579d3530a.roa
File:                     adeabc19-780e-43ac-afd2-4be579d3530a.roa (raw, json)
Hash identifier:          g5ZMhX17BVaOObYlejsbhdrG3gRaaSRNOYR+Qfb4Ia4=
Subject key identifier:   76:1D:96:76:D1:0B:01:CA:8E:90:9B:CA:B0:9D:AB:A3:14:5F:45:EA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6C54992BE498018157A44F067CB277F8F2FC584F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/adeabc19-780e-43ac-afd2-4be579d3530a.roa
Signing time:             Wed 13 May 2026 00:01:05 +0000
ROA not before:           Wed 13 May 2026 00:01:05 +0000
ROA not after:            Tue 11 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da10:8400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 00:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:54:99:2b:e4:98:01:81:57:a4:4f:06:7c:b2:77:f8:f2:fc:58:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 13 00:01:05 2026 GMT
            Not After : Aug 11 23:59:59 2026 GMT
        Subject: serialNumber=9f664b9572483b96a8dc440cd631d32d31191b2dda8bc311b8ebc671e0c017f4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:46:5b:39:8c:b3:d2:9d:af:5a:64:57:00:
                    22:66:0f:f9:58:e6:05:de:1d:f2:2a:3d:b9:6d:40:
                    8c:b5:93:ee:23:6d:c5:16:03:47:a4:2e:da:0f:36:
                    45:9d:a2:a8:f7:f2:89:c4:11:eb:2a:da:77:49:68:
                    61:ce:40:93:32:d3:9e:a1:e0:42:61:ee:56:b0:50:
                    8f:e2:cb:d0:95:ef:be:69:fd:c2:6d:75:c5:2d:f5:
                    52:42:4e:20:b9:4b:e6:8a:1b:db:c5:83:68:11:01:
                    4f:de:80:7a:4e:98:d7:a6:21:16:77:83:0e:d0:d4:
                    a8:cb:a8:1e:39:d8:00:89:58:df:bf:f9:85:f7:b1:
                    cd:3a:af:f5:b4:1e:63:f4:12:b1:2e:5e:5c:c2:f4:
                    9b:2c:65:55:c8:ee:ad:22:91:26:cf:d0:00:a2:94:
                    2b:0d:6f:59:85:0f:ba:da:80:48:ca:73:3c:e8:90:
                    96:82:2d:f1:a5:60:1b:1b:1f:75:6f:04:d4:81:d6:
                    41:bc:c0:14:28:61:df:0b:0c:d4:8e:e6:22:27:77:
                    39:50:72:3c:e3:dd:d4:a2:b1:af:19:0b:2a:41:d3:
                    c7:97:16:85:3a:1c:f3:3a:77:f4:2d:72:02:86:c9:
                    05:0d:45:ca:f2:38:3a:9f:74:2a:da:48:65:bd:36:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1D:96:76:D1:0B:01:CA:8E:90:9B:CA:B0:9D:AB:A3:14:5F:45:EA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/adeabc19-780e-43ac-afd2-4be579d3530a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da10:8400::/38

    Signature Algorithm: sha256WithRSAEncryption
         9e:26:9b:04:5d:be:ac:08:66:a6:1d:fd:82:45:b1:18:b6:0d:
         26:45:f1:79:e8:1d:0c:db:cd:47:02:c8:9e:df:94:85:a8:2d:
         46:63:5d:05:c0:0c:75:85:5b:8d:05:57:9d:a5:9e:2b:0b:ed:
         9d:fe:5e:9b:bc:7b:fe:77:1d:7a:26:85:64:54:0d:80:47:ef:
         30:20:37:7a:35:93:4b:e0:73:a9:4b:45:56:6c:53:16:f9:13:
         49:79:e0:14:78:4b:63:e7:4b:0d:15:2c:5b:03:fa:eb:98:fd:
         3d:d1:8c:be:51:a2:e4:c1:d8:5d:56:2c:eb:3a:54:1a:cd:76:
         f0:8b:34:18:8c:e0:da:57:d2:0c:4a:57:bf:a6:c0:2e:30:23:
         c5:8e:5b:b7:ab:78:be:60:d9:ef:a2:02:d8:78:1e:0f:31:30:
         bd:dd:5a:3d:7d:f7:4c:b0:3e:de:8d:d9:93:76:7f:79:40:1f:
         9d:58:1b:9c:53:a6:21:bc:47:7d:21:fc:18:21:c7:37:34:1a:
         72:86:bc:be:6e:cc:5f:48:24:93:d4:50:1e:87:70:89:ec:ed:
         26:fe:58:83:eb:a5:8d:69:98:c5:d3:74:f3:b6:ee:6d:de:9c:
         cc:a7:1f:1f:ac:eb:8c:ac:2a:a7:c1:28:a2:f1:ce:8d:f5:be:
         a9:ce:b9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 12:37:12 2026 by rpki-client