Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa
File:                     8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa (raw, json)
Hash identifier:          SDFfaMpIc4cJYGlpLNBGpCJE4VRiURqSlDEBEVvGdd8=
Subject key identifier:   55:21:4C:BE:FD:F1:5E:2C:48:AB:B7:11:AF:56:E8:0C:C9:86:A3:A0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       37158B25A6246035C2BB22C356D025C2D81C2651
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa
Signing time:             Fri 11 Jul 2025 20:20:07 +0000
ROA not before:           Fri 11 Jul 2025 20:20:07 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d036:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:15:8b:25:a6:24:60:35:c2:bb:22:c3:56:d0:25:c2:d8:1c:26:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:20:07 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=c2bfe7ff25f5fd30d15278703b25d2035dbbfe9189bc08c951f9f63711fad748, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:9d:07:7b:ad:40:05:42:b6:92:51:1b:4f:
                    31:1c:6f:47:79:16:01:e4:81:51:30:ed:40:59:7b:
                    6e:74:ef:1e:50:dc:3d:97:8f:54:80:2d:e9:1c:85:
                    d2:06:81:90:38:44:f8:7c:96:a1:60:30:9c:a6:b8:
                    02:5e:8f:c5:a2:08:fa:ba:d7:02:5a:a7:67:a4:0c:
                    8f:63:7c:0c:ec:d7:17:7e:c7:11:a9:fd:ef:1d:7d:
                    1c:9c:a7:eb:87:f8:7c:b1:b8:f6:05:2a:03:b7:78:
                    70:f4:b8:98:cf:30:f9:03:52:a4:6e:36:2b:05:ff:
                    ee:c4:fe:1d:8d:72:8d:44:57:ce:7a:f5:af:2d:a6:
                    a6:c4:9f:2d:de:d7:88:ac:2f:90:1d:4b:c1:d7:ed:
                    12:07:02:d2:94:0d:91:bc:99:a8:1b:d4:8d:f8:1e:
                    4d:ed:83:e2:1a:df:09:95:61:b3:37:e2:9d:33:4b:
                    19:43:3f:ca:3d:76:63:6f:1d:e5:ec:ba:81:ce:28:
                    cd:10:cf:a0:c2:0b:38:e2:be:7f:2b:27:fa:d0:28:
                    7d:dd:70:83:6a:f6:7b:eb:f0:2a:9b:c2:63:78:54:
                    93:b8:a3:c7:5f:a4:56:95:6a:c3:55:82:30:69:39:
                    23:85:97:9d:f1:bb:ba:ce:f9:7b:00:2b:fe:2b:0c:
                    73:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:21:4C:BE:FD:F1:5E:2C:48:AB:B7:11:AF:56:E8:0C:C9:86:A3:A0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d036:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:6c:82:90:6b:fc:5d:36:da:7a:7f:77:b2:cd:d6:27:64:fc:
         49:4a:97:96:7e:be:62:9a:69:1c:52:19:22:f1:72:3e:26:b8:
         0a:2a:62:20:e0:d2:81:5b:c3:81:89:23:60:f4:84:2b:27:0d:
         49:89:89:ae:1d:0b:fc:7a:ce:ae:ec:03:dd:d0:1f:5f:35:b2:
         a4:d5:c7:49:d9:cb:cd:bb:2a:00:28:35:08:2a:7e:fb:95:16:
         48:1a:25:87:b3:62:62:50:e4:df:83:1f:85:97:c8:7e:d4:9b:
         f1:41:b5:c8:42:68:df:fc:a8:71:90:ab:7c:96:23:26:d2:e1:
         96:18:bb:11:7c:7e:0a:97:fc:d7:02:74:e1:8a:20:73:ba:6b:
         46:d9:12:6a:f0:0b:f3:16:56:72:2b:d2:25:30:a0:f1:89:77:
         33:c2:bd:7c:46:bc:c7:af:eb:c0:21:b3:8d:9c:fc:f9:aa:c6:
         f1:f8:3f:3c:fb:f7:e8:c7:fe:e4:0b:5b:14:d1:a1:cd:b6:07:
         d0:5b:e0:9c:69:43:59:da:2d:24:97:d9:b5:db:05:9d:5c:8f:
         ac:6b:e6:05:3f:76:25:d5:2f:d4:26:79:16:37:74:17:ad:ce:
         d6:90:7c:2f:76:ae:93:90:de:3f:b6:fd:9d:22:bf:f9:7a:58:
         81:6c:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----