Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757087af-5baf-4a2f-a9ec-dbadb47313e2.roa
File:                     757087af-5baf-4a2f-a9ec-dbadb47313e2.roa (raw, json)
Hash identifier:          DYnQGCPG7iGZYcmlemSZtUHZz7SiWMDThYWyRJZfkmU=
Subject key identifier:   1F:53:92:71:67:6D:93:E8:27:C7:FC:E8:36:96:D7:37:9B:82:28:BC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4E1C14A833A9FA1A41ED45CED5CF1373DA1AB247
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757087af-5baf-4a2f-a9ec-dbadb47313e2.roa
Signing time:             Tue 21 Oct 2025 13:10:44 +0000
ROA not before:           Tue 21 Oct 2025 13:10:44 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:50c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 21:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1c:14:a8:33:a9:fa:1a:41:ed:45:ce:d5:cf:13:73:da:1a:b2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 13:10:44 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=8855fcca50c36d8a8e9a3545e3550271bc13c6e8064468ae04788a2a3a37358d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:02:b6:dd:bb:12:fe:0d:cf:7a:c8:f8:98:
                    25:73:1c:ba:a9:1e:31:3b:9e:3a:25:e6:27:5e:38:
                    23:9f:89:b4:01:f5:aa:33:a6:06:d4:a3:c0:a3:23:
                    bc:5d:f5:25:c7:db:46:1a:95:17:e5:68:31:0b:46:
                    ce:8c:45:9a:e9:d1:18:59:37:67:21:05:65:a6:a8:
                    02:95:3b:e5:b7:a3:6c:a4:29:33:ac:d1:15:31:22:
                    8e:ca:a4:c8:da:24:6d:1e:12:63:16:2e:a5:0b:3e:
                    41:0e:e9:ec:b6:e2:c9:00:6b:bd:de:6e:e1:64:5a:
                    49:83:48:17:7b:84:3a:0c:d6:e5:44:4d:82:d3:1c:
                    3d:bc:3e:f1:f4:5c:32:a4:7e:35:ee:6d:14:e9:91:
                    66:70:a2:f1:ad:15:a6:01:2b:8a:0d:74:79:27:bf:
                    09:59:3a:df:ad:65:d0:1b:08:31:3c:79:4f:7c:ab:
                    bd:46:a1:35:68:cb:aa:7a:fa:b6:69:d5:55:99:b7:
                    85:53:01:b5:6a:82:20:32:88:11:09:7c:2c:4d:33:
                    b4:7a:5e:7b:50:a9:09:a8:8d:d1:44:b8:78:a2:fa:
                    c0:65:dc:b8:9e:0f:0d:3c:f4:7d:63:c4:26:a8:da:
                    2c:f6:82:09:a2:79:5a:5e:fc:2d:46:1f:ef:7d:49:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:53:92:71:67:6D:93:E8:27:C7:FC:E8:36:96:D7:37:9B:82:28:BC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757087af-5baf-4a2f-a9ec-dbadb47313e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:50c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:e7:ae:56:72:da:3a:4c:2b:15:16:57:3d:68:6e:6e:25:a5:
         8f:33:ca:bc:0b:92:16:0b:41:6f:f0:98:d0:ed:fd:e9:f8:33:
         f9:b2:fd:26:09:37:51:52:ad:43:3d:3f:d4:88:9d:4d:aa:08:
         6f:73:f8:9c:1a:e6:f1:76:d9:8d:90:5e:44:0c:cb:f5:e7:0f:
         41:0a:58:10:be:8c:28:0f:18:c9:b8:de:64:e5:89:74:29:27:
         d8:3a:64:bf:80:f4:a1:be:29:2b:5f:37:b0:e1:03:65:49:66:
         53:1d:e7:c9:30:7a:fe:07:9b:29:51:01:79:b4:93:6c:6a:d2:
         e9:b6:62:b5:48:40:65:b5:68:82:20:f6:c6:7d:4b:c6:b3:a0:
         b4:4a:bc:b7:bc:fa:1b:45:5d:bd:42:f2:ea:9f:b7:37:37:39:
         b1:cb:85:94:a4:f6:3f:d5:bc:e5:c6:98:7e:87:ea:7e:13:f2:
         b8:fb:44:0f:2f:56:c1:f4:9c:54:04:0e:da:0b:e9:61:52:95:
         c3:25:69:be:b2:53:fa:a1:85:25:d8:8c:19:62:e8:93:43:d5:
         e6:68:d2:a7:a5:e1:fd:58:02:6d:59:54:f0:c3:08:91:e8:c5:
         f5:73:9d:a8:ba:15:84:43:7d:f2:0d:99:dd:11:6d:a5:a6:6c:
         aa:4f:69:e8
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUThwUqDOp+hpB7UXO1c8Tc9oaskcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExMzEwNDRaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDg4NTVmY2NhNTBjMzZkOGE4ZTlhMzU0NWUzNTUwMjcxYmMxM2M2ZTgwNjQ0
NjhhZTA0Nzg4YTJhM2EzNzM1OGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ45ArbduxL+Dc96yPiYJXMcuqkeMTueOiXmJ144I5+JtAH1qjOmBtSjwKMj
vF31JcfbRhqVF+VoMQtGzoxFmunRGFk3ZyEFZaaoApU75bejbKQpM6zRFTEijsqk
yNokbR4SYxYupQs+QQ7p7LbiyQBrvd5u4WRaSYNIF3uEOgzW5URNgtMcPbw+8fRc
MqR+Ne5tFOmRZnCi8a0VpgErig10eSe/CVk6361l0BsIMTx5T3yrvUahNWjLqnr6
tmnVVZm3hVMBtWqCIDKIEQl8LE0ztHpee1CpCaiN0US4eKL6wGXcuJ4PDTz0fWPE
JqjaLPaCCaJ5Wl78LUYf731JMu0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQfU5Jx
Z22T6CfH/Og2ltc3m4IovDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzU3MDg3YWYtNWJhZi00YTJmLWE5ZWMtZGJhZGI0NzMxM2UyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9Q
wDANBgkqhkiG9w0BAQsFAAOCAQEAueeuVnLaOkwrFRZXPWhubiWljzPKvAuSFgtB
b/CY0O396fgz+bL9Jgk3UVKtQz0/1IidTaoIb3P4nBrm8XbZjZBeRAzL9ecPQQpY
EL6MKA8YybjeZOWJdCkn2Dpkv4D0ob4pK183sOEDZUlmUx3nyTB6/gebKVEBebST
bGrS6bZitUhAZbVogiD2xn1LxrOgtEq8t7z6G0VdvULy6p+3Nzc5scuFlKT2P9W8
5caYfofqfhPyuPtEDy9WwfScVAQO2gvpYVKVwyVpvrJT+qGFJdiMGWLok0PV5mjS
p6Xh/VgCbVlU8MMIkejF9XOdqLoVhEN98g2Z3RFtpaZsqk9p6A==
-----END CERTIFICATE-----