Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa
File:                     19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa (raw, json)
Hash identifier:          eVvA+4mQHCAVVV/nnk/2ry1o2WMPpjc945rUY2nxQLc=
Subject key identifier:   A3:01:7E:D7:10:FD:A9:92:7F:25:DE:37:86:E8:F0:68:82:90:34:21
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       43F105144BD1112B6FE39B1F382CF21E0B1C117B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa
Signing time:             Fri 11 Jul 2025 18:51:13 +0000
ROA not before:           Fri 11 Jul 2025 18:51:13 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:5080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f1:05:14:4b:d1:11:2b:6f:e3:9b:1f:38:2c:f2:1e:0b:1c:11:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 18:51:13 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=1f81be735d0c771912773cbaa502e8efb9c6a67ebe7c2397fd98668276f17fa3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:91:64:41:0c:6b:d6:2c:70:cd:cb:a5:8a:
                    7c:07:26:03:53:74:ce:8f:63:fd:89:43:dd:66:e6:
                    6b:ca:c3:3c:f0:d3:28:fe:d6:26:9b:94:08:96:66:
                    4d:b6:a5:7a:90:79:38:22:db:82:17:2a:29:fa:e0:
                    67:a0:3b:f3:e7:ee:e2:b9:bb:25:24:1d:f2:85:31:
                    01:01:cc:88:7d:1f:72:13:93:b5:ff:e4:6f:62:c0:
                    7c:85:7a:62:55:8a:a9:28:82:d6:3a:bc:8a:f2:b3:
                    f7:08:d7:2d:bb:61:d7:e6:48:0f:8d:7d:9e:41:92:
                    87:71:bd:62:9a:ac:39:6b:09:d0:e5:cc:25:ab:65:
                    38:48:8a:ab:c7:37:4a:8a:b3:4b:0d:a4:6e:ef:a3:
                    fe:82:dc:50:dc:8b:d5:77:69:55:ae:ad:44:3e:47:
                    7f:0b:a3:18:ac:ff:81:70:62:50:f5:b8:3c:49:bd:
                    4b:a6:6c:00:87:4c:a1:5d:53:59:3e:06:b7:55:aa:
                    fd:b1:2f:63:65:90:3e:7f:fc:8a:22:46:73:ab:d6:
                    81:50:36:b0:06:50:08:84:1b:de:27:8c:ed:1b:2b:
                    81:f3:fa:59:1c:47:ed:2b:fd:58:16:b1:71:26:c1:
                    86:b5:96:73:be:75:34:06:6f:cd:ed:3a:a7:e6:a5:
                    15:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:01:7E:D7:10:FD:A9:92:7F:25:DE:37:86:E8:F0:68:82:90:34:21
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:5080::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:9d:2f:07:14:5b:be:b2:9c:aa:98:84:6d:74:0a:20:89:37:
         0a:e7:14:0c:8f:15:f1:f0:18:40:35:46:69:b9:46:b1:e1:e7:
         83:8c:ba:30:0a:8c:a6:83:e8:d2:3e:43:e8:17:3b:2c:5b:f7:
         47:ae:a9:04:11:b9:52:27:63:7e:66:0a:05:75:ef:99:49:9d:
         68:ac:13:03:56:66:41:9d:07:7f:3b:d2:54:49:32:9a:d3:e9:
         ae:e3:e4:f0:2c:18:25:f4:6e:2f:98:7a:32:18:10:f9:b7:53:
         24:79:99:6d:18:38:fa:a3:e4:e0:b2:88:a3:63:90:59:2e:11:
         0b:49:0e:77:69:60:dc:ad:fd:e0:0b:e7:dc:60:c2:01:68:a6:
         9e:6c:f9:54:8b:f9:40:c7:df:37:b4:8d:ea:52:a3:fe:50:33:
         07:c0:ff:ae:fb:f1:50:e3:10:a7:da:b8:93:ad:38:7f:15:95:
         f2:6e:55:14:b6:fd:8d:96:9c:f2:cb:e6:c1:cf:e5:2c:10:a5:
         75:7e:35:74:3e:7e:19:c2:f4:2b:e7:1f:7e:f8:b0:38:80:cf:
         9b:0d:d8:67:c5:b5:1b:49:8b:ea:a7:46:70:80:02:e2:a3:c1:
         d6:bc:ee:e0:21:76:a3:fb:3b:8a:a3:29:4c:79:b5:57:ae:cd:
         9d:89:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----