Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa
File:                     3407e5b6-a83d-4668-898f-fdbb23092502.roa (raw, json)
Hash identifier:          A0wnw0quNtVmHeyhoJc3ngPgkoR5pNkVFJpBKs1ZGLc=
Subject key identifier:   9C:8B:73:25:7B:94:B4:7F:C3:19:A5:E2:3D:D1:5B:F3:E5:2A:B0:E8
Certificate issuer:       /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial:       25B696159567C0A116B6EA30B35CBEF265AAB4C4
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa
Signing time:             Mon 04 Aug 2025 15:00:47 +0000
ROA not before:           Mon 04 Aug 2025 15:00:47 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2400:6700::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 15:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b6:96:15:95:67:c0:a1:16:b6:ea:30:b3:5c:be:f2:65:aa:b4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
        Validity
            Not Before: Aug  4 15:00:47 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=ac29a5c6d042a7b4675f4dd57f9673a241745d060794d940a233211c536eb783, CN=58810403-9ba0-403a-809b-c78252ab7f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:7f:3c:39:dc:f1:a2:d0:b6:b0:24:a4:7e:
                    93:e3:04:18:4e:a2:17:d5:0c:ff:88:22:b6:d7:20:
                    89:19:aa:1c:fd:4f:76:aa:e2:0e:f1:af:b1:6c:a3:
                    dd:0e:65:7b:24:f4:c8:60:18:f3:75:09:b5:c5:33:
                    f9:68:64:3e:3c:73:23:8a:63:80:1b:0d:85:98:43:
                    a8:65:77:4f:52:f5:aa:6d:e2:83:d7:e7:b8:2d:d4:
                    90:27:5b:9b:74:b0:93:a2:4b:a6:4d:ea:ca:3e:14:
                    65:60:3d:10:87:31:a1:38:95:b1:98:7c:8a:63:07:
                    e1:f0:05:81:23:b3:19:68:35:09:50:e1:c6:fc:ff:
                    51:96:01:fb:14:2f:ea:f9:e8:94:89:1e:d9:2d:fe:
                    ce:5c:fa:a8:6f:1a:ca:e9:91:e7:76:f6:16:7e:9f:
                    4a:91:4e:4b:5a:53:b2:0a:e7:99:c5:ac:d4:da:70:
                    bc:3e:8f:49:0c:da:4e:0d:94:30:f3:67:28:30:40:
                    4f:34:a3:81:23:01:4a:3c:35:a7:31:5c:96:52:88:
                    cb:92:91:8f:e8:cb:74:32:2d:70:e5:db:a3:23:29:
                    00:9c:d3:80:90:39:eb:3e:01:3d:11:dd:fd:f9:ed:
                    6c:71:a5:25:9d:75:8c:1d:1e:4e:42:1b:f5:ef:d0:
                    d8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8B:73:25:7B:94:B4:7F:C3:19:A5:E2:3D:D1:5B:F3:E5:2A:B0:E8
            X509v3 Authority Key Identifier:
                keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:6700::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:80:aa:26:57:ea:ea:3e:fb:17:85:ca:33:aa:cc:03:8e:53:
         47:bc:6f:7d:cb:1e:da:d1:2e:25:d1:c5:1b:3f:f6:1a:12:8e:
         f9:19:74:4c:8e:44:3f:1a:eb:51:83:40:1e:e1:a5:04:27:bb:
         57:7f:1d:e4:b9:da:ff:0a:13:57:be:60:8d:52:10:c6:6c:5b:
         7c:27:90:c5:4e:30:96:a4:75:57:c5:f9:62:1e:bc:88:71:b1:
         44:08:53:7f:e5:c4:6c:78:a7:6c:b8:b6:23:ef:ab:04:22:26:
         6e:81:48:84:45:70:a6:ef:34:0c:e1:06:ec:8f:b1:1e:72:80:
         02:74:18:86:68:11:b4:0f:4b:af:67:37:c9:87:1e:af:be:5d:
         91:af:ca:6c:ea:09:93:62:30:a5:85:a4:ef:be:e1:ce:5a:03:
         31:0f:34:c3:05:7d:da:d1:72:18:15:79:8d:72:41:d4:8a:1e:
         13:42:a7:38:52:b5:da:92:b9:dc:2e:e1:ae:9b:79:15:c0:49:
         4f:9f:8d:51:3d:93:60:ad:c5:d7:00:04:8e:cb:b7:a4:90:db:
         bb:61:52:6f:94:cc:7c:0f:b0:3b:d4:7f:b3:1e:1e:b5:46:0a:
         df:07:08:d6:2e:1e:14:a6:a7:cc:72:b6:c6:92:d1:25:f1:73:
         30:f3:a9:77
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIUJbaWFZVnwKEWtuows1y+8mWqtMQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw
RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDgwNDE1MDA0N1oX
DTI1MDkwODIzNTk1OVowejFJMEcGA1UEBRNAYWMyOWE1YzZkMDQyYTdiNDY3NWY0
ZGQ1N2Y5NjczYTI0MTc0NWQwNjA3OTRkOTQwYTIzMzIxMWM1MzZlYjc4MzEtMCsG
A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1J/PDnc8aLQtrAkpH6T4wQYTqIX
1Qz/iCK21yCJGaoc/U92quIO8a+xbKPdDmV7JPTIYBjzdQm1xTP5aGQ+PHMjimOA
Gw2FmEOoZXdPUvWqbeKD1+e4LdSQJ1ubdLCTokumTerKPhRlYD0QhzGhOJWxmHyK
Ywfh8AWBI7MZaDUJUOHG/P9RlgH7FC/q+eiUiR7ZLf7OXPqobxrK6ZHndvYWfp9K
kU5LWlOyCueZxazU2nC8Po9JDNpODZQw82coMEBPNKOBIwFKPDWnMVyWUojLkpGP
6Mt0Mi1w5dujIykAnNOAkDnrPgE9Ed39+e1scaUlnXWMHR5OQhv179DYJwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFJyLcyV7lLR/wxml4j3RW/PlKrDoMB8GA1UdIwQY
MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E
c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5
LzM0MDdlNWI2LWE4M2QtNDY2OC04OThmLWZkYmIyMzA5MjUwMi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4
ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJABnADANBgkqhkiG9w0BAQsFAAOCAQEAqYCqJlfq6j77F4XKM6rM
A45TR7xvfcse2tEuJdHFGz/2GhKO+Rl0TI5EPxrrUYNAHuGlBCe7V38d5Lna/woT
V75gjVIQxmxbfCeQxU4wlqR1V8X5Yh68iHGxRAhTf+XEbHinbLi2I++rBCImboFI
hEVwpu80DOEG7I+xHnKAAnQYhmgRtA9Lr2c3yYcer75dka/KbOoJk2IwpYWk777h
zloDMQ80wwV92tFyGBV5jXJB1IoeE0KnOFK12pK53C7hrpt5FcBJT5+NUT2TYK3F
1wAEjsu3pJDbu2FSb5TMfA+wO9R/sx4etUYK3wcI1i4eFKanzHK2xpLRJfFzMPOp
dw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:44 2025 by rpki-client