Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6d14d01-1a1b-448e-bb4a-73279a06c540.roa
File:                     a6d14d01-1a1b-448e-bb4a-73279a06c540.roa (raw, json)
Hash identifier:          jJBRZWHv7NGhQcKtTxO5/ytpQ7brdJqY9eJ6q/o/TLI=
Subject key identifier:   47:8D:DA:82:40:83:86:DF:87:5D:C0:84:54:3A:7E:5E:B1:D9:D5:47
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       19DE09E2ED97149504564DE17264E9031BF1D5A3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6d14d01-1a1b-448e-bb4a-73279a06c540.roa
Signing time:             Fri 11 Jul 2025 19:01:07 +0000
ROA not before:           Fri 11 Jul 2025 19:01:07 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:5040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:de:09:e2:ed:97:14:95:04:56:4d:e1:72:64:e9:03:1b:f1:d5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:01:07 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=c41d7de04d733c78829d44cd2fd2d023eb2f8e55bbb23f09131b3b14271cc246, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e7:e5:c5:ae:ee:3f:48:d4:29:58:01:7d:75:
                    a7:9e:2d:98:2f:8c:d6:c7:c2:04:cc:ce:b1:9b:9e:
                    e1:ab:d3:e4:21:11:88:f6:c2:43:92:f9:ed:58:f7:
                    57:c3:93:bf:c8:e2:f5:50:36:d5:f6:95:64:13:38:
                    21:1f:69:c5:c9:93:b6:9e:e9:a6:4b:37:6f:ac:cf:
                    f8:33:df:74:33:e2:0d:e7:e5:ee:12:ce:f7:9c:e7:
                    dc:33:48:d6:34:b9:38:2d:73:90:65:fa:ed:27:8d:
                    8f:8a:c2:2e:e4:91:5f:d5:ac:d4:cf:ad:d9:d6:d2:
                    fe:8a:3c:41:62:42:c7:bd:26:05:d8:1d:4a:40:2f:
                    c6:5f:02:d6:f2:b3:b7:0c:7b:b7:17:58:aa:74:74:
                    b8:90:ed:16:6a:2a:c5:20:47:62:2d:b7:01:66:fc:
                    a1:4a:79:51:1e:1a:09:7e:6f:da:90:39:21:65:72:
                    7b:17:62:7b:05:86:75:c8:bf:92:9e:91:4f:fc:64:
                    a1:19:a5:9f:29:21:b0:46:78:ca:08:9f:fc:a3:3a:
                    9a:b4:79:f0:a3:6e:63:4f:48:2f:9a:88:4f:85:e4:
                    74:4e:d1:2e:28:c6:f8:9e:59:15:52:11:76:37:48:
                    ca:49:f6:28:10:1b:6a:4e:b0:b2:a6:c6:e9:fb:ec:
                    0f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8D:DA:82:40:83:86:DF:87:5D:C0:84:54:3A:7E:5E:B1:D9:D5:47
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6d14d01-1a1b-448e-bb4a-73279a06c540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:47:b5:bb:1a:67:ef:93:26:ba:c6:a8:78:fb:78:66:3f:bf:
         da:f7:0a:7c:2d:64:88:03:c9:f3:cd:c7:8e:c9:f5:fe:f7:88:
         82:81:f6:57:fd:8a:5f:bc:d0:88:20:14:b9:f7:31:b5:5b:db:
         9a:d3:d8:31:5b:92:9a:e7:4c:4d:9e:9c:00:f1:c0:88:5f:47:
         e9:78:57:f5:f9:77:71:31:ef:1b:0b:2b:b7:b6:b4:b3:8b:d5:
         f6:be:b4:a2:38:df:e2:e1:90:a9:35:62:9a:4b:d0:05:7d:9b:
         8c:65:f9:c6:8a:19:1a:b7:a2:ac:fa:16:77:fa:10:2f:6d:ca:
         2c:d3:94:ae:3a:7c:f9:58:d6:8c:b5:87:8c:e9:ff:88:a0:15:
         17:da:6e:70:d5:d5:6f:e1:9e:03:1c:b4:3a:26:d2:1e:54:fe:
         7d:c3:18:87:3d:d1:8d:ee:8d:05:12:d1:82:04:01:72:7f:5e:
         67:44:c0:9c:4a:53:75:13:9a:6a:9f:5f:f4:a0:4f:31:b1:1e:
         7a:40:26:ef:5c:f8:66:3a:60:3c:16:bf:0a:60:fa:6a:a0:70:
         cc:64:d2:6d:3d:71:3e:95:69:9e:55:f9:2a:12:e0:27:78:7d:
         c9:ae:b2:54:bc:5c:c3:c9:5b:6f:94:7c:65:1f:07:2e:e8:69:
         13:1d:1b:c3
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUGd4J4u2XFJUEVk3hcmTpAxvx1aMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTExOTAxMDdaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGM0MWQ3ZGUwNGQ3MzNjNzg4MjlkNDRjZDJmZDJkMDIzZWIyZjhlNTViYmIy
M2YwOTEzMWIzYjE0MjcxY2MyNDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN7n5cWu7j9I1ClYAX11p54tmC+M1sfCBMzOsZue4avT5CERiPbCQ5L57Vj3
V8OTv8ji9VA21faVZBM4IR9pxcmTtp7ppks3b6zP+DPfdDPiDefl7hLO95zn3DNI
1jS5OC1zkGX67SeNj4rCLuSRX9Ws1M+t2dbS/oo8QWJCx70mBdgdSkAvxl8C1vKz
twx7txdYqnR0uJDtFmoqxSBHYi23AWb8oUp5UR4aCX5v2pA5IWVyexdiewWGdci/
kp6RT/xkoRmlnykhsEZ4ygif/KM6mrR58KNuY09IL5qIT4XkdE7RLijG+J5ZFVIR
djdIykn2KBAbak6wsqbG6fvsD+cCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRHjdqC
QIOG34ddwIRUOn5esdnVRzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTZkMTRkMDEtMWExYi00NDhlLWJiNGEtNzMyNzlhMDZjNTQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAN0e1uxpn75MmusaoePt4Zj+/2vcKfC1kiAPJ
883Hjsn1/veIgoH2V/2KX7zQiCAUufcxtVvbmtPYMVuSmudMTZ6cAPHAiF9H6XhX
9fl3cTHvGwsrt7a0s4vV9r60ojjf4uGQqTVimkvQBX2bjGX5xooZGreirPoWd/oQ
L23KLNOUrjp8+VjWjLWHjOn/iKAVF9pucNXVb+GeAxy0OibSHlT+fcMYhz3Rje6N
BRLRggQBcn9eZ0TAnEpTdROaap9f9KBPMbEeekAm71z4ZjpgPBa/CmD6aqBwzGTS
bT1xPpVpnlX5KhLgJ3h9ya6yVLxcw8lbb5R8ZR8HLuhpEx0bww==
-----END CERTIFICATE-----