Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3fbd71-85b4-48a7-8479-e942c9578262.roa
File:                     0f3fbd71-85b4-48a7-8479-e942c9578262.roa (raw, json)
Hash identifier:          ZLbh8v5gF4WZLfI8KY6R0bxfTnlJ+XMSNIO+81l6XPo=
Subject key identifier:   CA:81:1B:E4:8D:67:16:F9:1B:EC:91:39:72:AE:B8:93:3F:86:84:2C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       19A04D6BD645259599FB3E40438286A20D988440
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3fbd71-85b4-48a7-8479-e942c9578262.roa
Signing time:             Fri 11 Jul 2025 20:21:03 +0000
ROA not before:           Fri 11 Jul 2025 20:21:03 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d071:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a0:4d:6b:d6:45:25:95:99:fb:3e:40:43:82:86:a2:0d:98:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:21:03 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=62eb006d39526020d9223a0dd5cb1cc3fd977317775c15092be076747851a677, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:a2:14:43:06:1f:20:38:64:b6:c7:00:2c:
                    4a:29:fc:4b:c5:ca:54:43:79:03:a1:3c:c7:13:ac:
                    07:50:b8:62:8c:00:99:8d:8e:17:e5:b6:8f:1d:bd:
                    aa:a8:c1:3b:66:a9:0a:67:07:13:1b:28:26:0d:b1:
                    06:41:b6:4a:e9:c2:5d:a6:f7:39:e3:1f:65:50:37:
                    b5:33:d5:9b:82:d7:3d:8e:ca:52:3a:05:67:fb:f5:
                    4b:b8:71:ec:d0:5a:b2:0a:d1:af:93:08:be:0e:2e:
                    b1:86:3b:59:79:14:97:14:3f:bc:9f:8c:71:d9:26:
                    1d:6c:90:a8:1a:6e:9a:6a:71:71:a4:d9:d6:a5:f9:
                    40:e6:32:89:74:0b:c4:82:b0:92:b0:8b:20:f3:81:
                    bf:c7:5b:4f:0e:0d:1b:d4:ba:90:b8:fa:71:17:20:
                    78:93:8f:07:69:20:8a:0d:bf:56:a9:ba:d4:a5:d8:
                    a9:c8:52:8e:c0:54:31:5a:0a:d3:ed:38:a9:98:37:
                    23:a9:c1:87:8e:23:02:00:d3:f3:df:44:2b:eb:b3:
                    a8:0c:b7:5c:af:ec:e8:6a:4c:5d:a6:31:f1:fd:6f:
                    e7:94:dd:04:01:32:57:9a:6a:f6:9c:41:72:1b:3e:
                    bb:78:6c:6d:41:fc:28:e8:7f:d0:41:a2:b9:b6:3e:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:81:1B:E4:8D:67:16:F9:1B:EC:91:39:72:AE:B8:93:3F:86:84:2C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3fbd71-85b4-48a7-8479-e942c9578262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d071:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:6e:d4:d2:c6:b8:9c:45:97:45:82:18:a5:85:34:fc:55:fa:
         5c:36:69:06:3f:6a:92:8d:8a:c7:37:9c:b6:ff:88:d8:9f:f5:
         36:38:57:33:15:2f:72:1e:cc:fc:f3:27:5d:58:df:ff:8d:61:
         01:9a:51:63:0a:05:34:48:c6:50:69:97:97:eb:05:d1:a1:47:
         2b:06:04:10:4d:94:53:c1:39:ac:0e:83:2f:b2:d3:0c:96:ea:
         c2:24:00:cf:65:99:e8:fe:37:ce:81:f2:ea:d1:cf:42:73:a3:
         e8:7b:97:66:a6:75:01:90:f5:9a:8b:30:25:fd:92:46:6e:14:
         d8:1b:db:5f:f5:f9:3b:e2:24:04:38:50:e3:e9:96:df:f0:60:
         a2:a4:bf:ec:f1:b1:6e:89:90:50:47:ec:e3:8e:ef:9c:35:bb:
         34:03:c1:20:e0:b8:6d:7d:aa:ac:c5:e2:9b:be:d5:d9:2c:da:
         07:c8:fb:a5:74:29:53:47:ad:b0:e8:81:62:0e:de:96:69:33:
         b9:83:f3:28:a4:c4:7d:31:97:43:70:9c:ab:76:f8:72:b1:37:
         43:17:ca:fb:16:b9:ba:aa:3f:a6:5c:67:15:f4:52:08:49:cd:
         bb:86:32:9a:32:2c:64:7c:77:97:5b:b9:e2:5b:3e:dd:0f:b8:
         a2:28:5b:40
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGaBNa9ZFJZWZ+z5AQ4KGog2YhEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDIxMDNaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDYyZWIwMDZkMzk1MjYwMjBkOTIyM2EwZGQ1Y2IxY2MzZmQ5NzczMTc3NzVj
MTUwOTJiZTA3Njc0Nzg1MWE2NzcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK4/ohRDBh8gOGS2xwAsSin8S8XKVEN5A6E8xxOsB1C4YowAmY2OF+W2jx29
qqjBO2apCmcHExsoJg2xBkG2SunCXab3OeMfZVA3tTPVm4LXPY7KUjoFZ/v1S7hx
7NBasgrRr5MIvg4usYY7WXkUlxQ/vJ+McdkmHWyQqBpummpxcaTZ1qX5QOYyiXQL
xIKwkrCLIPOBv8dbTw4NG9S6kLj6cRcgeJOPB2kgig2/Vqm61KXYqchSjsBUMVoK
0+04qZg3I6nBh44jAgDT899EK+uzqAy3XK/s6GpMXaYx8f1v55TdBAEyV5pq9pxB
chs+u3hsbUH8KOh/0EGiubY+QVMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTKgRvk
jWcW+RvskTlyrriTP4aELDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGYzZmJkNzEtODViNC00OGE3LTg0NzktZTk0MmM5NTc4MjYyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HEQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCHbtTSxricRZdFghilhTT8VfpcNmkGP2qSjYrH
N5y2/4jYn/U2OFczFS9yHsz88yddWN//jWEBmlFjCgU0SMZQaZeX6wXRoUcrBgQQ
TZRTwTmsDoMvstMMlurCJADPZZno/jfOgfLq0c9Cc6Poe5dmpnUBkPWaizAl/ZJG
bhTYG9tf9fk74iQEOFDj6Zbf8GCipL/s8bFuiZBQR+zjju+cNbs0A8Eg4Lhtfaqs
xeKbvtXZLNoHyPuldClTR62w6IFiDt6WaTO5g/MopMR9MZdDcJyrdvhysTdDF8r7
Frm6qj+mXGcV9FIISc27hjKaMixkfHeXW7niWz7dD7iiKFtA
-----END CERTIFICATE-----