Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
File:                     366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa (raw, json)
Hash identifier:          lcCQyPE1z7AF84Cf5ds/FSu90XtgG5tmKg+X69cNVM8=
Subject key identifier:   38:DC:62:BA:3C:95:5C:E7:1A:BD:56:C8:25:7A:2A:EA:79:92:93:28
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       28F3A841893A01C7C033CDB98EE5B4D1FF9B6983
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
Signing time:             Fri 11 Jul 2025 18:50:01 +0000
ROA not before:           Fri 11 Jul 2025 18:50:01 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:4040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f3:a8:41:89:3a:01:c7:c0:33:cd:b9:8e:e5:b4:d1:ff:9b:69:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 18:50:01 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=11a067111b9204b3993a23875e9407e78b4f704285fb873fe77563d47ee4aa3d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:e5:97:de:23:1a:34:48:f6:25:1f:87:7c:
                    ec:34:5a:ac:75:b7:6e:5e:a1:1b:0e:7e:26:8e:aa:
                    34:b2:19:ba:c7:01:a4:d4:af:db:97:b6:2d:99:7f:
                    05:77:00:7f:17:6d:a0:d8:6d:c3:73:87:4b:f3:c5:
                    22:89:1c:0a:82:4d:e8:a7:f8:31:38:f7:f7:f4:07:
                    d1:ea:84:65:2d:b2:ac:d4:0f:59:fe:a1:a4:07:b6:
                    1d:f4:f2:67:f8:2d:df:bd:38:78:14:56:78:42:dc:
                    81:30:e7:2b:89:4b:9f:cf:1c:8a:fe:0a:79:2d:41:
                    d9:ac:da:bd:22:d2:be:db:1b:3f:9e:aa:08:f8:df:
                    48:63:38:60:3e:60:49:0a:c5:7c:c0:10:43:81:43:
                    1c:0b:68:ba:c2:94:95:51:0a:4d:9f:57:59:f6:83:
                    bf:b0:df:82:df:a2:9a:46:f1:a8:9a:34:29:e9:1f:
                    ce:05:d7:45:c5:bc:2d:fa:ef:63:d5:c0:07:89:fa:
                    48:b5:c9:b6:db:d5:01:78:c3:6b:77:03:19:1e:f5:
                    d5:05:c0:b3:eb:aa:52:10:78:f3:e5:68:f3:69:83:
                    bd:de:7f:5f:df:1a:70:de:e8:14:b7:78:ef:00:7d:
                    b4:b0:4a:69:ce:d1:c4:37:16:af:87:06:fd:cd:ad:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DC:62:BA:3C:95:5C:E7:1A:BD:56:C8:25:7A:2A:EA:79:92:93:28
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:01:aa:22:35:70:3f:15:6c:18:86:f0:bd:67:9f:9c:ae:c7:
         81:91:83:6c:24:dd:4b:70:b8:84:80:d7:66:79:a0:41:b4:0a:
         b2:d5:63:52:21:a1:62:27:83:fa:8c:e2:a1:7d:88:c2:5c:b7:
         1a:e7:69:c3:ca:d4:17:f1:f6:c2:b6:47:74:48:78:08:ee:13:
         c7:9e:b4:ce:1c:1e:af:11:a2:60:b2:a2:b2:a4:b5:22:36:e1:
         4a:f7:0c:03:ba:10:72:32:e2:71:43:be:68:0e:07:91:10:b2:
         95:9e:ed:4b:f7:66:75:8a:3e:27:84:e6:cb:de:c8:50:03:c9:
         4d:15:4e:e9:d2:c7:9e:e5:01:d5:49:00:8f:73:9b:2e:73:b3:
         1a:17:bf:c5:62:fd:2c:0a:e3:b2:2f:4a:4b:af:94:1f:bc:63:
         fb:00:8d:04:94:2e:e9:6e:55:4c:cb:be:07:6b:b0:05:85:12:
         ea:ee:f3:57:9f:df:ee:c9:65:a5:40:c9:92:39:8f:b7:39:69:
         9e:47:03:8f:f2:d0:1e:f5:16:b7:93:dc:c6:ff:72:d3:61:4a:
         4a:08:8c:29:46:09:06:23:3a:08:84:43:06:02:97:f0:2a:ca:
         6e:d3:c6:32:11:a5:f4:6a:07:04:39:f0:13:f7:df:31:13:0b:
         1c:21:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----