Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/65fd1736-b3cd-4b5b-abca-9d430a70e064.roa
File:                     65fd1736-b3cd-4b5b-abca-9d430a70e064.roa (raw, json)
Hash identifier:          NWMLugKZ9ZhO2KwnJBzqPUpuzl0axq2A0NB4yn1462Y=
Subject key identifier:   73:53:A3:EF:48:0F:E6:1A:51:74:3C:01:F8:DA:08:71:02:69:3D:86
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       64698AA33CFA50D10966D5B00EFBA9473D8D101C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/65fd1736-b3cd-4b5b-abca-9d430a70e064.roa
Signing time:             Mon 12 May 2025 16:11:36 +0000
ROA not before:           Mon 12 May 2025 16:11:36 +0000
ROA not after:            Mon 16 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        176.34.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Jun 2025 13:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:69:8a:a3:3c:fa:50:d1:09:66:d5:b0:0e:fb:a9:47:3d:8d:10:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 12 16:11:36 2025 GMT
            Not After : Jun 16 23:59:59 2025 GMT
        Subject: serialNumber=055277bcc1a94b33d0a2b7f2a3987c97f3948ab6a6a628b6f78598e16dc705ce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:9f:c3:fe:e1:c3:e0:26:84:f5:59:6a:ab:
                    ee:30:91:fa:ef:0f:a6:1d:cb:39:26:a8:a8:c5:03:
                    25:76:3f:d9:df:05:f3:2d:ec:12:b0:dd:d2:7b:38:
                    cd:49:75:87:7d:24:d5:c2:93:b2:21:53:05:71:88:
                    6d:75:bb:90:d7:e9:44:58:39:de:b8:10:bc:9e:3a:
                    3e:82:1c:88:14:c5:df:4d:c4:e9:a7:b6:09:0b:1d:
                    d6:9e:75:9e:c5:3b:d0:cc:39:8a:bb:89:ac:c7:d9:
                    b5:30:b3:d0:a0:e8:c1:bd:88:7c:72:f0:24:c9:45:
                    18:ec:b3:c3:a5:0f:a9:52:a5:7e:59:2f:be:dd:8c:
                    7e:cd:e2:e7:41:2d:8d:c5:71:e4:af:7b:f0:50:8d:
                    ed:99:f4:bd:e4:4a:97:94:1e:94:3f:fb:cf:9b:4d:
                    06:bf:ad:7e:ed:b5:eb:42:5b:8f:50:72:0f:d2:8a:
                    1d:f4:12:27:ce:bd:34:8e:e7:00:09:c6:6c:43:b5:
                    cd:89:98:66:37:f6:54:24:8a:5c:99:7e:cf:25:fd:
                    33:de:8e:a6:74:60:70:70:34:eb:69:37:c1:dc:1c:
                    01:d1:66:7b:03:68:19:78:42:ee:ed:51:55:26:74:
                    20:80:40:9d:c0:f6:e8:99:dd:37:15:76:96:69:a9:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:53:A3:EF:48:0F:E6:1A:51:74:3C:01:F8:DA:08:71:02:69:3D:86
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/65fd1736-b3cd-4b5b-abca-9d430a70e064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.34.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         30:cb:78:64:a3:52:51:d6:23:ce:67:89:6c:ae:00:16:b7:1d:
         a4:b9:39:8a:60:43:7c:d0:c5:3c:a3:5d:0d:ed:25:0c:0e:55:
         90:15:0c:59:11:62:d0:3d:9d:03:4e:09:ec:3e:50:69:51:72:
         39:6a:c3:3c:53:41:0f:92:d4:12:71:aa:fc:92:91:82:18:40:
         1e:4b:4b:4d:94:29:e1:d5:f3:28:8b:12:fd:90:21:56:ec:c1:
         7a:67:b1:19:a1:9b:86:58:58:73:a5:88:4a:8e:5f:59:3a:30:
         3d:d2:f9:1d:95:72:37:fb:e9:48:5d:eb:2c:f5:00:b3:12:a2:
         68:26:cf:0e:86:67:9c:3c:ec:0d:cf:2d:c7:2e:aa:32:01:67:
         eb:2e:24:57:77:f2:58:3d:8f:e3:e7:da:81:6e:56:f0:80:6c:
         e9:cf:17:3e:49:7f:f4:b7:26:4f:8a:6b:c9:72:a3:08:4c:c1:
         71:25:32:4b:54:87:d4:44:01:5c:8e:29:2c:f3:ef:8d:8c:47:
         5d:83:c0:98:8f:98:a0:dc:1a:ef:9b:14:5f:1e:91:e9:6e:8a:
         9e:a0:0d:7e:20:3f:d9:79:ac:47:a4:ec:df:cf:35:9b:7e:51:
         3b:0e:b2:48:6a:3f:3e:0c:ca:5e:16:0c:95:1d:53:d6:93:fd:
         73:1e:4f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----