Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f53e7156-ca49-453e-98bc-54364e6eb008.roa
File:                     f53e7156-ca49-453e-98bc-54364e6eb008.roa (raw, json)
Hash identifier:          6v7TBmjYUGE9i3iKEol1BX9iHdNZSCcvixoXCrQODt0=
Subject key identifier:   E3:92:E9:ED:E1:9C:59:D9:B5:8D:8F:E4:6B:9A:50:B4:6B:6C:82:B7
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       60D74FCB86563335B157D83E99324FCBD5CB09BF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f53e7156-ca49-453e-98bc-54364e6eb008.roa
Signing time:             Fri 11 Jul 2025 20:01:35 +0000
ROA not before:           Fri 11 Jul 2025 20:01:35 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:8040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d7:4f:cb:86:56:33:35:b1:57:d8:3e:99:32:4f:cb:d5:cb:09:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:01:35 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=782e236af899c4b09e67ec870b692d3d72b22da4a59c657860e406938f0aaf4b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:f6:d9:e3:fc:27:36:3d:14:df:60:b3:fb:
                    4d:d4:0e:68:5a:2f:26:60:4a:e7:89:f5:a0:28:01:
                    c7:d3:28:2f:42:4b:2b:cc:c0:f3:21:56:78:93:25:
                    2a:6b:dd:67:6e:e9:2d:f9:a3:bb:c6:95:b7:35:da:
                    6c:92:02:2f:81:f1:3f:e2:7b:bd:12:29:cd:95:93:
                    c0:7c:3d:cd:82:b6:e8:c8:2b:bf:30:db:95:2c:49:
                    ba:f0:8e:2b:06:ca:82:72:37:66:23:5f:74:e2:8d:
                    45:9e:61:89:75:92:54:9e:0e:3b:dd:30:53:ab:a3:
                    6f:2c:d7:05:2a:8c:90:96:2f:a7:5c:b2:aa:4f:69:
                    e4:00:85:e2:36:40:6a:4f:d9:08:80:41:bc:3f:21:
                    65:99:fc:7a:e6:2c:5f:d2:2d:0a:fe:81:06:a5:a1:
                    58:fc:21:8c:65:f5:9f:17:f4:ac:e4:05:32:fe:de:
                    52:24:b2:d9:a1:65:ec:c8:8c:6d:dc:26:ff:5f:8b:
                    49:00:b9:5f:72:a7:14:a0:4c:18:12:dd:d0:a7:cb:
                    4d:b1:52:4f:52:ae:d4:8b:a8:a5:09:2f:77:ff:cc:
                    5a:6c:fe:ee:6d:aa:80:f2:4e:d2:88:89:ee:42:bc:
                    81:08:4a:2e:90:d7:b1:b2:1a:15:2d:ea:75:5b:71:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:92:E9:ED:E1:9C:59:D9:B5:8D:8F:E4:6B:9A:50:B4:6B:6C:82:B7
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f53e7156-ca49-453e-98bc-54364e6eb008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:8040::/46

    Signature Algorithm: sha256WithRSAEncryption
         65:3e:74:74:e0:c0:bc:b0:d7:c7:43:98:3b:3f:80:6c:f9:b7:
         12:c0:9d:bf:5a:81:92:bb:1c:96:53:f4:d0:3b:03:fb:40:15:
         3d:70:15:c7:e0:57:e4:09:a9:28:ca:dd:ec:e9:8c:ac:7c:7a:
         a3:b6:62:07:70:96:15:2a:bd:d1:71:ff:fd:42:99:32:0d:8f:
         49:48:f0:2b:5c:c8:c9:35:2e:7c:2e:f6:85:65:8a:8a:db:07:
         25:e8:ab:52:ad:20:62:98:5a:cc:58:bf:ac:15:92:ed:cb:6c:
         cf:7f:b5:6c:a7:71:e2:4c:68:0f:c8:27:1a:69:c9:06:9c:bd:
         f8:f1:87:76:82:34:6a:0b:9a:2d:5f:f8:2f:a3:ed:50:dc:82:
         5b:cf:bb:39:ff:0d:a3:b0:1d:4b:e9:0c:e8:0d:a4:85:79:44:
         93:db:5b:f8:b9:3e:d2:ba:ea:c1:db:64:17:e0:ca:41:a2:5e:
         d3:8a:23:81:18:0f:44:08:29:87:d6:42:d2:cd:25:2d:81:26:
         59:f4:09:1f:19:86:70:62:12:9e:33:6a:1d:23:b6:83:97:89:
         4d:d5:4f:29:76:ad:e5:9c:ae:e6:8e:a5:5f:1d:d8:25:25:3d:
         4e:07:d9:cc:fd:79:1d:16:af:53:9f:88:2b:58:02:81:ba:a8:
         32:15:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----