Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb455f5d-6ce6-4373-b5bc-1c1e034a148a.roa
File:                     fb455f5d-6ce6-4373-b5bc-1c1e034a148a.roa (raw, json)
Hash identifier:          RV9eYRV63jLeSXVjkw2njl+tlKWf/qv419Nnmsyt0xU=
Subject key identifier:   49:EA:4B:38:85:79:F2:46:73:B9:10:C0:47:78:20:64:22:27:07:6A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6D04E9E6420F3F7BDB41AEFAFEBC0544D6FC580E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb455f5d-6ce6-4373-b5bc-1c1e034a148a.roa
Signing time:             Fri 11 Jul 2025 18:50:06 +0000
ROA not before:           Fri 11 Jul 2025 18:50:06 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:4060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:04:e9:e6:42:0f:3f:7b:db:41:ae:fa:fe:bc:05:44:d6:fc:58:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 18:50:06 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=ab088ac9254f5a36ac149066c534cdb7dd02578b6ed68effec5f00196088250b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:f9:88:44:db:54:73:a3:d7:34:a7:2e:c6:
                    b6:5e:b3:57:45:74:d2:07:f6:32:2a:3d:1a:1e:ea:
                    27:30:c1:a7:29:19:28:b8:65:8e:c1:5e:c8:98:df:
                    06:a7:6f:37:ca:ff:d5:1d:61:69:bd:b1:8e:d4:a7:
                    7f:8f:d6:37:e3:83:de:7b:3a:bb:a3:16:03:39:06:
                    62:86:82:42:7b:b3:d3:a3:83:52:1a:84:84:e7:9c:
                    34:4a:8f:df:cb:54:7f:26:22:94:01:ea:6d:4b:9e:
                    bb:e9:a3:7e:81:0c:45:9f:9a:a7:bd:1e:ad:33:01:
                    ae:1c:ce:4b:27:fa:8e:69:99:38:7f:38:00:bf:d6:
                    2f:6a:a9:67:75:29:4a:00:02:74:7a:66:77:30:58:
                    3e:60:22:7f:c1:75:06:f8:46:83:19:35:8f:68:31:
                    ab:74:e5:19:11:3f:b7:e1:37:54:3d:34:c1:f4:49:
                    a8:b5:21:06:17:e9:d1:9a:6a:02:6e:fd:6c:0d:cf:
                    9f:41:36:ce:8a:7b:fe:9e:40:bd:4f:77:72:36:e2:
                    9d:fb:61:c0:ea:94:c6:94:0f:e4:a5:cb:80:dc:d1:
                    8f:49:c3:f1:22:5f:a2:40:f6:e0:09:57:d8:a8:ce:
                    e4:57:5d:e1:e6:9e:8d:29:48:09:16:8e:fc:88:8c:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EA:4B:38:85:79:F2:46:73:B9:10:C0:47:78:20:64:22:27:07:6A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb455f5d-6ce6-4373-b5bc-1c1e034a148a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:4060::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:8a:40:da:5c:af:95:d2:ea:43:6c:12:5f:f7:10:7b:12:
         cf:a7:f8:b6:95:bd:6d:89:9a:a3:77:ae:66:95:e8:32:3c:53:
         69:de:cd:e2:c7:df:6f:b2:ed:8d:85:f6:3b:b4:bf:3e:f5:ea:
         39:5f:79:89:9f:13:45:13:3b:d4:96:76:90:9c:eb:cc:ac:bd:
         18:4d:b4:29:2d:a4:bf:39:79:08:c5:ba:d3:ed:2d:8a:c0:14:
         26:d5:92:12:1b:9d:f3:03:ce:15:8e:b4:f7:86:65:70:f2:ba:
         a1:d6:0e:76:58:1e:0d:49:8d:12:f2:15:87:75:38:16:96:97:
         e3:67:80:f6:5c:68:43:97:63:a9:72:d0:49:ca:14:b3:14:68:
         c7:1a:c8:e3:28:22:35:78:ad:f0:b6:76:3d:1e:97:17:91:30:
         d2:4c:74:57:de:a1:9e:a9:21:0c:42:00:a4:c8:34:94:30:89:
         54:4b:a6:ca:fd:49:90:58:5c:c6:1e:81:70:49:07:a9:18:6d:
         bf:59:f2:a5:ea:0e:ca:5f:77:fa:ba:9b:9c:6a:0f:3d:3c:84:
         20:96:79:fe:5d:9d:39:1c:33:3c:4f:b2:ef:ec:3e:2a:bf:04:
         58:19:04:a5:3c:cb:13:d7:32:d6:06:56:65:f8:42:3d:c5:2c:
         4f:f1:24:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----