Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2b3faf28-e8b7-4e39-99e4-e3cb6577dafb.roa
File:                     2b3faf28-e8b7-4e39-99e4-e3cb6577dafb.roa (raw, json)
Hash identifier:          aZBo00XiHFy+aARWqLZa8UFWcOx1jiYlhnbVuns7as4=
Subject key identifier:   28:AB:E8:2C:E7:0F:28:A0:D0:4E:43:41:F9:07:6D:78:AE:FF:06:48
Certificate issuer:       /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial:       3A7003106974F56EC15589BF2483330AB6A87BEA
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2b3faf28-e8b7-4e39-99e4-e3cb6577dafb.roa
Signing time:             Tue 11 Mar 2025 14:52:21 +0000
ROA not before:           Tue 11 Mar 2025 14:52:21 +0000
ROA not after:            Tue 15 Apr 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2001:3fc4::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:70:03:10:69:74:f5:6e:c1:55:89:bf:24:83:33:0a:b6:a8:7b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
        Validity
            Not Before: Mar 11 14:52:21 2025 GMT
            Not After : Apr 15 23:59:59 2025 GMT
        Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:a2:58:65:fb:55:58:01:b3:54:66:9e:f1:
                    75:e2:df:c1:e4:1e:64:18:a1:57:d0:1c:7a:aa:bc:
                    a2:53:58:d1:30:c0:a0:54:55:51:a6:33:a2:62:9e:
                    c0:f8:6d:10:df:07:25:8f:58:68:57:75:31:16:57:
                    fd:e9:10:9b:37:82:da:28:44:5b:d0:6b:49:da:88:
                    d8:52:21:1e:1e:78:15:25:f8:67:cf:d7:9a:79:ea:
                    e1:d6:55:f9:7a:26:66:6d:9f:90:e3:05:f0:19:47:
                    70:83:ad:34:5f:48:b0:f1:5a:8e:76:bf:42:99:5f:
                    2f:d7:63:21:c9:15:ae:20:45:3f:e0:15:0c:1a:9d:
                    52:37:18:dd:c8:6f:aa:a9:b7:f7:f6:25:cd:90:eb:
                    76:66:ab:e4:c2:d6:c8:81:4b:58:63:37:30:03:9d:
                    f5:85:2d:82:59:ca:bb:d5:2b:12:7c:d6:8e:72:97:
                    bc:e6:58:70:6e:b1:25:24:50:9b:5f:e4:76:df:64:
                    a5:db:66:1f:ef:e8:26:23:93:a2:12:e4:a3:29:21:
                    3f:ab:49:a9:36:01:b1:61:61:33:37:4b:c1:21:d0:
                    d7:42:31:db:42:53:e2:6a:05:2d:a2:a3:eb:38:85:
                    1f:88:38:38:b5:b0:52:4d:f4:78:cc:8a:a0:40:41:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AB:E8:2C:E7:0F:28:A0:D0:4E:43:41:F9:07:6D:78:AE:FF:06:48
            X509v3 Authority Key Identifier:
                keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2b3faf28-e8b7-4e39-99e4-e3cb6577dafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc4::/36

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:07:a4:e5:54:16:4e:7a:3d:52:04:49:c1:df:c6:1b:71:
         13:71:e1:70:1f:0f:22:a5:d3:58:51:62:8d:5f:90:2a:a7:f2:
         0b:cc:a8:5e:f2:d6:1f:93:e8:44:9a:78:0f:27:80:f2:38:94:
         61:46:5c:f2:f7:62:e6:16:b2:d3:76:b3:d7:6f:94:3e:ad:5e:
         3f:25:04:f2:7d:c1:d5:ff:f2:7d:dc:d2:c8:b3:8a:11:cc:91:
         83:9f:ed:ee:13:59:7a:ea:ad:36:50:73:06:16:ae:6d:23:af:
         f1:7c:81:26:53:09:38:61:81:79:d5:f5:f6:0d:3d:53:42:b4:
         58:8f:47:24:d6:28:f7:3a:05:c1:55:f2:4f:fa:93:5b:0e:63:
         6e:30:19:90:75:5e:eb:82:eb:cc:34:03:6b:a5:8b:1c:30:0b:
         ad:cc:dc:82:a5:03:c5:c0:d6:9c:97:f4:79:40:03:f1:7f:0e:
         1a:ca:ae:95:51:68:9d:9a:d8:31:48:2c:37:38:2f:7a:37:6c:
         7a:ce:3d:e1:01:6c:d8:a0:fe:48:e7:ec:c9:be:8f:fc:8c:01:
         ba:ed:aa:a9:5a:04:7e:cf:b8:b9:68:c3:c3:95:e7:5b:df:75:
         d0:dd:70:19:39:e7:06:8f:46:e4:5b:ce:43:b2:1f:2d:e9:c2:
         b1:ea:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----