Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e58fa17-0cfc-4a06-8d48-47d96c0d49af.roa
File:                     6e58fa17-0cfc-4a06-8d48-47d96c0d49af.roa (raw, json)
Hash identifier:          VnjyJltgW7H4ERXe1DYEvF97SHZYkA4N/RGce7Ct+rw=
Subject key identifier:   D3:6F:BC:F1:95:1F:57:35:77:89:9F:E6:F3:BC:8F:D8:1C:D3:64:93
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4988818AB32FF46DEEB32F74D68CD899E8244A74
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e58fa17-0cfc-4a06-8d48-47d96c0d49af.roa
Signing time:             Fri 11 Jul 2025 20:41:19 +0000
ROA not before:           Fri 11 Jul 2025 20:41:19 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01e::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:88:81:8a:b3:2f:f4:6d:ee:b3:2f:74:d6:8c:d8:99:e8:24:4a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:41:19 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=a97eced924e0d79520c1bede5c6989565f3bd1eeeb4d47c046668cce9e6bfabc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:12:57:79:56:6a:50:9f:51:7d:b9:5e:a5:
                    d2:61:5b:fc:61:e8:a9:75:f8:7a:16:5f:b2:b8:d9:
                    b7:a2:42:aa:ed:f0:0e:49:b3:0b:ef:1e:1f:92:10:
                    68:5e:50:26:9d:0b:6d:e5:0e:95:c1:be:b8:a6:a4:
                    99:d0:ab:f7:a2:bb:0a:4c:78:e7:76:90:1c:41:e0:
                    8d:8a:2c:a5:88:c5:c2:6e:0d:b1:86:4e:cb:01:fb:
                    e6:dd:02:2f:96:70:ea:c5:c3:54:9b:d0:dd:01:77:
                    7f:08:80:76:54:b4:f4:a9:77:c1:a6:df:40:5f:5a:
                    a5:25:cd:33:a4:45:9b:59:8e:bb:ed:38:51:b7:40:
                    f8:ee:bb:65:86:9a:c3:6d:d2:86:83:34:81:6c:88:
                    83:89:cc:1a:62:c8:95:94:7f:6c:8d:58:ba:b2:88:
                    0e:94:08:70:b4:85:f7:ca:ef:9a:64:8a:92:ed:0c:
                    79:38:58:a3:b9:44:63:c0:c0:42:ff:f5:58:cc:58:
                    47:6a:55:01:09:14:30:be:a0:da:df:a7:fb:a2:04:
                    32:ff:db:cc:3b:76:1e:74:ef:2d:99:12:ef:73:fc:
                    9b:e8:80:e1:d7:bc:fe:d0:33:74:22:fc:c6:d4:12:
                    3b:43:80:32:80:e1:6d:e2:12:49:18:38:6e:42:a5:
                    51:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6F:BC:F1:95:1F:57:35:77:89:9F:E6:F3:BC:8F:D8:1C:D3:64:93
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e58fa17-0cfc-4a06-8d48-47d96c0d49af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01e::/36

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:07:ac:12:66:6a:06:bb:d0:5b:14:9f:e8:95:19:3d:b7:
         22:41:97:56:1d:c9:ef:5b:df:f0:e5:f2:e0:aa:53:71:e4:76:
         d1:b5:c1:88:b7:00:30:68:9c:0b:80:db:a8:99:47:7c:1c:44:
         29:90:05:0f:2a:bc:d4:12:03:b4:f1:b1:f5:eb:b8:0b:c0:e4:
         f4:99:f9:ee:82:b7:8a:7d:97:19:e2:08:26:f7:ac:dd:14:e1:
         62:06:71:ef:35:cd:f0:a3:38:86:07:b6:70:8a:21:4d:2e:0e:
         27:b0:ea:1c:6c:b6:3f:46:61:6a:79:a8:83:e5:f4:ac:9a:e1:
         4f:db:f1:6d:92:a7:eb:1f:6e:f5:23:92:27:39:e3:6b:bd:c2:
         51:ac:2a:bb:1c:a4:4e:c7:93:ae:28:62:34:58:c0:55:55:4d:
         da:2f:7b:cf:74:38:a4:b7:97:c9:9b:6a:4c:00:9b:16:fa:43:
         f2:70:8e:9a:bc:48:f0:2b:38:e4:6f:35:fb:e8:ee:d6:40:32:
         23:a1:49:26:19:c2:3f:86:e1:56:81:d9:cf:65:38:37:89:44:
         bd:25:12:d4:5d:c3:29:14:da:b2:fd:0c:0a:95:3a:6d:ae:7b:
         1a:32:85:63:43:9e:fe:23:ce:68:87:82:ce:b2:5a:ce:a4:78:
         5d:ff:c7:ce
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSYiBirMv9G3usy901ozYmegkSnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDQxMTlaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGE5N2VjZWQ5MjRlMGQ3OTUyMGMxYmVkZTVjNjk4OTU2NWYzYmQxZWVlYjRk
NDdjMDQ2NjY4Y2NlOWU2YmZhYmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKTFEld5VmpQn1F9uV6l0mFb/GHoqXX4ehZfsrjZt6JCqu3wDkmzC+8eH5IQ
aF5QJp0LbeUOlcG+uKakmdCr96K7Ckx453aQHEHgjYospYjFwm4NsYZOywH75t0C
L5Zw6sXDVJvQ3QF3fwiAdlS09Kl3wabfQF9apSXNM6RFm1mOu+04UbdA+O67ZYaa
w23ShoM0gWyIg4nMGmLIlZR/bI1YurKIDpQIcLSF98rvmmSKku0MeThYo7lEY8DA
Qv/1WMxYR2pVAQkUML6g2t+n+6IEMv/bzDt2HnTvLZkS73P8m+iA4de8/tAzdCL8
xtQSO0OAMoDhbeISSRg4bkKlUYcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTTb7zx
lR9XNXeJn+bzvI/YHNNkkzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmU1OGZhMTctMGNmYy00YTA2LThkNDgtNDdkOTZjMGQ0OWFmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0B4A
MA0GCSqGSIb3DQEBCwUAA4IBAQAKawesEmZqBrvQWxSf6JUZPbciQZdWHcnvW9/w
5fLgqlNx5HbRtcGItwAwaJwLgNuomUd8HEQpkAUPKrzUEgO08bH167gLwOT0mfnu
greKfZcZ4ggm96zdFOFiBnHvNc3woziGB7ZwiiFNLg4nsOocbLY/RmFqeaiD5fSs
muFP2/FtkqfrH271I5InOeNrvcJRrCq7HKROx5OuKGI0WMBVVU3aL3vPdDikt5fJ
m2pMAJsW+kPycI6avEjwKzjkbzX76O7WQDIjoUkmGcI/huFWgdnPZTg3iUS9JRLU
XcMpFNqy/QwKlTptrnsaMoVjQ57+I85oh4LOslrOpHhd/8fO
-----END CERTIFICATE-----