Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
File:                     33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa (raw, json)
Hash identifier:          H4+iNWhp8PivyAVC2N8uq/ynWqWDOBusW81wDKxfGOA=
Subject key identifier:   09:1B:08:25:D3:C3:80:98:79:B0:E8:CC:4F:93:87:94:2C:16:94:6B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6F3C378EC0DCD1FA53713E1B5EBD328F2B735284
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
Signing time:             Fri 11 Jul 2025 20:50:01 +0000
ROA not before:           Fri 11 Jul 2025 20:50:01 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d016:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3c:37:8e:c0:dc:d1:fa:53:71:3e:1b:5e:bd:32:8f:2b:73:52:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:50:01 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=5988455fca2ab32da19780f9eda2951ea2cb000885e2f6a9369c904d1d4fb3ba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:7d:3a:89:12:71:f8:19:c6:b1:ba:02:61:
                    76:70:88:de:4c:53:f6:ae:a7:11:77:0c:b8:0d:39:
                    a4:af:90:45:b5:7b:90:70:56:42:b3:24:81:2d:ad:
                    cd:94:82:69:94:46:7b:23:ff:b7:a0:60:84:38:02:
                    6c:f1:7a:a6:2d:f2:f0:dd:89:78:e8:f6:64:3d:13:
                    c1:ae:6a:0d:04:ad:2b:de:c7:87:72:62:1e:38:b5:
                    50:0f:39:43:20:21:b3:d2:4a:da:11:9f:ba:2a:4b:
                    bc:f4:5a:c0:95:3c:1b:82:81:4e:f2:0a:85:56:64:
                    2b:6c:ee:c5:27:c4:ed:cc:90:ae:33:80:d7:7d:72:
                    00:5c:88:61:47:ad:ef:d7:3b:7a:46:4b:22:db:d8:
                    7b:d2:26:71:ce:53:ef:01:1b:fd:08:74:56:8b:8c:
                    39:39:a8:7e:26:f0:1f:3c:28:31:a2:94:ac:57:a7:
                    6e:28:57:18:6f:bb:5f:b3:08:59:74:a9:d7:bd:09:
                    40:11:67:25:0b:50:a0:02:9d:01:ba:16:87:ff:f0:
                    e2:2c:7c:da:3b:ea:ba:56:dd:ad:96:5e:99:41:ac:
                    b0:84:e6:fa:fd:48:93:2f:52:d8:11:c7:2c:5a:f2:
                    16:c7:5e:10:10:c5:15:68:fc:ec:ba:91:37:2c:de:
                    1b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1B:08:25:D3:C3:80:98:79:B0:E8:CC:4F:93:87:94:2C:16:94:6B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d016:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         62:49:d0:ea:2b:1d:8b:6a:dd:0e:e9:fa:ae:ac:c8:97:43:e4:
         eb:82:fe:29:7f:73:b0:ff:28:34:ef:87:e3:4b:dc:2c:3b:91:
         4f:76:b9:71:17:3e:06:e6:2a:68:29:a9:ab:dd:17:05:1d:38:
         9f:9c:93:21:3a:c1:a5:94:af:43:27:70:40:4e:18:01:cc:a8:
         1b:42:75:32:44:94:f5:25:5c:58:44:e5:fc:74:9d:c9:de:7e:
         18:f2:f8:9d:26:82:e8:2d:90:9e:aa:ec:3b:88:dc:21:df:23:
         4b:19:7d:9c:34:26:ad:15:8b:77:4f:65:43:eb:85:5c:75:e9:
         9d:f3:22:69:b6:f8:d0:ad:67:16:91:c4:69:b5:5d:eb:ea:21:
         18:9a:cc:ee:a8:c0:4f:ac:69:ea:ef:b5:32:7e:b5:8e:6a:ef:
         04:29:20:32:1d:34:e0:14:4e:d8:51:77:23:54:2d:2f:62:54:
         3e:26:31:88:01:39:9f:49:f8:61:67:b5:11:46:ec:fa:8c:8b:
         fd:68:5a:e6:e6:f2:f4:32:8a:6b:8e:ea:35:a9:62:14:f5:83:
         85:c3:f2:bf:d6:40:db:1a:5d:9d:18:b8:95:a2:b0:a2:40:bd:
         56:81:21:b0:17:ce:7f:d8:5a:4d:81:88:32:25:b1:8c:aa:39:
         18:d6:0a:be
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbzw3jsDc0fpTcT4bXr0yjytzUoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDUwMDFaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDU5ODg0NTVmY2EyYWIzMmRhMTk3ODBmOWVkYTI5NTFlYTJjYjAwMDg4NWUy
ZjZhOTM2OWM5MDRkMWQ0ZmIzYmExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK5UfTqJEnH4GcaxugJhdnCI3kxT9q6nEXcMuA05pK+QRbV7kHBWQrMkgS2t
zZSCaZRGeyP/t6BghDgCbPF6pi3y8N2JeOj2ZD0Twa5qDQStK97Hh3JiHji1UA85
QyAhs9JK2hGfuipLvPRawJU8G4KBTvIKhVZkK2zuxSfE7cyQrjOA131yAFyIYUet
79c7ekZLItvYe9Imcc5T7wEb/Qh0VouMOTmofibwHzwoMaKUrFenbihXGG+7X7MI
WXSp170JQBFnJQtQoAKdAboWh//w4ix82jvqulbdrZZemUGssITm+v1Iky9S2BHH
LFryFsdeEBDFFWj87LqRNyzeG0MCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQJGwgl
08OAmHmw6MxPk4eULBaUazAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzNkMjdkMzAtYWM1Yy00MTViLThiOTYtYmRmM2ZhMmRhM2U1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BYI
MA0GCSqGSIb3DQEBCwUAA4IBAQBiSdDqKx2Lat0O6fqurMiXQ+Trgv4pf3Ow/yg0
74fjS9wsO5FPdrlxFz4G5ipoKamr3RcFHTifnJMhOsGllK9DJ3BAThgBzKgbQnUy
RJT1JVxYROX8dJ3J3n4Y8vidJoLoLZCequw7iNwh3yNLGX2cNCatFYt3T2VD64Vc
demd8yJptvjQrWcWkcRptV3r6iEYmszuqMBPrGnq77UyfrWOau8EKSAyHTTgFE7Y
UXcjVC0vYlQ+JjGIATmfSfhhZ7URRuz6jIv9aFrm5vL0Moprjuo1qWIU9YOFw/K/
1kDbGl2dGLiVorCiQL1WgSGwF85/2FpNgYgyJbGMqjkY1gq+
-----END CERTIFICATE-----