Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
File:                     002c315b-3412-464e-b865-645f657f136d.roa (raw, json)
Hash identifier:          IQ9hPl0jnt8JYF6yqOAZAyatzPJLn53x/A3OOfJ0lVU=
Subject key identifier:   86:BA:48:30:0B:7D:27:70:88:82:5A:B8:55:C5:8F:30:D3:32:1A:C3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       067EA8D1608B16170B5614D131CA247078C3117A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
Signing time:             Fri 21 Mar 2025 15:10:17 +0000
ROA not before:           Fri 21 Mar 2025 15:10:17 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d079::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7e:a8:d1:60:8b:16:17:0b:56:14:d1:31:ca:24:70:78:c3:11:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 21 15:10:17 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:e4:69:64:cf:90:c9:33:b8:6b:dc:2c:50:
                    20:0a:b6:83:6d:4b:cd:32:1c:ce:8b:77:a8:e3:d2:
                    57:5c:83:f5:ba:79:fc:2c:96:66:66:f7:27:c9:ed:
                    b4:79:27:5e:5f:a2:95:75:ad:4c:50:af:8f:75:d3:
                    d3:88:7c:6e:e3:9c:0c:5c:71:1f:97:e7:33:e5:e4:
                    5d:63:16:1d:8c:d3:b2:56:c7:8a:e5:0f:80:90:24:
                    11:41:b7:9d:fa:77:93:b7:a3:7d:49:48:88:52:49:
                    20:92:19:9a:e1:72:8f:7e:4e:2c:cc:17:c3:2c:e4:
                    cb:b4:16:b6:fb:43:27:62:f3:0a:27:f0:d3:76:bd:
                    b3:3b:6b:90:f3:60:6b:10:bd:6c:17:12:9c:d1:88:
                    64:48:9b:ca:6f:f2:4d:ea:3e:db:88:0a:b7:cb:b7:
                    51:42:ec:47:d6:fb:9d:49:b3:ad:02:d2:09:06:58:
                    d3:04:ff:75:a4:8c:3b:83:64:7e:85:78:77:03:06:
                    08:30:dc:73:a6:a6:12:c7:e8:fe:06:0f:e8:43:95:
                    5c:ba:6f:86:38:08:07:37:7e:96:f0:05:0b:1b:2d:
                    00:40:30:6d:ca:a6:03:c6:8c:6f:e6:d6:24:25:f0:
                    be:9b:00:cf:49:db:0e:80:9d:30:fa:4d:93:19:01:
                    d3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BA:48:30:0B:7D:27:70:88:82:5A:B8:55:C5:8F:30:D3:32:1A:C3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d079::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:a7:bf:aa:6e:f0:bf:9b:82:5d:9b:d8:51:10:ee:4d:69:2c:
         3e:1d:f3:d2:0e:b0:7b:f7:5e:2e:83:ef:b7:8c:51:e0:e9:d7:
         fe:dd:0e:7f:9f:1d:49:21:36:e1:23:1a:c1:3c:57:50:1c:b1:
         be:bd:4d:4e:07:56:7b:5f:4b:b8:56:88:ba:f6:87:ab:d3:f6:
         74:5d:cb:34:ca:87:b6:c0:9d:58:54:83:11:b2:0d:b4:85:75:
         0f:38:54:88:7f:50:bc:6b:d1:54:7c:8c:8b:e0:e5:d6:c8:65:
         23:9c:4e:44:c8:3a:dc:49:e8:c3:9e:ec:58:e7:2b:31:12:a6:
         60:00:99:dd:eb:ee:59:c2:0b:6c:bf:bf:70:90:6d:2c:b8:de:
         73:30:ec:3b:a5:c4:e2:f1:d3:2f:1f:aa:88:5d:ef:b4:bf:56:
         a6:b7:ae:a6:8e:e4:00:e1:06:f8:6d:80:f5:a1:aa:e7:62:28:
         90:50:87:37:0b:98:25:00:a1:b6:52:5c:d4:32:7b:47:94:f3:
         9e:f2:c4:29:83:a4:b8:b5:9d:cb:86:2b:52:4a:d4:a8:2d:f3:
         c3:57:33:89:fa:67:32:36:f2:1b:23:0b:9a:25:ee:82:90:36:
         c2:80:78:38:be:2f:0d:b4:a7:4e:6e:39:2f:6e:20:8d:b1:e1:
         e4:39:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----