Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/925d550e-ff86-4691-95fd-99c84ee0d297.roa
File:                     925d550e-ff86-4691-95fd-99c84ee0d297.roa (raw, json)
Hash identifier:          4fek4IQYlskk+QdCURkFn+ob6k/NVnQLpHOs16wwhsM=
Subject key identifier:   D0:7A:37:81:B0:62:BD:94:ED:DD:D1:6A:99:1B:F4:9A:01:C7:AC:59
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       35022A14A4F10A5F46432554ED47BE0132DC7250
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/925d550e-ff86-4691-95fd-99c84ee0d297.roa
Signing time:             Fri 11 Jul 2025 19:51:13 +0000
ROA not before:           Fri 11 Jul 2025 19:51:13 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:02:2a:14:a4:f1:0a:5f:46:43:25:54:ed:47:be:01:32:dc:72:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:51:13 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=2fee2cf471305348e50c45ec4f6ea2e462d19a1f543f181cb3318d7e0aff0461, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:4c:83:ec:ef:5f:81:8b:52:84:d9:cf:6c:
                    70:3f:c3:3d:cd:ba:6e:32:d4:63:80:49:68:0d:23:
                    b0:a2:b5:3c:59:4e:25:d9:de:e2:93:6c:ad:32:b8:
                    da:9a:46:93:43:72:01:ae:4b:d0:40:b8:8c:b2:30:
                    32:cd:2c:49:47:0c:f8:68:a0:76:fd:59:0f:0e:e9:
                    db:9c:da:5b:17:4f:c8:68:fe:b4:0d:53:af:02:71:
                    8a:30:bd:ee:33:12:0e:31:53:af:8a:f6:cc:55:ce:
                    32:73:ac:9c:36:ea:3a:8c:c6:8f:9e:d4:56:34:72:
                    43:90:de:1e:b0:63:14:04:51:78:83:78:f3:4e:48:
                    49:cd:53:8c:15:6d:47:a6:77:29:1b:be:5e:f9:d3:
                    c7:c2:72:22:18:4a:cb:45:76:02:f8:fa:42:1e:19:
                    86:2f:1f:4b:16:42:1a:b1:ec:67:93:40:64:3e:ad:
                    44:e4:b5:7a:37:e0:9b:eb:02:a5:fd:92:cd:87:10:
                    77:ef:16:83:ce:0d:99:54:25:1f:a2:20:de:b9:95:
                    96:19:e9:55:14:2e:3d:a6:f4:41:7b:73:ca:2c:aa:
                    a6:58:28:fd:f1:b8:9a:d1:c0:9a:90:25:21:02:ec:
                    34:65:a3:1c:35:62:ee:22:9a:cb:4e:ac:4a:84:6f:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7A:37:81:B0:62:BD:94:ED:DD:D1:6A:99:1B:F4:9A:01:C7:AC:59
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/925d550e-ff86-4691-95fd-99c84ee0d297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:81:34:75:6c:db:6e:86:00:3b:01:8f:0b:28:50:2e:67:a3:
         ad:7b:84:39:e3:2b:c0:a7:95:7f:36:8b:7b:b6:44:56:87:ee:
         1c:3f:50:85:2e:09:16:c9:b1:f3:2f:b1:98:7e:4b:22:68:d6:
         66:62:73:6e:f2:58:f0:d1:b0:fa:8f:66:b0:73:d8:80:22:d2:
         0a:8e:5a:71:f7:38:ff:21:f6:4b:e3:c9:b3:80:c8:31:15:61:
         4a:18:0d:51:62:63:12:53:39:cd:36:37:5e:3d:86:0a:03:c3:
         10:50:fb:af:87:fa:32:5b:b7:3f:b3:93:f0:a8:cc:20:7c:12:
         74:2f:08:05:77:e2:36:56:e7:c3:1d:1a:0e:50:50:20:45:0e:
         a4:93:c4:c3:3e:6a:ac:d2:70:95:91:d9:56:65:49:41:a0:34:
         1e:5a:2a:44:8e:d2:83:db:63:29:0b:1b:65:ad:7f:58:41:99:
         39:e3:97:f4:72:ed:fe:af:32:91:ba:08:00:86:1e:9e:ef:c0:
         2f:ff:9e:25:5d:0d:74:ca:60:a7:23:4e:10:f5:12:ac:a8:b6:
         7d:d9:b1:ab:51:fe:cb:29:85:30:ec:d1:cc:97:e9:34:8f:07:
         70:76:45:55:3b:76:23:89:bf:b1:d6:c1:86:a4:b4:d8:e8:87:
         26:e5:f6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----