Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e236a15-c957-4409-8a2a-3a19150d1b43.roa
File:                     6e236a15-c957-4409-8a2a-3a19150d1b43.roa (raw, json)
Hash identifier:          u0cx9boTSsynpJfnKFT8klAYCZpF5CzkcFwT8S7pI9U=
Subject key identifier:   DD:41:A1:28:1C:1A:B4:F1:40:54:30:B4:4C:C3:E9:32:00:13:C9:9B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       04BC106C24458C0706EC525DD6FB930E6B088C74
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e236a15-c957-4409-8a2a-3a19150d1b43.roa
Signing time:             Fri 21 Mar 2025 15:00:06 +0000
ROA not before:           Fri 21 Mar 2025 15:00:06 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d030:9000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bc:10:6c:24:45:8c:07:06:ec:52:5d:d6:fb:93:0e:6b:08:8c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 21 15:00:06 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:3e:74:ba:78:15:0c:34:93:dc:af:12:da:
                    78:4c:c6:ff:f2:e9:1d:e9:4c:79:6d:3f:81:30:53:
                    c2:07:0b:e8:82:2b:d0:8c:09:00:df:d5:30:fc:a0:
                    83:e3:6c:0b:a2:f3:cc:c1:36:86:e4:0f:6b:05:ba:
                    ca:dd:ca:a7:db:be:d3:2c:6f:81:78:3f:25:6f:1e:
                    dc:ba:56:ea:a2:41:40:89:e3:34:cc:87:e8:cf:51:
                    f8:c8:d8:c4:f7:83:6a:60:3f:31:2a:a6:6c:09:b8:
                    1f:04:30:a3:86:e7:26:bb:da:33:b9:94:e2:1b:e3:
                    35:18:97:f3:06:cb:9c:73:63:a3:17:9e:05:19:8a:
                    d3:18:8e:58:8c:b5:7c:91:a7:29:32:d4:93:cb:fa:
                    d1:e7:1d:1e:e9:3a:3c:93:39:40:73:bc:c2:a2:dc:
                    0c:1f:27:a0:45:9b:78:98:0c:ca:8b:78:bb:86:b6:
                    f3:66:23:98:b1:d5:1d:e7:c6:23:b8:d1:96:ac:56:
                    77:29:eb:88:72:94:87:7d:8e:89:a1:21:5d:02:c2:
                    fa:9e:c6:99:07:f7:3c:bf:88:f3:2c:29:69:78:89:
                    b0:41:e0:99:c8:9f:cd:5a:3c:36:82:1b:9b:83:08:
                    a2:d2:cb:3b:bc:11:e9:05:8d:0c:28:2c:3f:37:d9:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:41:A1:28:1C:1A:B4:F1:40:54:30:B4:4C:C3:E9:32:00:13:C9:9B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e236a15-c957-4409-8a2a-3a19150d1b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d030:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:b5:04:b0:3f:f5:f3:b7:8b:1c:ce:e0:20:37:59:4a:71:99:
         32:b3:bb:45:1b:0c:58:7d:e1:00:90:bd:a9:fc:e8:cd:88:0e:
         da:b2:bd:56:8f:a0:2f:74:80:f2:e5:48:c6:39:0a:d8:35:c0:
         7a:14:07:3d:b2:bd:6d:f3:9b:f5:22:8f:a3:5d:31:45:e4:b9:
         e4:c9:2a:07:8f:ea:54:ce:39:8a:ec:fe:e0:36:8b:32:bc:3b:
         12:c1:d1:37:31:dd:04:86:f9:27:43:55:f1:0c:2b:f4:50:3e:
         7f:c8:45:76:fb:a2:2d:34:fa:16:e9:5f:24:e9:3f:0e:25:fd:
         76:ec:6e:e0:59:14:79:18:9e:99:d0:5b:db:c4:91:d1:30:c6:
         4e:75:03:38:4a:21:7b:eb:86:83:4a:7d:c5:3d:6d:e8:4b:93:
         9d:83:5b:7b:00:e0:fb:d9:54:34:40:3d:3f:4f:92:2f:e0:3c:
         31:32:70:09:7c:98:62:61:e6:cd:2b:bf:65:0c:1c:64:eb:3f:
         e5:03:68:d2:a7:f6:59:31:36:ce:fd:ae:d9:b8:ea:81:0e:30:
         11:1e:2a:ff:6e:e0:d9:de:3f:08:24:b8:df:61:02:dc:43:c1:
         0c:37:24:22:2f:fb:7d:62:c8:36:86:5d:39:1c:92:2b:b6:13:
         af:ef:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----