Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1796bea-01c9-41b7-b13d-6932c4f36a42.roa
File:                     a1796bea-01c9-41b7-b13d-6932c4f36a42.roa (raw, json)
Hash identifier:          vkuToO8VSpEMWlKdjJ1XiLh0hdt9jbp21ZJ3yUfuXtc=
Subject key identifier:   DC:15:20:A5:C7:38:A5:A1:D4:D2:D0:30:03:3D:AA:8E:4B:A8:44:FB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0AAF54B8C3F182E11780434F3F0937D060660355
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1796bea-01c9-41b7-b13d-6932c4f36a42.roa
Signing time:             Tue 21 Oct 2025 13:40:31 +0000
ROA not before:           Tue 21 Oct 2025 13:40:31 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:af:54:b8:c3:f1:82:e1:17:80:43:4f:3f:09:37:d0:60:66:03:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 13:40:31 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=8942ccc3712e9947712af52f191d91c60aa3ba8b6acf32bc62cb96369504dd33, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3b:40:97:a7:1c:f2:43:82:04:94:73:f3:dd:
                    d1:d9:85:cd:02:f1:b4:10:e0:2b:d2:c5:79:b0:76:
                    f8:f5:be:40:84:35:a8:bb:0d:c1:a1:3b:8c:69:ec:
                    97:67:06:a7:54:d7:83:ab:84:b7:86:52:40:ae:1c:
                    16:29:3d:b1:58:d5:7e:c4:f6:ba:b0:3e:95:96:fe:
                    ff:7c:ea:5b:36:8f:0f:9c:a8:3f:1a:bc:de:13:65:
                    7e:55:61:3c:04:4e:b1:5a:c7:a9:85:00:94:e5:47:
                    e7:d4:c3:83:5e:cf:7c:e2:ba:40:16:eb:a8:4b:e1:
                    19:5a:43:cd:b4:30:df:83:f5:3b:93:e7:15:92:6f:
                    e3:5a:99:54:23:ae:69:45:33:50:b6:3c:71:14:a3:
                    11:f2:e1:d4:16:c3:d2:ec:17:fb:e6:84:29:f7:e0:
                    99:35:f6:97:24:3b:1d:60:bd:02:61:af:e9:38:1c:
                    db:5a:43:85:79:d2:11:e9:4f:98:45:03:7a:2f:8b:
                    cc:57:22:b0:fd:3a:0d:3f:50:5e:f8:ac:56:32:18:
                    e3:bb:82:bc:db:60:07:cc:dd:b4:01:57:f4:94:10:
                    04:cf:21:40:60:f3:cd:0e:e8:4c:40:fb:d5:36:50:
                    d0:23:53:dc:69:c9:1d:50:03:89:d0:cb:11:9a:9a:
                    a0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:15:20:A5:C7:38:A5:A1:D4:D2:D0:30:03:3D:AA:8E:4B:A8:44:FB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1796bea-01c9-41b7-b13d-6932c4f36a42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:75:b1:43:1a:7b:b7:65:f1:fc:86:10:ab:9c:54:6e:a7:
         df:04:ce:ac:ab:ed:41:1b:d3:cf:1d:f0:4c:c7:b2:15:62:31:
         7a:c3:9c:36:be:d0:72:3f:97:eb:5c:47:d5:4a:27:c2:d5:72:
         0b:1b:ca:3a:94:c8:a0:42:7f:75:1b:15:51:7b:4f:23:47:39:
         83:7e:5e:5d:75:f2:4b:ff:ad:fc:e8:dc:e8:ca:0c:a4:88:09:
         5e:6e:4e:e2:48:89:26:b1:38:dc:26:b4:5e:8a:9c:0d:53:b1:
         ce:8b:b6:53:8e:7c:66:0a:6e:70:7c:5e:98:d3:a7:ea:26:eb:
         a8:e7:c6:2e:39:37:9e:04:d0:00:ba:2f:c7:6e:5e:81:2a:90:
         61:29:87:12:d7:60:e8:01:2f:ce:1c:dc:18:db:ab:bf:89:bd:
         6d:01:72:d1:5c:1e:77:91:a8:97:e3:d2:84:ff:3c:31:a6:eb:
         d2:0b:69:ce:40:a6:38:f2:d5:3b:5f:8e:c5:f7:33:7f:74:06:
         d1:88:38:8d:4d:96:2f:27:63:15:2e:0a:51:6a:20:22:55:20:
         5a:fe:46:42:3e:09:26:d5:1d:52:a9:b9:f3:db:84:6f:ad:5e:
         23:2f:32:8a:22:54:fd:d5:02:d0:14:a5:0a:3f:db:4f:31:61:
         fa:48:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----