Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa
File:                     caf40866-a0b4-4882-b28e-32602ae3e0df.roa (raw, json)
Hash identifier:          +3GoOHxxtQVjAC31Rss6FWQrgsAOoCngmgsj0ap31tI=
Subject key identifier:   F9:94:62:96:6C:66:25:12:10:E3:9F:68:9C:55:27:13:A3:F0:F9:D4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6AAF683F56184B02B3A2D21C7A4E000187F8169A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa
Signing time:             Fri 11 Jul 2025 20:10:11 +0000
ROA not before:           Fri 11 Jul 2025 20:10:11 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d050:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:af:68:3f:56:18:4b:02:b3:a2:d2:1c:7a:4e:00:01:87:f8:16:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:10:11 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=f11ad6d97240c01290aa9d6e7e8aa3ff4efcd74724a005054ff2c33ce2ba2c87, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:c8:84:51:95:58:31:4e:d4:1b:ce:a3:d2:
                    19:b2:fb:13:71:54:55:a8:3d:43:1b:4f:b3:c5:89:
                    d8:e5:db:4f:9e:bc:22:a3:2c:e6:ac:f0:73:1a:63:
                    f5:61:75:c9:57:da:7d:76:31:cf:02:53:85:c4:e3:
                    8d:de:4d:36:2e:dd:eb:7e:47:68:6e:aa:be:c3:f0:
                    73:3d:38:57:45:51:cd:ad:d5:a9:48:44:7a:cf:85:
                    b1:64:4d:93:a7:5f:2a:14:75:0c:96:f7:96:c6:5d:
                    89:e3:71:66:de:80:8b:45:06:bd:27:7c:d7:70:0d:
                    89:9f:69:0a:83:8c:bf:9c:60:38:c2:0e:b4:d7:2e:
                    fc:37:69:fe:94:25:a2:ba:23:91:41:30:a3:e2:c7:
                    30:e0:77:0f:bd:1c:0c:bc:70:7c:91:7d:a4:2a:73:
                    10:1b:4c:8b:5c:12:c8:2f:4b:d5:a2:cf:56:26:56:
                    de:c0:97:a4:a4:de:dc:75:58:33:46:72:82:2a:bc:
                    46:55:cb:83:fb:a9:24:0a:6e:b5:99:33:2c:ad:88:
                    00:93:1f:75:31:89:74:69:e0:07:34:45:f5:bc:7a:
                    b1:e7:41:7a:b5:a1:e3:55:aa:19:f7:59:0b:04:ef:
                    dc:e4:d6:64:66:2b:dd:a2:4d:01:77:81:95:53:33:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:94:62:96:6C:66:25:12:10:E3:9F:68:9C:55:27:13:A3:F0:F9:D4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d050:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:0b:1f:eb:b2:0a:b6:f3:9e:7e:e2:8f:c5:55:8e:2f:c6:94:
         1d:bd:ba:51:c5:16:c8:df:00:04:8d:90:77:4d:63:08:a4:7f:
         36:dc:4f:b5:aa:43:d9:6b:2b:db:b9:e1:ad:7b:00:0b:94:88:
         91:c2:2e:c6:71:0a:f8:06:e8:0a:37:2c:69:4d:9d:ea:8b:89:
         22:41:16:62:06:9a:3a:d4:aa:a6:c5:28:b9:d5:7b:4d:f9:89:
         7e:9d:8d:54:48:9b:8f:5f:97:89:83:86:3a:5f:8e:71:81:21:
         0d:3f:ee:0d:a3:d4:0a:b1:f2:ec:86:08:93:0c:2a:00:06:b1:
         68:76:f1:ea:11:a9:d3:d9:3d:81:ac:13:91:94:e6:35:fc:91:
         ec:5c:2f:57:1e:aa:40:5a:ae:85:22:52:37:fa:8e:d4:6b:74:
         bf:22:60:ba:11:c7:1c:04:0c:be:e9:9d:52:8e:29:6c:15:3c:
         23:ca:1f:cc:0e:ff:6d:65:14:ce:ce:9f:b0:c2:f2:7e:b3:93:
         58:3b:3a:6e:3f:82:4a:e3:af:46:60:1d:06:ba:70:fb:bb:ce:
         a5:5d:6b:d9:de:6f:ea:6d:7c:b6:18:2e:68:13:93:f0:d6:39:
         4a:f4:39:4e:bd:ac:9e:0c:41:72:ac:1c:1b:21:85:66:f5:65:
         26:2d:ea:fa
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUaq9oP1YYSwKzotIcek4AAYf4FpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDEwMTFaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGYxMWFkNmQ5NzI0MGMwMTI5MGFhOWQ2ZTdlOGFhM2ZmNGVmY2Q3NDcyNGEw
MDUwNTRmZjJjMzNjZTJiYTJjODcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL+dyIRRlVgxTtQbzqPSGbL7E3FUVag9QxtPs8WJ2OXbT568IqMs5qzwcxpj
9WF1yVfafXYxzwJThcTjjd5NNi7d635HaG6qvsPwcz04V0VRza3VqUhEes+FsWRN
k6dfKhR1DJb3lsZdieNxZt6Ai0UGvSd813ANiZ9pCoOMv5xgOMIOtNcu/Ddp/pQl
orojkUEwo+LHMOB3D70cDLxwfJF9pCpzEBtMi1wSyC9L1aLPViZW3sCXpKTe3HVY
M0Zygiq8RlXLg/upJAputZkzLK2IAJMfdTGJdGngBzRF9bx6sedBerWh41WqGfdZ
CwTv3OTWZGYr3aJNAXeBlVMzUu0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT5lGKW
bGYlEhDjn2icVScTo/D51DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2FmNDA4NjYtYTBiNC00ODgyLWIyOGUtMzI2MDJhZTNlMGRmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FCg
MA0GCSqGSIb3DQEBCwUAA4IBAQA5Cx/rsgq2855+4o/FVY4vxpQdvbpRxRbI3wAE
jZB3TWMIpH823E+1qkPZayvbueGtewALlIiRwi7GcQr4BugKNyxpTZ3qi4kiQRZi
Bpo61KqmxSi51XtN+Yl+nY1USJuPX5eJg4Y6X45xgSENP+4No9QKsfLshgiTDCoA
BrFodvHqEanT2T2BrBORlOY1/JHsXC9XHqpAWq6FIlI3+o7Ua3S/ImC6EcccBAy+
6Z1SjilsFTwjyh/MDv9tZRTOzp+wwvJ+s5NYOzpuP4JK469GYB0GunD7u86lXWvZ
3m/qbXy2GC5oE5Pw1jlK9DlOvayeDEFyrBwbIYVm9WUmLer6
-----END CERTIFICATE-----