Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa
File:                     10e25f26-1142-4a43-8091-69f9ddd435c1.roa (raw, json)
Hash identifier:          UfaRfH6BcOubTY3+oT7TnGbloaZMlsrOT9dqLTJFICI=
Subject key identifier:   0F:DB:AF:EA:23:F8:1E:FA:82:AF:95:70:EA:2F:AE:CD:35:48:19:33
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7AD3AB67D600075DE2CA24303D0C1A2D1007F8E6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa
Signing time:             Fri 11 Jul 2025 20:31:45 +0000
ROA not before:           Fri 11 Jul 2025 20:31:45 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d3:ab:67:d6:00:07:5d:e2:ca:24:30:3d:0c:1a:2d:10:07:f8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:31:45 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=62a6e1cd4a00eaf4eb002a99aa02b204c2c685d385495900d235d57b807467b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:88:0b:12:41:e7:4a:aa:b7:24:76:1d:f9:22:
                    74:33:c4:45:ac:17:53:88:97:86:dc:10:70:e7:dd:
                    92:47:ee:e0:e3:31:d2:dd:ed:ad:9b:a6:bc:a2:4e:
                    be:ba:07:c5:29:98:f0:27:96:46:40:6c:14:31:15:
                    3c:c9:04:e6:7c:28:74:ff:f4:82:32:bc:d3:cf:cd:
                    60:cb:98:ee:34:78:e9:f1:5a:6a:40:51:9d:0a:8c:
                    89:4d:11:8e:7e:0b:83:99:4f:03:8a:19:c6:8b:d8:
                    b7:7c:16:a0:8f:3e:61:ab:d2:dd:14:15:1e:20:3a:
                    ab:b9:33:59:7d:86:7f:0d:e7:ec:4f:8d:67:b3:cf:
                    f4:9b:e0:d3:e4:26:26:61:ec:8a:e1:91:a4:df:30:
                    a0:bb:a9:5a:47:11:8c:5a:49:7f:24:3a:d9:cd:90:
                    30:18:19:3d:a1:bb:b1:f5:4b:5b:9e:23:03:e5:e8:
                    91:ca:a9:a8:f3:14:da:23:33:27:1e:38:50:9c:6c:
                    d7:04:da:e5:3e:b5:f4:60:f0:53:b3:95:6b:2c:fc:
                    c9:77:d0:74:b4:17:9e:6c:9e:d6:23:47:35:66:1a:
                    e1:30:3d:0a:e3:e7:58:0f:fe:7f:f9:d8:2f:03:8b:
                    1d:cf:60:af:2a:d2:99:f3:72:fc:89:1c:7f:33:ee:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DB:AF:EA:23:F8:1E:FA:82:AF:95:70:EA:2F:AE:CD:35:48:19:33
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:02:68:86:08:b6:50:d5:d0:80:95:36:7e:05:cb:a5:18:68:
         5b:bd:d1:77:a5:df:55:80:64:52:74:1d:cd:04:68:89:32:1c:
         5b:fe:8f:52:f0:65:dc:43:ee:48:bf:81:c5:3f:c9:93:b8:0e:
         31:99:9b:0e:46:30:94:ed:fd:a3:d6:c8:ac:d0:8d:ca:ff:3e:
         9c:08:c3:ea:a4:0d:5e:bf:b1:7d:9f:f9:b3:a3:e1:29:89:cb:
         3f:20:95:16:93:c5:39:b1:22:fa:59:69:4c:90:15:5c:84:09:
         01:84:10:1f:fc:bb:fc:a3:5c:3f:6d:18:ce:86:13:3f:4f:34:
         77:24:22:01:74:22:f5:2e:bc:64:01:a6:f0:73:b8:14:47:4a:
         69:aa:3f:3b:a9:aa:f0:96:f9:68:37:d7:58:71:61:23:c5:2b:
         25:c7:bb:03:9f:02:d7:b2:89:8b:ca:19:87:cf:2b:aa:69:dd:
         88:6a:71:9d:b4:16:b1:5d:d1:67:88:74:a6:16:c4:0f:c5:01:
         b1:02:2c:43:c2:e3:4a:85:0d:b8:ff:8c:45:f2:b3:1d:6d:9e:
         ba:ba:35:c7:78:29:e3:11:6c:78:29:e8:bf:de:37:5c:d8:f5:
         84:5d:88:b7:2b:26:6b:78:9d:80:81:bf:50:d2:d7:c7:31:84:
         53:dc:ce:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----