Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c8be1b1-5cc9-40dc-a0c1-98920cc293bd.roa
File:                     5c8be1b1-5cc9-40dc-a0c1-98920cc293bd.roa (raw, json)
Hash identifier:          IYVxROjgs+eGVoxB77QWB/OttfXOjawxctRjzytd6d8=
Subject key identifier:   72:89:01:C1:7C:3F:75:7E:DD:AE:99:77:01:9F:9A:44:BA:55:E6:66
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       49AA194849AB0E2A01A94E9E89726D462E232F5D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c8be1b1-5cc9-40dc-a0c1-98920cc293bd.roa
Signing time:             Tue 26 Aug 2025 17:10:54 +0000
ROA not before:           Tue 26 Aug 2025 17:10:54 +0000
ROA not after:            Tue 30 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:aa:19:48:49:ab:0e:2a:01:a9:4e:9e:89:72:6d:46:2e:23:2f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 26 17:10:54 2025 GMT
            Not After : Sep 30 23:59:59 2025 GMT
        Subject: serialNumber=bc1934b3932e7dc2111b1bc53ad29f3ed23393ea47e000da83e24dbfefb7f210, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:53:59:e8:4e:e4:d5:e2:a3:de:37:63:a0:
                    4f:0e:d3:26:76:3a:9d:ee:8c:93:b5:cb:8b:98:df:
                    c9:f6:75:19:db:c7:b6:9a:9b:be:57:b2:92:a2:74:
                    dc:15:e6:80:c5:ec:3e:b6:15:1f:6a:77:2e:e8:f1:
                    e0:36:d0:2f:18:89:fd:0d:46:14:9d:be:a4:08:ab:
                    4c:82:04:15:b3:a1:a6:47:f2:1b:96:e7:c2:e9:83:
                    6d:2b:a6:c9:c4:0c:55:7c:db:b5:4b:ee:82:5a:16:
                    3e:26:99:82:3c:a1:58:56:98:b6:8c:c9:1b:8a:ea:
                    57:b3:d6:30:da:bf:d3:52:2c:a0:f3:30:fc:1c:8f:
                    09:fb:26:73:6f:f7:79:b5:9c:c8:9d:e6:59:55:b6:
                    47:c2:37:4d:b8:58:20:4f:27:7b:de:57:a4:f0:32:
                    e4:2f:26:28:5e:7c:f4:c3:fa:f9:24:1c:74:f4:97:
                    ab:d4:ee:fd:95:d8:bb:ce:53:bc:50:4b:48:3d:5e:
                    e9:e0:9b:18:ce:55:7d:5a:5b:20:da:a6:85:c9:42:
                    af:ce:0a:14:04:6f:65:2d:16:f5:99:f2:da:58:8f:
                    f5:73:2b:0b:89:13:f5:08:78:d1:f8:6d:d7:a8:c4:
                    fd:b9:9b:c7:63:25:c8:9e:4b:5f:96:42:b8:e7:33:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:89:01:C1:7C:3F:75:7E:DD:AE:99:77:01:9F:9A:44:BA:55:E6:66
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c8be1b1-5cc9-40dc-a0c1-98920cc293bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:880::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:2e:b9:42:50:88:51:ee:37:3e:5d:3f:97:02:97:2a:1e:72:
         0b:87:0c:a0:d6:3d:9e:9d:a2:74:bc:c1:63:60:a0:be:01:a1:
         4e:f8:bd:bc:07:08:60:07:9e:d2:5d:54:e4:57:31:9b:92:2d:
         e3:e9:80:7a:02:90:f9:a5:2f:f7:de:a3:3c:45:19:11:fb:b1:
         67:ba:c8:99:6a:68:b2:52:f6:30:c0:f3:f5:14:24:db:d5:eb:
         68:3a:89:52:b8:18:c3:0d:89:6a:7e:35:66:ce:75:73:43:4e:
         0b:35:80:b7:59:db:89:e0:6f:8f:1a:23:0f:c1:9b:60:6e:2c:
         88:1d:8e:36:3f:64:8a:c7:6c:f6:e1:e4:a8:25:f2:69:b9:00:
         fb:55:0b:81:7c:09:36:88:9b:79:9b:68:f1:3f:ec:57:d6:5b:
         b1:1a:99:2d:50:d2:3f:41:e4:b2:6e:43:5a:6d:24:de:95:8e:
         dd:66:0d:3b:36:cf:da:01:79:5c:4d:11:29:bc:44:7e:86:62:
         61:28:96:76:5d:18:9e:e3:5a:bb:9b:24:64:1c:34:d1:c4:22:
         75:a8:2b:6b:fc:e9:71:39:30:77:91:06:9f:2b:2f:17:8e:1c:
         80:d6:4b:17:eb:2c:12:e9:35:61:da:41:c7:c3:ad:93:ae:aa:
         2a:a7:11:a3
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUSaoZSEmrDioBqU6eiXJtRi4jL10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MjYxNzEwNTRaFw0yNTA5MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGJjMTkzNGIzOTMyZTdkYzIxMTFiMWJjNTNhZDI5ZjNlZDIzMzkzZWE0N2Uw
MDBkYTgzZTI0ZGJmZWZiN2YyMTAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOU/U1noTuTV4qPeN2OgTw7TJnY6ne6Mk7XLi5jfyfZ1GdvHtpqbvleykqJ0
3BXmgMXsPrYVH2p3Lujx4DbQLxiJ/Q1GFJ2+pAirTIIEFbOhpkfyG5bnwumDbSum
ycQMVXzbtUvugloWPiaZgjyhWFaYtozJG4rqV7PWMNq/01IsoPMw/ByPCfsmc2/3
ebWcyJ3mWVW2R8I3TbhYIE8ne95XpPAy5C8mKF589MP6+SQcdPSXq9Tu/ZXYu85T
vFBLSD1e6eCbGM5VfVpbINqmhclCr84KFARvZS0W9Zny2liP9XMrC4kT9Qh40fht
16jE/bmbx2MlyJ5LX5ZCuOczL+8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRyiQHB
fD91ft2umXcBn5pEulXmZjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NWM4YmUxYjEtNWNjOS00MGRjLWEwYzEtOTg5MjBjYzI5M2JkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HII
gDANBgkqhkiG9w0BAQsFAAOCAQEAhC65QlCIUe43Pl0/lwKXKh5yC4cMoNY9np2i
dLzBY2CgvgGhTvi9vAcIYAee0l1U5Fcxm5It4+mAegKQ+aUv996jPEUZEfuxZ7rI
mWposlL2MMDz9RQk29XraDqJUrgYww2Jan41Zs51c0NOCzWAt1nbieBvjxojD8Gb
YG4siB2ONj9kisds9uHkqCXyabkA+1ULgXwJNoibeZto8T/sV9ZbsRqZLVDSP0Hk
sm5DWm0k3pWO3WYNOzbP2gF5XE0RKbxEfoZiYSiWdl0YnuNau5skZBw00cQidagr
a/zpcTkwd5EGnysvF44cgNZLF+ssEuk1YdpBx8Otk66qKqcRow==
-----END CERTIFICATE-----