Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
File:                     452f19af-8187-465e-9ab8-4e678c11315e.roa (raw, json)
Hash identifier:          b3e//qlsLVqr6PKU1GQciw/q1xFiOalzWwtzUdX+bmE=
Subject key identifier:   99:69:15:7B:1F:C7:84:1B:CF:4E:60:02:B1:3F:C5:48:39:3E:4B:BA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       59E00B6AFA0A7DD0BE7967C2097D9D4851E13F48
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
Signing time:             Tue 21 Oct 2025 14:30:30 +0000
ROA not before:           Tue 21 Oct 2025 14:30:30 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d02b::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e0:0b:6a:fa:0a:7d:d0:be:79:67:c2:09:7d:9d:48:51:e1:3f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 14:30:30 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=3afd3e491a134dcc4ed6c1c8ff74188e339cd18842d0c58e2e83464f1de3c70e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2c:49:70:c2:85:96:ff:50:d4:32:6d:b8:e7:
                    24:53:e7:7a:c0:b0:da:87:da:75:c0:3a:68:fb:64:
                    63:4a:79:fd:10:2c:50:5a:bb:b8:77:28:ef:c5:b1:
                    b7:8c:ac:0e:cf:64:17:09:84:b4:ba:08:d6:07:5b:
                    66:fc:ab:53:5c:bf:f4:50:13:34:48:4f:01:b7:97:
                    c7:db:1b:d5:02:fd:86:8b:39:5e:ae:b0:f1:69:aa:
                    2d:87:89:99:76:2b:0c:28:f9:2b:50:72:7e:74:23:
                    0e:61:78:1d:ca:c8:62:eb:65:42:52:6d:d1:99:92:
                    3d:1e:b1:6d:78:ed:3e:2d:42:6e:91:ed:a6:6a:d5:
                    31:a6:2d:ea:ac:9e:e8:26:28:1b:e5:dd:01:84:8c:
                    3c:91:48:78:0a:5c:a6:87:63:97:d3:9a:f3:9c:ee:
                    9c:22:56:ba:41:c0:87:5d:a9:92:27:7f:c4:38:9c:
                    9f:ee:12:69:e8:b1:d3:a1:52:2a:2c:92:40:58:ed:
                    e3:d5:a9:e1:88:52:62:20:0e:04:38:94:bf:48:c0:
                    e9:c9:13:92:ac:e0:cb:f9:d0:b4:b0:41:ff:da:db:
                    7c:90:d5:e1:52:83:73:c2:ad:78:11:2c:35:4e:37:
                    6a:a5:a0:75:0e:a6:12:fe:2b:83:63:6d:cc:2a:89:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:69:15:7B:1F:C7:84:1B:CF:4E:60:02:B1:3F:C5:48:39:3E:4B:BA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d02b::/37

    Signature Algorithm: sha256WithRSAEncryption
         c8:8d:14:16:2e:9d:93:80:de:81:21:cc:1b:5e:9a:88:52:e7:
         38:3e:7d:77:45:87:ae:d4:51:e7:b4:37:07:2d:8d:ae:fe:f8:
         34:fb:33:f6:20:0e:1d:85:1a:58:3f:d6:1c:01:58:cc:9f:6c:
         18:c4:d4:0a:82:a9:6a:ce:61:b7:51:8a:cc:a3:e9:63:5a:37:
         3a:f4:94:05:8f:d6:bd:0d:90:96:6e:dc:69:f0:22:6a:1f:19:
         cd:e9:cc:5b:b4:ae:2d:aa:2a:0f:ca:9a:99:3c:fc:a9:b0:0c:
         b9:d3:cf:c3:69:51:ec:a3:a7:0f:fc:a2:90:75:d2:89:1c:74:
         5c:e9:4b:a9:18:30:7e:90:b7:ae:e4:4f:70:99:30:fa:91:48:
         89:16:8a:0e:7c:a8:84:28:fc:65:6f:6e:ba:3a:c1:01:c8:55:
         a2:1d:31:49:d0:f5:b7:22:89:07:76:0d:fc:19:4c:13:06:05:
         99:f4:58:71:de:1e:aa:77:14:b2:a2:a2:d9:86:b8:cd:55:23:
         0f:15:dd:55:97:be:05:dc:b7:c8:41:d9:30:c4:7c:25:9e:a5:
         88:d9:d9:1f:ba:57:f2:6c:16:6a:16:b7:11:fb:5b:a2:ea:e1:
         ea:b3:ab:76:c1:0a:04:0c:5a:ef:d2:73:c9:e8:ce:e9:e3:68:
         cc:d8:6a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----