Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e4adf38-a007-4c0e-8621-1e65a160ad12.roa
File:                     8e4adf38-a007-4c0e-8621-1e65a160ad12.roa (raw, json)
Hash identifier:          vfseeMY8q+ukPfGUaEufuxuY2KhDzjEX55zyZdWA4Ew=
Subject key identifier:   69:E0:59:10:FE:8E:03:D9:95:74:9C:41:AE:DB:7F:54:48:B9:2E:0B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7FA106896C417C60B6B7096B243DEEC2EEBDD029
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e4adf38-a007-4c0e-8621-1e65a160ad12.roa
Signing time:             Fri 11 Jul 2025 19:31:18 +0000
ROA not before:           Fri 11 Jul 2025 19:31:18 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a1:06:89:6c:41:7c:60:b6:b7:09:6b:24:3d:ee:c2:ee:bd:d0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:31:18 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=c45f9285d7bc79fe41bd1f2527b5ca7e66da6c131959b4c9d0a2d03afbeff551, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:0f:5e:8f:09:c8:44:73:51:74:6f:be:7c:
                    0f:fc:11:2d:98:0a:8c:5c:e6:24:42:d7:9e:e9:ec:
                    51:3d:10:da:ac:7c:82:0a:60:99:0d:e9:76:94:55:
                    d0:41:2d:cc:76:2c:61:73:a4:09:7e:62:dd:7b:a3:
                    4f:62:45:6c:92:35:4f:7d:33:f8:f1:c5:5f:9f:b2:
                    ef:67:1e:38:39:c6:38:0d:c4:d8:cb:43:c9:28:e0:
                    a5:a6:2b:19:ee:ce:ea:ef:80:7e:98:8d:c6:71:34:
                    5f:80:0f:8b:61:45:d1:33:6b:67:32:54:b5:9f:5a:
                    6a:70:a3:6c:2b:c5:9d:ad:74:d7:ac:6c:64:49:73:
                    dd:8d:b5:4c:69:aa:bd:0a:4b:83:59:52:4e:08:3e:
                    e0:5a:5b:d1:53:6e:d5:77:05:df:c3:cf:f5:11:1e:
                    ac:41:99:c8:6a:7a:3a:7e:3f:9b:ab:ad:5e:05:80:
                    ac:59:65:79:b7:e5:0d:5a:ae:14:9a:19:59:12:aa:
                    9d:a5:30:0f:85:19:63:e7:8b:37:95:78:cf:4a:fc:
                    42:fa:45:d9:d5:8f:32:3e:19:a5:d8:52:45:4e:2f:
                    df:be:58:b2:fd:76:63:a1:26:68:de:27:99:87:ac:
                    95:83:0c:36:f4:62:32:b1:bf:40:77:e0:6e:ec:32:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E0:59:10:FE:8E:03:D9:95:74:9C:41:AE:DB:7F:54:48:B9:2E:0B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e4adf38-a007-4c0e-8621-1e65a160ad12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:2b:1a:00:f5:87:73:39:1e:db:01:68:b8:c2:5b:cd:21:c8:
         aa:ea:fc:0e:27:f4:9c:36:36:5b:d9:38:ac:12:b5:38:85:24:
         9d:b5:f3:99:1e:c0:72:1b:77:19:51:ee:7f:93:a6:eb:5e:81:
         6d:3d:01:b2:03:0e:c9:4c:32:17:74:62:01:0f:09:07:63:e2:
         6a:e3:cc:38:1d:fb:d7:67:9f:cd:49:7b:81:84:ff:25:68:47:
         3c:16:1d:9f:18:ea:02:a5:ed:98:35:73:45:0f:e8:26:32:2c:
         f4:37:2f:2d:71:75:f7:3f:b5:14:23:25:d2:16:cc:5d:a3:39:
         00:18:01:ca:99:03:8e:76:45:af:dc:d7:25:ea:04:a8:94:e7:
         3a:28:78:5a:80:9b:a7:cd:40:8e:b6:82:a6:db:59:fe:bb:10:
         93:82:6b:35:b1:5f:7c:18:78:cc:a2:f2:c1:67:a6:f0:62:d3:
         0c:94:4b:45:e7:9c:d0:ce:0d:10:ae:cb:60:31:e2:f1:98:be:
         c2:ce:41:9f:f8:9f:df:c4:4f:42:3f:c1:ef:1d:a1:17:09:bd:
         0c:45:aa:1f:f0:a9:68:3f:a8:51:1a:2d:69:69:a4:86:2c:21:
         b7:71:af:37:6c:50:09:fe:57:4d:64:d9:0b:f6:3b:7a:59:cb:
         a9:7a:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----