Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8553b3da-6a47-43ee-87d3-5259a23c371b.roa
File:                     8553b3da-6a47-43ee-87d3-5259a23c371b.roa (raw, json)
Hash identifier:          fzpdovYAlGXAImMGvdMAW60dnLMjNuBUbmDNX/mbWLE=
Subject key identifier:   35:88:17:07:B0:9B:66:13:8E:49:AE:9C:55:76:99:65:67:5B:17:ED
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0566E7D04CDFABE87DD1D16E0277045187C79D1E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8553b3da-6a47-43ee-87d3-5259a23c371b.roa
Signing time:             Fri 26 Sep 2025 19:41:26 +0000
ROA not before:           Fri 26 Sep 2025 19:41:26 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d071:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Oct 2025 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:66:e7:d0:4c:df:ab:e8:7d:d1:d1:6e:02:77:04:51:87:c7:9d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:41:26 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=f62220ce20aaa0779ab75b8315b3639a4e74b989acaf448700b891e58ae8f9c7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:e5:4b:02:3e:bf:8d:e5:91:ed:89:ca:0c:
                    2e:1b:32:bd:cf:57:66:14:b3:e6:f6:64:b3:28:b8:
                    c6:f4:62:a4:a6:95:66:a7:a8:50:ab:6d:32:59:99:
                    e6:43:78:71:73:c1:e1:01:19:26:f1:e9:98:da:66:
                    23:35:99:ad:14:eb:cf:f5:a5:a3:e2:78:d1:85:23:
                    91:e6:e1:1e:b6:34:40:7e:7c:a1:f0:5f:c0:70:e9:
                    fd:ba:55:6a:dc:4d:7d:01:1e:f5:73:28:fe:bd:49:
                    a5:e9:fa:44:77:81:e4:de:6b:10:d0:3b:ca:c7:ff:
                    38:ee:69:c1:54:ea:c7:ff:d3:e0:88:21:6e:42:25:
                    6c:44:8a:12:e5:29:28:0b:86:33:76:b6:a6:21:23:
                    33:9f:9c:30:79:39:7c:c2:3d:6e:5a:9d:51:dc:d2:
                    b6:64:30:05:bb:07:7a:79:19:1c:cd:2f:27:c6:e7:
                    c9:b4:1b:0d:72:ed:d4:7c:ab:ff:73:7b:4b:51:a8:
                    c2:f6:53:c7:03:c9:b8:fe:ee:ea:1e:bd:45:d8:05:
                    73:4a:ee:c3:f4:11:23:e0:f2:45:b2:4d:c9:59:cf:
                    d2:ef:a4:60:47:5b:0a:a8:cb:d4:f9:bb:15:84:bc:
                    20:46:dd:3a:4d:16:c7:1e:19:3b:35:2a:59:8c:be:
                    83:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:88:17:07:B0:9B:66:13:8E:49:AE:9C:55:76:99:65:67:5B:17:ED
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8553b3da-6a47-43ee-87d3-5259a23c371b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d071:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:99:4c:74:b4:af:f4:2c:4e:6d:3c:7e:ac:2c:f6:d0:d1:71:
         14:92:64:b4:49:b7:df:f6:40:4c:50:39:33:d0:fe:73:c4:4e:
         7f:81:78:13:97:df:4e:91:f3:2d:b1:b0:61:0f:c7:8f:f7:fb:
         4f:f9:5a:91:8a:a7:b8:9c:8e:a7:65:be:f0:c2:ff:69:3e:6d:
         5f:77:76:a4:89:dc:63:bf:a1:99:63:32:d4:e4:97:1e:27:d0:
         ef:31:4b:22:53:f6:a9:9a:a0:22:1f:51:36:d4:9a:09:da:c3:
         34:56:18:00:3d:2e:96:76:61:a3:e9:e1:1e:35:08:fb:51:b3:
         9e:4d:81:61:ba:30:a5:d8:35:cf:04:f6:b8:b0:f8:9a:46:5c:
         79:18:6c:09:89:ff:0a:7b:a1:eb:39:91:ef:14:50:a5:a0:be:
         a9:d5:d7:94:1c:9b:59:2f:90:bd:2a:2f:18:e3:a4:73:e2:8e:
         8f:ff:16:55:fc:09:b6:1c:6a:2b:93:1b:62:62:9e:36:48:ef:
         5f:f2:ed:9e:4f:b0:5b:c1:63:95:c6:15:4e:56:c0:af:b5:75:
         33:bf:ca:12:27:a2:2c:f5:a1:fa:12:41:a8:af:fe:f4:e3:eb:
         20:4c:c4:75:c7:59:4f:7e:06:ed:2b:fc:e4:42:69:b5:59:19:
         96:9f:9b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----