Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
File:                     c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa (raw, json)
Hash identifier:          uRRZ19SKhuVfy7AmHtEIdqq64+Fst9XugkczXkeIZlU=
Subject key identifier:   F8:61:B4:38:0F:63:F6:C5:C6:A3:48:93:44:6E:AB:04:FB:B4:76:48
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7CE0E878033B593814B8A48034EB801F7262CA9C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
Signing time:             Fri 11 Jul 2025 19:00:16 +0000
ROA not before:           Fri 11 Jul 2025 19:00:16 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:60c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e0:e8:78:03:3b:59:38:14:b8:a4:80:34:eb:80:1f:72:62:ca:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:00:16 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=b5d60e85a7546e3f1363d9ed882b60e9d93d3d9dee0e1f22e35dd62b174e97d3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:3e:46:49:e7:e3:1a:d5:bb:46:4a:4e:ad:
                    31:bd:34:af:26:77:52:0c:30:37:4f:f6:08:11:c0:
                    8c:41:76:73:11:0b:aa:49:2c:79:ca:95:40:90:36:
                    51:b3:bb:e8:9e:ec:b9:c5:ba:a8:30:81:8d:a9:9b:
                    cb:cc:fe:ab:45:2a:68:46:f7:53:ef:db:a9:ab:8b:
                    71:d5:21:a5:c1:34:a3:7c:af:de:92:4f:75:dd:2b:
                    98:c9:98:c3:b9:c5:87:8b:80:f9:19:f9:f8:c7:a6:
                    c2:41:58:a3:3a:25:ee:c7:41:45:d9:6e:92:07:6f:
                    f7:ee:33:6c:89:40:0d:65:e1:66:b0:6d:e4:3c:ed:
                    0f:65:3e:50:a6:2a:2f:70:90:29:94:65:b7:8f:85:
                    6a:99:1b:5e:df:a7:e0:96:c6:4e:05:6f:3d:d8:19:
                    e2:4e:31:9e:8c:ec:90:7e:75:4c:23:0b:e2:73:e4:
                    e6:d3:6f:53:48:19:05:54:e5:c4:ec:55:50:9a:d4:
                    87:eb:3d:32:89:ed:f9:5a:5a:dd:ba:98:66:7d:00:
                    b2:2b:8e:90:1a:ab:d0:26:49:5a:9f:ca:24:ea:47:
                    dc:a9:8b:0d:61:8e:c9:52:e9:9e:de:1f:de:28:19:
                    5e:35:26:fe:7f:37:f6:6b:ad:f4:b7:bc:be:03:14:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:61:B4:38:0F:63:F6:C5:C6:A3:48:93:44:6E:AB:04:FB:B4:76:48
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:60c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:8a:cd:14:34:d1:83:f5:4e:44:18:bd:28:dc:fa:be:8b:81:
         3f:fc:f3:c0:b9:17:4f:6b:0b:87:f6:43:ce:a1:92:44:c0:d4:
         4d:86:19:5b:75:19:89:6e:8f:fe:be:21:50:2b:7d:9e:d5:83:
         af:eb:0a:c0:fe:74:5b:09:3e:99:fc:07:e5:5a:19:af:ba:96:
         92:a6:ac:67:2d:42:5f:9f:1c:9c:53:ee:c5:88:50:af:5b:e6:
         4d:0e:6b:b6:54:15:a1:1f:03:b7:48:b8:0e:c1:51:86:a8:d3:
         30:ea:2c:7f:a0:35:7b:b2:24:52:14:f2:c8:da:b5:82:fb:a6:
         39:07:16:4e:09:a9:28:21:5a:2a:47:76:fa:17:a7:1c:a2:9a:
         e6:e9:3b:9a:d8:2a:02:c5:fe:72:a3:9d:d2:0e:3f:3d:ef:6b:
         d8:e3:0e:5e:d9:b1:91:fe:05:10:19:6b:c2:62:c0:49:74:90:
         30:37:7d:bb:d3:07:1c:c2:31:7a:e4:40:83:68:26:cd:18:2c:
         4f:23:91:72:7d:20:03:99:88:4d:2c:d0:aa:fb:24:7e:d8:01:
         e5:13:f6:68:38:fc:0f:3c:28:74:35:18:e9:09:a4:5a:4d:fe:
         e0:3c:3d:32:53:de:9a:85:1e:ee:9c:89:ba:ba:59:ab:9f:de:
         e1:17:5c:ff
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfODoeAM7WTgUuKSANOuAH3JiypwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTExOTAwMTZaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGI1ZDYwZTg1YTc1NDZlM2YxMzYzZDllZDg4MmI2MGU5ZDkzZDNkOWRlZTBl
MWYyMmUzNWRkNjJiMTc0ZTk3ZDMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKGOPkZJ5+Ma1btGSk6tMb00ryZ3UgwwN0/2CBHAjEF2cxELqkksecqVQJA2
UbO76J7sucW6qDCBjamby8z+q0UqaEb3U+/bqauLcdUhpcE0o3yv3pJPdd0rmMmY
w7nFh4uA+Rn5+MemwkFYozol7sdBRdlukgdv9+4zbIlADWXhZrBt5DztD2U+UKYq
L3CQKZRlt4+FapkbXt+n4JbGTgVvPdgZ4k4xnozskH51TCML4nPk5tNvU0gZBVTl
xOxVUJrUh+s9Mont+Vpa3bqYZn0AsiuOkBqr0CZJWp/KJOpH3KmLDWGOyVLpnt4f
3igZXjUm/n839mut9Le8vgMUgokCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT4YbQ4
D2P2xcajSJNEbqsE+7R2SDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzkxYWI4ZTctODM3MC00OGVkLTllMjUtMGRjMjYwYmExOTZiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJg
wDANBgkqhkiG9w0BAQsFAAOCAQEAdorNFDTRg/VORBi9KNz6vouBP/zzwLkXT2sL
h/ZDzqGSRMDUTYYZW3UZiW6P/r4hUCt9ntWDr+sKwP50Wwk+mfwH5VoZr7qWkqas
Zy1CX58cnFPuxYhQr1vmTQ5rtlQVoR8Dt0i4DsFRhqjTMOosf6A1e7IkUhTyyNq1
gvumOQcWTgmpKCFaKkd2+henHKKa5uk7mtgqAsX+cqOd0g4/Pe9r2OMOXtmxkf4F
EBlrwmLASXSQMDd9u9MHHMIxeuRAg2gmzRgsTyORcn0gA5mITSzQqvskftgB5RP2
aDj8DzwodDUY6QmkWk3+4Dw9MlPemoUe7pyJurpZq5/e4Rdc/w==
-----END CERTIFICATE-----