Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a2f7401-8559-4633-8579-cca77d6fa971.roa
File:                     6a2f7401-8559-4633-8579-cca77d6fa971.roa (raw, json)
Hash identifier:          DAu/LT95DHvl5FayKiP4xPG7uVttDYYi1pKZK/moCBU=
Subject key identifier:   3D:F6:2C:95:70:A6:12:73:44:4B:26:9B:4D:A7:09:6D:03:60:86:7B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0E4788B595E98166CFCA2059D0754B7FFDA9CC86
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a2f7401-8559-4633-8579-cca77d6fa971.roa
Signing time:             Tue 21 Oct 2025 13:10:06 +0000
ROA not before:           Tue 21 Oct 2025 13:10:06 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:47:88:b5:95:e9:81:66:cf:ca:20:59:d0:75:4b:7f:fd:a9:cc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 13:10:06 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=533c6f7258c59595d4068aa53e5285ea6c388a6830c5e1f682632e5331fceaf3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:67:d6:cf:7f:b5:d8:3e:c0:e6:c6:96:5e:
                    f5:0a:45:6c:ba:91:85:10:53:f6:57:a4:ea:7c:ea:
                    48:85:2f:ca:df:ba:fd:33:ba:d7:8e:54:f1:4e:e3:
                    d4:56:b9:01:f9:75:d0:d7:2e:73:2a:5d:69:cf:ae:
                    ff:a1:8b:43:48:29:14:90:f0:9a:67:1e:27:12:c9:
                    9f:f5:28:b7:9d:f4:66:c9:2f:ac:66:8a:b5:1f:e7:
                    97:bb:56:34:bb:ac:99:ae:c1:58:5e:44:55:83:30:
                    b1:c2:b3:62:d6:65:0c:3b:64:f9:bf:32:0f:0d:58:
                    28:8d:23:e9:51:5a:c0:db:a6:fc:ed:ba:f4:0f:f6:
                    fd:78:34:85:4c:20:80:3b:c3:82:3e:65:3b:74:20:
                    1f:74:62:64:40:1a:bf:53:b7:e0:a6:b7:1f:7b:d5:
                    1e:2e:39:cc:3d:15:ce:06:30:23:1a:fb:3f:58:da:
                    60:b5:61:1c:f8:47:e1:07:28:a7:06:a5:66:64:c4:
                    3b:85:a8:56:06:62:19:7d:a1:a4:43:a3:37:0f:1a:
                    df:22:8b:14:4e:46:f5:55:5c:91:e7:16:3a:5d:31:
                    27:c0:73:bb:c0:69:26:7f:0e:3b:8d:ad:73:61:7f:
                    6d:0c:1f:14:8b:6c:ab:d2:f0:fd:a9:c4:83:79:61:
                    3b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F6:2C:95:70:A6:12:73:44:4B:26:9B:4D:A7:09:6D:03:60:86:7B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a2f7401-8559-4633-8579-cca77d6fa971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01a::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:91:ad:d2:bd:50:2b:c8:91:25:4c:81:44:59:24:ee:0e:6f:
         81:14:01:b5:02:fa:5a:ca:d8:b1:eb:d4:cf:4c:aa:8b:22:6e:
         8a:74:00:c4:87:d4:12:7f:af:7d:f8:7a:72:89:cf:e3:e3:21:
         4e:ce:9b:99:a6:97:d6:06:e9:80:32:65:02:69:28:05:4b:f7:
         c0:cc:a0:3b:76:91:fc:34:09:ec:bf:d6:31:37:78:64:78:44:
         7a:95:8b:34:03:c7:86:0d:ea:8a:18:c5:f6:1e:9b:cb:5a:22:
         46:30:04:bb:74:22:5f:4e:72:22:45:6e:2b:60:e5:91:d2:9d:
         75:d9:21:3f:8b:f1:df:8f:08:b1:d2:6c:b2:44:c8:f9:06:fa:
         ab:a0:5d:75:6c:4f:e5:cd:ae:da:20:ed:5b:0a:9f:c9:4c:0a:
         4f:18:50:55:27:17:08:ea:80:8f:50:c9:13:1f:3d:b6:bd:50:
         d9:cd:24:d7:06:f5:61:a3:6d:47:4a:2a:17:2f:38:d3:7e:64:
         bd:ab:f8:6b:fd:88:b3:a9:0c:07:a0:23:10:4d:5a:4c:12:75:
         90:16:a1:eb:68:8b:e1:87:ed:93:79:3c:27:e4:0b:a1:22:7f:
         95:3d:2c:69:c4:96:52:d3:52:89:12:4f:fb:ef:52:16:fa:cd:
         16:4c:99:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----