Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba70a89c-5e6c-40ac-9a73-f92bee005d5b.roa
File:                     ba70a89c-5e6c-40ac-9a73-f92bee005d5b.roa (raw, json)
Hash identifier:          MzSnME3ZDtKesjH+FUgLmg6zv2EyJnf5i0ZzrVkfF8o=
Subject key identifier:   47:24:3B:73:C2:A6:A3:C1:4F:DB:A4:07:6E:AD:30:C4:5D:77:4D:ED
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       30023989DD1AC7BADA5D1898D618E3464ACFE258
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba70a89c-5e6c-40ac-9a73-f92bee005d5b.roa
Signing time:             Mon 21 Jul 2025 17:00:11 +0000
ROA not before:           Mon 21 Jul 2025 17:00:11 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        87.238.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:02:39:89:dd:1a:c7:ba:da:5d:18:98:d6:18:e3:46:4a:cf:e2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 17:00:11 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=119bafc993a7e8748a47475744c421cc84baba1e16295ea5e0c6a846ed24178c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0e:f7:ed:7c:b4:19:77:62:b3:3f:06:a0:0d:
                    1f:e5:45:50:f9:7b:94:2b:4c:93:3c:9a:6a:43:ee:
                    3b:49:97:2d:60:87:d5:2b:ad:7b:9d:22:67:48:b9:
                    f1:49:39:87:00:22:57:84:cc:9d:61:51:eb:f2:17:
                    83:b9:15:3e:47:a7:07:61:dd:06:75:ee:72:13:cc:
                    f8:04:11:b2:e5:b5:a7:d0:1f:c8:03:cf:b3:af:37:
                    03:a1:56:08:88:20:dc:d8:99:b7:03:2d:17:c7:c6:
                    7e:f0:46:98:8d:19:ca:76:5f:fd:7c:9e:f3:16:9f:
                    4a:49:31:bc:44:f8:67:94:aa:7d:b5:8e:81:85:81:
                    fe:aa:40:54:1a:51:6f:c8:9a:01:6b:1a:1a:68:3e:
                    e7:8e:92:c4:48:a4:d8:f9:8a:26:f4:06:0b:12:a8:
                    ea:35:86:7f:6b:38:d2:31:73:c8:29:19:a7:d0:30:
                    8b:88:c6:6d:ca:72:4d:0c:86:0e:17:bf:35:38:84:
                    47:4f:f8:5c:25:df:14:a9:d0:5f:f6:5c:49:58:f0:
                    11:4d:78:df:34:d3:ee:ef:ff:eb:3f:95:8f:fe:72:
                    0b:dc:ff:ad:1b:ec:68:a9:75:5e:77:8e:e3:34:b2:
                    c3:3d:2f:32:03:b7:35:d1:ef:e6:fb:ef:cb:5d:92:
                    59:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:24:3B:73:C2:A6:A3:C1:4F:DB:A4:07:6E:AD:30:C4:5D:77:4D:ED
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba70a89c-5e6c-40ac-9a73-f92bee005d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.238.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:0e:62:1f:53:fa:21:f7:0e:e0:d9:38:3d:4b:16:90:ad:1a:
         d2:78:96:dc:70:8e:26:c7:4a:e6:97:c1:86:2f:67:35:25:51:
         a8:4d:26:d5:56:ce:b5:0a:c4:a1:25:dd:75:91:66:72:b7:aa:
         68:df:68:b0:25:e2:cc:48:45:74:af:5a:78:4f:ad:76:40:4e:
         78:9e:15:0f:2e:62:54:a3:cf:79:1b:20:84:d7:09:e9:6a:e3:
         fa:0b:bb:a9:ea:e9:1f:06:bd:93:4b:ec:f7:6f:df:34:8f:a3:
         15:2c:86:3c:0b:44:66:82:15:26:e3:9d:2f:10:6a:fc:3e:8f:
         14:6b:6c:3d:6c:78:eb:60:31:ac:5e:5c:aa:ff:50:25:a3:c8:
         cb:2e:3a:b2:9e:b0:da:0e:ac:1f:76:53:6b:70:9d:73:5b:e7:
         02:aa:a5:85:a5:6a:4e:19:24:3b:e3:6a:08:74:c0:40:f4:17:
         92:ee:a9:41:c1:b0:d0:45:e4:dc:23:45:3d:84:6c:6f:0e:d0:
         6f:9c:e9:c1:70:07:25:2a:c9:d4:36:29:6c:02:dc:14:4e:d0:
         a4:b1:3a:86:af:5d:07:45:9c:7c:19:d5:39:cd:bc:66:da:9a:
         7f:72:17:c6:e3:8d:44:00:06:71:d3:cc:73:a8:eb:7d:1b:18:
         fc:c8:48:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----