Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
File:                     51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa (raw, json)
Hash identifier:          eAu7B3D+dw/l6diS4J4fo+OyeUvjOchDVTGmRMmhc1Y=
Subject key identifier:   0E:75:91:A2:50:9F:EE:43:CE:14:A5:D6:6E:13:7B:FA:C8:CF:E3:03
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       533D02F838EBBA3D8F89C8AB13DEB8B69AE99E4B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
Signing time:             Fri 11 Jul 2025 19:21:34 +0000
ROA not before:           Fri 11 Jul 2025 19:21:34 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:80d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3d:02:f8:38:eb:ba:3d:8f:89:c8:ab:13:de:b8:b6:9a:e9:9e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:21:34 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=8fd0eba40109ddde7a125c4d67fa71ed56fa0093bfee7d104396b4f1313e1d19, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8e:79:90:a3:ee:e0:88:73:87:13:9d:b6:5b:
                    a8:ef:95:7e:ae:b9:ae:e2:34:54:f1:fc:9c:4b:be:
                    32:60:14:58:c9:f9:f3:f3:59:89:a2:ca:be:c3:0b:
                    59:b3:da:9b:de:b4:8e:b3:a6:f4:6f:85:84:0c:8f:
                    d2:a4:ea:df:c8:ff:b0:32:80:54:90:82:7c:7a:df:
                    75:73:18:02:8e:55:f2:92:a4:4e:b1:58:6d:48:95:
                    bc:f8:ab:d4:66:73:6c:1b:71:2c:7f:64:19:fb:b7:
                    ea:ba:d9:59:ff:10:b9:a3:ea:8a:29:af:ef:f2:9e:
                    88:c1:c7:8f:14:90:0f:88:87:5a:5b:b4:95:c5:a5:
                    9d:03:cd:7c:ef:4b:33:d1:d3:64:9b:e0:b6:9c:da:
                    a2:c4:3b:5d:50:9d:19:22:c8:26:84:d2:76:61:ca:
                    67:a9:2a:23:47:07:0c:d8:9c:a6:7f:66:c0:bd:ff:
                    af:f3:b3:88:ec:42:7a:63:e1:a5:7c:47:23:ef:f8:
                    11:46:92:05:d7:3a:3c:17:89:4d:31:79:01:a1:7d:
                    be:79:81:9b:40:66:2f:ba:9f:0f:95:63:92:cf:11:
                    d8:da:5a:8d:72:14:3a:27:31:e9:36:0b:09:a3:e2:
                    08:3a:2d:76:a8:31:2f:55:82:f7:02:12:d2:fc:74:
                    9f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:75:91:A2:50:9F:EE:43:CE:14:A5:D6:6E:13:7B:FA:C8:CF:E3:03
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:80d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:32:cf:73:71:05:c7:8f:65:e6:ef:42:7c:ea:78:f9:dc:31:
         51:57:cd:5e:53:49:b2:47:3f:2a:76:f0:40:ba:a1:20:25:da:
         16:cf:37:aa:9b:63:7e:dc:f3:38:85:8a:8c:ed:d5:eb:f1:86:
         f3:76:c6:87:9d:63:1f:97:f5:2a:2e:b5:bb:be:ab:4f:ad:10:
         7c:20:cd:84:9b:33:fb:f6:29:13:e8:aa:42:8b:94:be:44:d1:
         ca:50:9f:dd:43:51:a4:9a:58:3d:3b:0d:da:fc:fc:64:c9:a1:
         bd:e8:0e:2e:63:ec:f6:6b:fb:a4:69:c7:f8:8b:5f:3b:9b:b7:
         4c:0f:77:b6:01:4a:cc:40:52:bc:8c:81:7a:7f:e7:d7:64:6b:
         cd:e5:8b:89:6a:e3:ac:62:e9:e3:67:3a:c9:49:46:a3:a5:27:
         d7:32:2c:7f:b2:ef:e0:72:85:cf:1c:a1:af:90:9b:d8:94:87:
         68:49:b2:64:c8:cb:0f:5c:d6:a5:3c:71:77:77:7a:f3:bb:28:
         4f:03:4c:ca:83:b3:cc:8a:75:bb:15:c0:fd:6e:0d:a5:19:3f:
         4a:dc:c1:6f:92:84:88:94:08:16:4d:85:68:76:12:77:f4:11:
         e2:2d:25:86:c1:9c:53:12:a0:d8:91:51:2a:11:d0:27:a8:79:
         c4:15:f0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----