Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/417101f4-2159-4c08-aa5e-b16ba0461450.roa
File:                     417101f4-2159-4c08-aa5e-b16ba0461450.roa (raw, json)
Hash identifier:          lmXVilwTypUXS9MQIdoiprZafQ9ZyuqpIq3H0b1E/a8=
Subject key identifier:   1C:D9:92:2B:0A:4E:70:4B:E0:B3:BC:B1:3D:9B:01:9E:7B:3A:AF:9E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       14E527F37DA14C2A40E9CEAEC6AA89BB224E11EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/417101f4-2159-4c08-aa5e-b16ba0461450.roa
Signing time:             Fri 11 Jul 2025 19:50:19 +0000
ROA not before:           Fri 11 Jul 2025 19:50:19 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d077:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e5:27:f3:7d:a1:4c:2a:40:e9:ce:ae:c6:aa:89:bb:22:4e:11:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:50:19 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=ba742f6c300aa3c5cd415b55498edb00e152374c4d63e8e0700f09f04413a0e1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:ef:c3:ff:77:bb:89:d3:a3:aa:ba:a3:25:
                    93:5f:77:f2:9b:19:d5:b2:cd:aa:d3:2b:73:d5:ab:
                    a3:5e:45:66:c0:7c:ae:43:78:9b:e6:dc:6c:a2:1a:
                    8f:d4:94:84:e3:4a:e9:ac:d4:8e:50:b7:5d:41:47:
                    fc:40:82:15:7b:9d:3f:fa:ca:f3:78:f1:b5:a0:0f:
                    7c:84:c5:e9:a1:21:5e:1f:13:04:19:ec:c5:31:0b:
                    28:7f:33:50:7f:29:4c:55:7f:49:46:84:c2:8a:6a:
                    36:18:70:f9:cf:d9:62:9e:a7:74:f5:05:66:7f:7b:
                    7a:51:64:3c:ee:c2:69:b1:6c:fb:7c:7b:94:20:5b:
                    b9:99:18:3b:7e:5c:5b:c0:52:1a:7b:d0:f2:e7:fb:
                    51:f2:bf:bf:f5:4e:3f:b2:ef:6d:2c:af:61:21:86:
                    21:6e:d1:5e:19:b0:ae:d5:69:a6:8b:5d:7c:64:57:
                    77:37:38:66:36:0f:14:fd:b9:1f:ec:81:47:61:c3:
                    0b:f1:a5:94:ee:a4:1d:1b:ff:6f:33:c8:55:d9:22:
                    4d:a6:68:20:64:52:cc:1a:29:9c:2b:95:ed:f0:82:
                    c4:dd:79:ca:d9:e8:fe:45:bf:20:01:6f:55:05:a3:
                    5f:25:6f:06:82:10:96:c5:37:6c:3b:ba:07:bb:51:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D9:92:2B:0A:4E:70:4B:E0:B3:BC:B1:3D:9B:01:9E:7B:3A:AF:9E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/417101f4-2159-4c08-aa5e-b16ba0461450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d077:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:eb:6d:9a:74:48:96:75:69:35:ad:59:9e:ac:fd:6e:02:38:
         dd:85:bc:ad:67:1f:a6:7b:34:cf:3a:fa:c9:f4:05:8f:54:80:
         40:eb:d6:a3:27:2e:94:e5:f3:0a:65:44:ee:f1:cf:77:be:2b:
         a7:3a:59:40:41:16:c6:a8:53:d4:71:99:5a:51:2c:05:16:e8:
         c0:ef:f7:f5:b1:d5:68:2a:9e:a5:d3:a7:d5:7d:f3:38:6e:f6:
         01:64:f8:fd:e0:bf:a8:44:d9:41:8a:8e:9f:f3:91:79:6b:a0:
         18:a5:0e:6e:a2:14:2a:47:58:fb:44:89:a7:e0:be:87:4d:f9:
         b5:0c:91:5f:21:54:ba:23:89:5b:24:bb:80:ac:6d:6d:26:e3:
         21:fa:3d:fd:5f:07:93:00:49:9a:4e:5d:17:f4:d8:04:fa:ce:
         c1:b0:52:4a:cb:e0:b0:71:f9:47:81:c0:a5:8f:c0:9f:72:4b:
         cb:77:aa:dc:3d:20:e5:cb:3d:2e:de:bf:f7:86:67:65:f8:0d:
         93:70:e3:d5:a2:39:eb:8e:80:12:8c:f0:43:c9:83:b5:bc:c1:
         ee:a5:7e:74:ae:01:1a:e1:46:61:60:9a:f9:8a:f0:30:2e:17:
         51:9c:6c:a6:bc:5e:42:da:ed:e8:df:c9:01:81:f4:c9:2e:80:
         a3:f4:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----