Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6bd3f603-c189-489c-bdf5-631b47b2cd39.roa
File:                     6bd3f603-c189-489c-bdf5-631b47b2cd39.roa (raw, json)
Hash identifier:          +h9d7XiGmvd3AkkU2BqUW0JHTGsmUkoXJA4zryP67Qg=
Subject key identifier:   13:A3:52:95:CB:18:D9:8F:16:EB:F3:18:EC:E8:0C:C2:D1:8B:6C:68
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1BF356A0312954508DBC2CD4BD8F12C7D9AF66AE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6bd3f603-c189-489c-bdf5-631b47b2cd39.roa
Signing time:             Fri 11 Jul 2025 18:40:34 +0000
ROA not before:           Fri 11 Jul 2025 18:40:34 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:80c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f3:56:a0:31:29:54:50:8d:bc:2c:d4:bd:8f:12:c7:d9:af:66:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 18:40:34 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=1b07a6e1dee584bd7d738f6f487e6060a03e8e8149dea9504f22ca5be9102e69, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c2:33:c0:93:35:d1:c7:d0:02:87:ff:3d:1b:
                    22:62:29:d4:fd:a2:1e:e3:62:0c:76:41:fe:af:e1:
                    6d:7a:36:8f:ce:75:38:d1:97:b3:96:46:59:9b:24:
                    17:b5:f2:96:cd:77:3a:aa:6b:45:cc:c9:8c:16:37:
                    1a:a4:ab:db:eb:1a:b9:fe:0a:18:46:7f:6f:8d:69:
                    26:ae:cf:2b:16:cf:1f:80:72:3f:31:59:65:81:7d:
                    a5:42:54:e1:93:7b:a0:66:7c:0f:c6:34:46:e2:29:
                    9c:4f:51:d7:5f:eb:3c:9a:9b:d9:53:9a:13:e8:a9:
                    80:06:7a:ab:43:38:78:24:69:28:2e:e0:74:59:12:
                    d5:b7:38:dd:8b:2e:2a:24:14:83:24:11:1d:07:9d:
                    11:66:20:bd:1c:77:5f:65:01:80:23:82:ac:f1:32:
                    85:8c:1c:eb:7d:4b:b4:68:19:cf:96:87:a2:08:35:
                    bb:3d:75:22:af:67:f7:d3:23:e3:31:31:a0:98:c7:
                    c5:ed:cd:fe:a4:a1:3f:6d:7d:3d:36:a2:17:20:f2:
                    38:50:5c:14:0a:29:61:09:da:15:05:e1:c4:81:fc:
                    70:84:24:9f:4c:3e:1b:f9:3e:8f:2e:79:e9:88:25:
                    d9:d0:2d:62:e5:78:84:25:7b:4e:f9:e9:4f:b5:2c:
                    61:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A3:52:95:CB:18:D9:8F:16:EB:F3:18:EC:E8:0C:C2:D1:8B:6C:68
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6bd3f603-c189-489c-bdf5-631b47b2cd39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:96:41:e6:9a:84:ee:2c:62:c1:3b:df:c1:5e:e5:a4:d4:8b:
         45:db:c5:ba:3e:32:2d:2a:d7:59:b5:87:c6:f4:a3:52:6a:b6:
         47:09:53:92:7e:e7:2c:77:7a:9c:39:65:6c:74:5a:27:14:dd:
         54:c9:f9:4c:ac:08:a4:2c:7b:49:fe:06:ae:be:a3:92:05:f1:
         66:db:25:a3:0c:21:f7:6a:60:85:0a:a3:44:d9:da:03:a9:b2:
         a4:c1:e4:e5:cc:9d:41:1b:ab:92:1c:72:48:59:5f:cb:f1:9d:
         d2:75:20:47:2a:9c:25:01:5f:78:53:02:df:44:52:a2:0f:2b:
         74:bb:36:7b:f3:e6:b3:df:ef:b4:2c:04:11:4f:b4:18:57:a0:
         c8:9d:81:17:3e:18:f0:0e:cb:90:2e:a7:98:b3:84:6f:0d:5e:
         b9:ba:6b:14:77:d4:2a:b2:b4:ea:49:b8:7b:8b:ba:df:e0:f0:
         6f:f4:e4:11:1e:c1:be:72:ee:e4:87:dc:10:f3:53:4b:48:4c:
         eb:12:ef:3c:9e:55:9e:35:f1:76:22:49:58:0e:78:19:03:a3:
         dd:bd:3d:a0:88:34:a3:5a:c2:5e:84:92:15:fb:bf:f5:9f:e5:
         18:4a:db:67:c6:c1:08:e7:fe:2e:81:4e:03:1c:8b:57:88:ac:
         aa:7d:7f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----