Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74f41cc9-ba0e-46d9-a774-45f6a030a3f4.roa
File:                     74f41cc9-ba0e-46d9-a774-45f6a030a3f4.roa (raw, json)
Hash identifier:          Azdi9bvp1kJFd2lPiw+2UcMCcAIHgsjSTlFItyH8aII=
Subject key identifier:   96:4B:C2:C4:74:52:8B:82:78:19:75:3E:C2:FE:46:09:89:A9:4C:78
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       64355D310700C24195C2CB86A2FC42572EC9580C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74f41cc9-ba0e-46d9-a774-45f6a030a3f4.roa
Signing time:             Tue 26 Aug 2025 17:10:52 +0000
ROA not before:           Tue 26 Aug 2025 17:10:52 +0000
ROA not after:            Tue 30 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d038:880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:35:5d:31:07:00:c2:41:95:c2:cb:86:a2:fc:42:57:2e:c9:58:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 26 17:10:52 2025 GMT
            Not After : Sep 30 23:59:59 2025 GMT
        Subject: serialNumber=c4c47cef9a52f6cd651969e7474b2b0b99f8f1238c790b3a56fdaaaa141047c6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:6f:99:21:ab:7f:51:7a:9d:95:3d:eb:75:
                    2e:44:01:16:52:23:a9:9c:cd:26:9c:9f:a8:22:38:
                    64:32:6c:94:09:62:49:d1:db:67:44:d2:1d:cc:29:
                    1a:ad:7a:ea:3e:c7:52:31:69:92:c3:4a:65:b5:81:
                    46:cb:96:be:19:06:70:76:55:50:07:0d:f6:e0:00:
                    52:9c:33:88:5e:63:86:9c:be:ba:2f:f6:14:38:ee:
                    6d:90:a0:ce:8c:40:96:2f:50:84:aa:05:48:82:0f:
                    5c:66:cc:9b:ac:44:22:09:69:4f:aa:07:99:08:1d:
                    23:99:e7:8d:39:d8:bc:39:f3:a0:1e:c4:43:19:9d:
                    71:77:e3:eb:3b:2a:e6:83:27:f4:37:9d:1d:42:33:
                    20:4a:63:24:82:57:99:0d:92:2f:b6:c9:3e:9f:eb:
                    f1:54:1a:c4:4e:11:54:c7:a3:9e:01:3c:4d:34:4b:
                    9d:12:be:29:49:07:14:9f:3d:ed:90:67:95:5a:d1:
                    1c:4d:81:00:7f:9a:f8:64:8f:fb:98:56:84:c7:1e:
                    02:34:fa:a6:69:e6:83:40:91:b5:51:60:33:26:3d:
                    f3:93:9f:b3:3f:3d:b0:ef:56:c7:49:1b:d1:49:58:
                    1f:2a:d0:56:10:ff:e0:d0:c5:46:e2:89:6d:9a:74:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4B:C2:C4:74:52:8B:82:78:19:75:3E:C2:FE:46:09:89:A9:4C:78
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74f41cc9-ba0e-46d9-a774-45f6a030a3f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d038:880::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:3e:de:a4:db:d9:76:ff:04:9e:9a:a0:a0:30:c4:92:42:23:
         68:7d:3e:7c:f4:b4:b6:b4:1b:f9:04:59:82:5b:a6:cc:56:f3:
         e3:e1:a1:38:5f:e7:30:97:ba:4e:18:ec:58:34:2c:62:2a:50:
         25:49:51:49:3f:f3:22:d7:56:d6:a4:0a:c3:4e:6e:74:75:a5:
         e3:c9:ce:2f:79:ee:3b:06:df:a0:19:27:64:ee:ed:bf:8e:4e:
         90:a0:c0:da:b1:81:f1:14:23:77:5f:56:a8:18:48:fa:b1:f8:
         b6:62:bf:c2:4d:d4:11:e1:1e:60:87:7c:6c:71:4d:9d:c4:44:
         26:a7:38:d9:8b:10:75:70:f0:77:37:16:71:be:80:4b:30:ca:
         e6:e6:ab:5f:b7:29:da:c2:83:33:89:e7:c9:51:71:dd:09:66:
         75:c0:59:18:c9:26:03:91:29:7b:8c:e7:43:fd:40:8d:1d:c3:
         bf:61:ad:8a:b7:e3:c8:7b:13:78:c0:3c:60:11:8d:03:e2:9d:
         20:c6:c5:a1:03:d4:6c:4f:0d:01:cc:16:5c:8c:bf:8a:1a:42:
         13:75:ef:7b:dc:0e:0d:ff:d3:83:02:69:36:d7:b6:78:4b:15:
         12:34:ca:5c:16:ff:91:5b:9d:e2:1d:19:a8:72:b3:9b:e2:da:
         7b:34:ed:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----