Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
File:                     002c315b-3412-464e-b865-645f657f136d.roa (raw, json)
Hash identifier:          /aoijR8uLkYeEe12lS7bTAIGYQcQZs80OtRdlHKgI4A=
Subject key identifier:   B3:9C:AC:D2:B5:BF:1B:82:26:17:63:D3:58:23:61:73:62:24:AF:FD
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       20A01178AF5211F25C1CDF64BDE1CCEC3A558B82
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
Signing time:             Mon 12 May 2025 16:20:52 +0000
ROA not before:           Mon 12 May 2025 16:20:52 +0000
ROA not after:            Mon 16 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d079::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Jun 2025 13:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a0:11:78:af:52:11:f2:5c:1c:df:64:bd:e1:cc:ec:3a:55:8b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 12 16:20:52 2025 GMT
            Not After : Jun 16 23:59:59 2025 GMT
        Subject: serialNumber=e87901b6f13f4a859eb5e75caca05a3d3005cc03de24b9d7db43bf405add231e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d7:e8:8b:bd:8a:97:0b:34:dc:12:f4:c4:71:
                    df:c6:15:63:82:6b:cf:fc:91:8b:92:95:c1:ac:41:
                    b7:9c:99:1b:be:0d:57:a7:a0:1e:a8:7d:65:5b:3a:
                    98:4e:3f:49:e4:74:f9:8a:c1:1f:0f:6e:bd:d6:53:
                    e2:7d:05:03:7d:6b:df:2f:93:f1:a2:0a:0d:df:15:
                    c0:4e:d1:bc:fe:2d:28:6f:64:a1:df:68:69:fb:bb:
                    9e:e7:d4:53:cb:6a:bd:6c:2d:24:db:ba:b8:84:88:
                    1a:9f:ab:66:b3:bc:71:97:5b:84:f5:b7:a7:5f:6c:
                    80:62:67:ca:db:68:7f:96:d1:ad:82:63:96:d7:c6:
                    84:89:0d:4b:16:89:57:39:4a:4d:9f:37:68:2e:cc:
                    04:9a:86:08:43:f7:dd:1f:65:44:9f:6a:f6:fd:a1:
                    92:6c:04:93:0c:08:f4:76:a6:4f:b2:e7:32:3f:a5:
                    97:54:34:f4:95:c7:c3:17:26:40:6c:b6:d8:b8:c9:
                    84:73:38:23:70:98:21:8e:79:b8:c4:01:aa:a2:84:
                    b5:28:49:52:27:08:a6:7c:5e:88:bb:62:0c:e5:e2:
                    1c:d2:2b:6f:9f:53:c0:6e:16:d7:3a:a9:61:63:d0:
                    73:73:35:8c:f4:6c:bd:f8:76:b5:4d:61:16:ac:0c:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9C:AC:D2:B5:BF:1B:82:26:17:63:D3:58:23:61:73:62:24:AF:FD
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d079::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:bf:cb:f4:a3:97:c1:d8:70:3a:c7:20:1b:8b:73:1f:a3:
         0f:30:57:9d:77:3d:a2:b3:5a:8f:a2:d9:92:d8:b9:bc:40:38:
         b6:63:12:c5:7a:d2:77:b2:c5:26:f9:9f:59:f7:97:a3:ff:b6:
         ad:72:bd:1e:58:10:5b:f4:16:5f:9d:99:d3:26:a6:49:da:6d:
         5a:e7:38:4d:58:92:c4:28:6b:b5:b5:62:fc:79:43:96:09:ce:
         4d:c6:76:5a:8b:25:c4:92:46:46:76:62:83:83:3a:bf:01:ab:
         2a:27:5a:7e:c5:53:32:24:47:95:1c:51:c2:60:31:5a:65:13:
         41:a1:44:97:8f:f3:bd:41:0c:59:d1:42:65:78:7c:e8:f3:f7:
         15:1a:4c:7c:2f:70:04:ce:14:dc:00:86:87:cc:98:c2:f0:c1:
         2a:03:a9:cb:86:26:33:c8:af:79:b1:49:5d:cf:d4:5a:ab:98:
         73:3c:ee:59:e5:09:21:67:95:3f:1a:60:cc:fc:dc:35:22:c5:
         1d:28:5e:7d:a5:29:86:ed:cf:d6:09:45:90:6a:b6:2c:f3:ee:
         74:79:14:b7:56:56:24:1e:d3:d2:b0:2f:d5:97:8a:0c:45:29:
         08:0b:01:a0:e8:de:97:12:54:9e:46:ba:ef:8d:e4:5a:af:61:
         12:54:38:9b
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUIKAReK9SEfJcHN9kveHM7DpVi4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MTIxNjIwNTJaFw0yNTA2MTYyMzU5NTlaMHoxSTBHBgNV
BAUTQGU4NzkwMWI2ZjEzZjRhODU5ZWI1ZTc1Y2FjYTA1YTNkMzAwNWNjMDNkZTI0
YjlkN2RiNDNiZjQwNWFkZDIzMWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIjX6Iu9ipcLNNwS9MRx38YVY4Jrz/yRi5KVwaxBt5yZG74NV6egHqh9ZVs6
mE4/SeR0+YrBHw9uvdZT4n0FA31r3y+T8aIKDd8VwE7RvP4tKG9kod9oafu7nufU
U8tqvWwtJNu6uISIGp+rZrO8cZdbhPW3p19sgGJnyttof5bRrYJjltfGhIkNSxaJ
VzlKTZ83aC7MBJqGCEP33R9lRJ9q9v2hkmwEkwwI9HamT7LnMj+ll1Q09JXHwxcm
QGy22LjJhHM4I3CYIY55uMQBqqKEtShJUicIpnxeiLtiDOXiHNIrb59TwG4W1zqp
YWPQc3M1jPRsvfh2tU1hFqwM1FsCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBSznKzS
tb8bgiYXY9NYI2FzYiSv/TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDAyYzMxNWItMzQxMi00NjRlLWI4NjUtNjQ1ZjY1N2YxMzZkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0Hkw
DQYJKoZIhvcNAQELBQADggEBABD/v8v0o5fB2HA6xyAbi3Mfow8wV513PaKzWo+i
2ZLYubxAOLZjEsV60neyxSb5n1n3l6P/tq1yvR5YEFv0Fl+dmdMmpknabVrnOE1Y
ksQoa7W1Yvx5Q5YJzk3GdlqLJcSSRkZ2YoODOr8BqyonWn7FUzIkR5UcUcJgMVpl
E0GhRJeP871BDFnRQmV4fOjz9xUaTHwvcATOFNwAhofMmMLwwSoDqcuGJjPIr3mx
SV3P1FqrmHM87lnlCSFnlT8aYMz83DUixR0oXn2lKYbtz9YJRZBqtizz7nR5FLdW
ViQe09KwL9WXigxFKQgLAaDo3pcSVJ5Guu+N5FqvYRJUOJs=
-----END CERTIFICATE-----