Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
File:                     88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa (raw, json)
Hash identifier:          sMzANT766d9MNZ5tbuPI5buM3TwtdGbx0zIG6z0p9vY=
Subject key identifier:   66:36:22:74:1D:2A:FD:BF:A3:E4:BD:95:D7:C4:6C:C4:81:20:EA:A4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5EB6CB0E515C8C7A3C2C1528155F3806A83E5FA7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
Signing time:             Tue 21 Oct 2025 13:41:15 +0000
ROA not before:           Tue 21 Oct 2025 13:41:15 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d012:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 21:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b6:cb:0e:51:5c:8c:7a:3c:2c:15:28:15:5f:38:06:a8:3e:5f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 13:41:15 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=604f149505d9f7e148bacaeb22a40fb38253ff26fbea00faed3e9b0d7f24bbe0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:13:52:5e:89:c5:5d:21:7b:8b:ab:7f:0c:13:
                    61:34:55:21:1a:33:98:b4:dc:b7:fb:ae:ef:2b:72:
                    11:34:96:77:cb:57:d8:81:bc:95:a3:53:4e:4f:ab:
                    98:2d:fb:69:bd:26:2a:95:77:55:7a:10:4e:23:a2:
                    9d:71:ba:a4:45:c0:98:ff:00:67:c9:e5:3f:ad:b0:
                    ef:e1:5e:71:cd:91:d4:96:15:4d:9e:a1:97:c4:b6:
                    1f:90:88:48:81:e5:fa:f2:6e:c6:ea:f5:dd:50:d0:
                    b8:1e:29:75:55:b0:03:13:b1:76:56:c9:df:be:5f:
                    ac:6d:5c:6d:4c:09:f8:55:22:4b:aa:7e:24:2a:da:
                    fd:1a:9b:19:7b:47:de:aa:9a:9b:c2:48:c4:44:23:
                    ff:3f:13:e9:3f:19:e8:d6:b8:93:37:29:23:58:48:
                    3b:61:d5:16:f3:14:f3:27:2a:3e:a1:fb:af:08:21:
                    7f:56:60:86:f0:30:96:20:93:1f:cf:ce:67:29:a4:
                    f3:46:74:4a:8f:d4:da:dd:00:b4:d4:7a:ba:e8:0c:
                    08:1c:51:ee:c9:98:56:31:af:38:df:e9:17:3e:e3:
                    d3:57:d0:b2:f5:58:d0:43:ea:4b:dc:54:f5:53:64:
                    cb:83:b6:b5:92:4d:13:da:d5:15:b5:b4:81:f5:7d:
                    10:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:36:22:74:1D:2A:FD:BF:A3:E4:BD:95:D7:C4:6C:C4:81:20:EA:A4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d012:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         49:8b:a0:78:8a:c3:1f:41:e7:a7:b1:ed:19:b9:09:3e:9e:8f:
         a4:da:2a:d9:94:37:c8:e1:e6:8f:1b:20:ab:81:42:2b:a6:f4:
         a2:d7:d7:31:87:f1:34:f3:8c:bf:1b:7f:ea:43:0b:bd:c3:4e:
         fa:44:8a:e2:eb:a2:27:59:9e:e6:9f:61:89:bb:f6:b2:62:1b:
         77:16:b2:4e:ff:40:a2:f4:1b:fa:4e:52:d2:75:d7:79:73:d3:
         07:16:65:7f:02:4a:33:22:0a:8a:ce:7c:68:28:ab:6b:88:cf:
         62:0f:5a:fd:f4:1b:b6:e0:7d:86:61:91:25:a0:2b:d8:2f:c8:
         40:9e:29:09:0d:c0:59:77:4f:b2:6c:93:e9:f6:a3:f7:5b:f5:
         a2:e7:94:21:2a:e8:be:7f:00:f1:29:1a:23:26:19:81:bd:fe:
         a3:9a:c7:6a:8f:dd:f7:67:0e:e7:44:61:b1:0f:bf:a5:15:d0:
         b1:61:a5:f5:1f:b2:db:54:ea:d9:ae:5f:7a:77:ec:79:17:d2:
         1b:c5:28:42:08:ce:92:61:e0:16:4b:de:42:de:99:5b:28:15:
         9a:35:c7:3b:c0:01:57:0e:a0:ac:0a:9c:fe:dc:d8:d4:de:fa:
         80:6f:87:ce:a9:f3:f8:a9:c8:2b:15:7c:8c:e8:4d:85:9c:d1:
         e7:8b:ab:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----