Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10aa39be-4f99-4b39-b428-f034a0b57d69.roa
File:                     10aa39be-4f99-4b39-b428-f034a0b57d69.roa (raw, json)
Hash identifier:          txG3m/DnrwlS8zlXa6870lTzSKueN5DSxcyNHu+g9cA=
Subject key identifier:   C5:73:F3:BA:99:D6:B5:9A:44:4B:34:CC:F1:5C:80:37:88:3F:B5:9E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       07C3394DF57729D28B711D86515221082027016C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10aa39be-4f99-4b39-b428-f034a0b57d69.roa
Signing time:             Fri 11 Jul 2025 20:10:03 +0000
ROA not before:           Fri 11 Jul 2025 20:10:03 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c3:39:4d:f5:77:29:d2:8b:71:1d:86:51:52:21:08:20:27:01:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:10:03 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=9838a6ef12bac7ac9367d4a644abeb399876009cd6cf68ed60e95a88190a0242, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:b1:34:ec:4f:1d:63:e3:da:52:b0:0b:0e:
                    1d:74:60:aa:4a:22:08:e7:c1:95:6e:f5:cc:28:f7:
                    0c:ae:e3:71:4d:33:67:e7:72:a1:b0:f6:05:51:73:
                    57:db:83:b0:e0:40:8f:c3:02:6a:73:2d:39:f0:66:
                    81:f1:eb:3a:0c:96:d8:dc:3c:eb:c8:7d:a7:24:7a:
                    c5:ca:60:ee:7c:17:1a:6b:7e:52:b5:11:0d:b1:f2:
                    a2:75:f5:12:6e:97:84:06:72:7d:0e:6e:36:8d:c9:
                    0e:2c:fb:ac:9b:80:d6:cd:4b:45:67:ae:61:8b:be:
                    48:d2:c9:44:ee:46:fc:67:99:65:46:88:e9:af:ad:
                    ca:44:6b:d4:62:6e:85:c1:9a:a2:5f:32:ed:f6:e0:
                    f7:13:09:38:74:3b:27:49:d5:6a:0b:2d:36:0c:f0:
                    4b:88:4a:d1:19:d9:4a:15:5b:7b:79:8b:ce:1a:14:
                    70:9f:1c:ba:90:64:f9:19:50:03:a8:ad:14:21:41:
                    14:1d:8f:a8:dc:4f:35:02:a3:9d:e8:0d:78:41:77:
                    79:7a:e4:9e:72:b4:f6:36:99:32:66:1c:25:32:89:
                    2e:4a:55:c3:f4:60:91:44:e6:42:2a:48:2f:60:7c:
                    50:6e:b1:7b:e1:05:f6:ae:97:f2:30:ba:dc:ad:9b:
                    3b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:73:F3:BA:99:D6:B5:9A:44:4B:34:CC:F1:5C:80:37:88:3F:B5:9E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10aa39be-4f99-4b39-b428-f034a0b57d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:c6:3f:8b:60:31:53:c6:48:b7:58:c0:43:d2:99:09:7f:a8:
         3c:c6:8c:f1:c6:73:fa:2a:a9:8d:5e:db:15:49:c0:2b:4e:0a:
         38:de:d1:8c:60:25:2e:52:75:1a:fd:15:69:09:f3:6b:91:6a:
         8b:f1:57:22:44:2f:ea:b1:29:47:28:92:a6:6d:41:4a:41:d3:
         4b:49:dc:5c:c9:7d:dc:7b:e7:fd:c4:b2:b6:5a:c3:1a:c9:d8:
         7d:7d:de:e4:72:74:85:d1:d3:8a:a1:98:f4:c8:4b:6e:33:c5:
         6e:85:93:2b:97:d4:5f:39:35:b7:99:31:25:25:a1:2d:d5:02:
         2f:31:1c:ae:ec:6c:3e:d2:5d:4f:93:d5:08:98:eb:1b:ef:fc:
         38:88:aa:f0:b3:6c:73:1a:c2:98:f0:0a:65:94:9a:ba:32:97:
         b6:bb:bc:a1:e9:03:15:1f:a5:d9:8c:8a:ac:8e:07:3d:ee:8a:
         f1:00:d5:f4:ed:b5:49:de:a4:14:84:b7:90:3a:3c:d6:8e:ad:
         c4:da:89:2d:d1:cc:8f:93:13:59:cb:fc:d9:47:dc:a7:43:49:
         22:f0:dd:86:fa:4b:2c:dc:cf:67:f2:49:e5:96:fa:4c:91:4b:
         e9:19:ca:0e:84:de:14:c7:45:2f:ab:30:c6:66:79:d0:26:ea:
         ab:06:ec:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----