Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/af189eff-34de-4652-a029-d682c90d1fc5.roa
File:                     af189eff-34de-4652-a029-d682c90d1fc5.roa (raw, json)
Hash identifier:          VY/WU2s9YRYueUl6ihgVDYco6zSaIPF6bZiJZ52UH2Q=
Subject key identifier:   B6:D4:DA:ED:16:DC:5C:D5:86:90:75:69:F5:AF:ED:4A:BA:7D:86:D0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4E181BDE9EF776D7DCFE0FC5409B897C3B638B9A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/af189eff-34de-4652-a029-d682c90d1fc5.roa
Signing time:             Tue 21 Oct 2025 14:40:07 +0000
ROA not before:           Tue 21 Oct 2025 14:40:07 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:80c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:18:1b:de:9e:f7:76:d7:dc:fe:0f:c5:40:9b:89:7c:3b:63:8b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 14:40:07 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=c5c90dae1d7f5468d7d824f272aad1854d15b3f8e513611e66a6e348aae58f06, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4c:0c:07:c3:aa:88:b8:c1:62:42:03:cb:46:
                    da:c5:e3:2a:25:57:3b:7c:01:b8:2c:bc:59:33:61:
                    b6:cd:bc:5c:22:44:fc:a3:fe:70:da:49:0e:05:e4:
                    41:46:90:65:35:f8:e9:2d:d8:f1:cb:56:95:3d:06:
                    06:14:c7:43:7c:33:c8:4c:6d:7f:4e:3a:ed:75:67:
                    5d:ec:63:f6:9f:fb:94:32:ed:5c:10:14:11:fe:08:
                    e9:db:7f:13:4d:67:65:17:66:76:ce:06:8f:e4:e7:
                    64:ca:1d:70:1e:4c:1e:ab:b0:d4:51:8e:f1:d5:d7:
                    e7:82:b2:54:b4:a2:63:19:86:d7:c9:86:19:1a:12:
                    da:4a:73:05:27:45:37:2e:aa:dc:2c:4a:9e:c5:4b:
                    b8:e8:0c:e3:66:d0:d9:e0:2d:0e:40:b4:cd:60:c9:
                    f8:49:ff:37:6c:58:36:76:62:96:a1:f1:11:2a:46:
                    f0:19:c5:1d:82:9b:37:e3:44:22:70:7e:34:0c:ed:
                    3f:0b:f5:2f:0e:38:04:81:45:7e:89:97:87:7f:1c:
                    72:b7:37:7d:39:0d:89:5a:c0:98:42:75:f0:02:25:
                    22:d9:bf:24:ca:57:af:f1:56:cb:4e:ec:1e:aa:ee:
                    b5:b0:2e:49:22:28:8c:fd:02:ad:fd:3d:cb:3f:13:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D4:DA:ED:16:DC:5C:D5:86:90:75:69:F5:AF:ED:4A:BA:7D:86:D0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/af189eff-34de-4652-a029-d682c90d1fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:c3:14:79:08:a1:7a:9f:3a:04:4c:95:4d:27:bb:13:1e:ee:
         29:bc:40:28:79:6b:96:75:0a:5d:2e:c4:aa:1f:d6:b5:8a:91:
         b8:3a:5f:b8:bb:4e:cc:b4:9a:43:7f:b6:29:7e:e0:94:c6:11:
         55:70:cc:a1:1f:bf:81:01:1a:0a:a1:42:ba:a8:d0:3b:ea:9b:
         b9:42:6d:e5:7a:bf:46:87:2e:12:43:ff:3b:7a:da:86:57:4d:
         74:61:62:79:2a:73:71:15:57:dd:e6:8d:af:25:50:b1:58:64:
         14:8d:df:cb:33:30:5b:af:d2:b3:b1:43:bb:d6:d8:3f:a6:b9:
         02:c7:8f:29:ec:a3:9a:0b:40:0b:ad:8d:ca:f0:67:96:94:87:
         a7:01:88:26:34:82:6b:d5:ce:41:99:f5:48:0a:2d:c2:ce:0e:
         7d:63:39:d2:c9:7e:dd:ef:03:41:90:c7:cc:7d:b0:5e:71:47:
         c6:9e:6f:78:c9:5b:cb:91:61:70:c2:0d:dd:d8:ce:22:89:89:
         cf:8e:75:b5:4e:99:44:55:28:29:15:19:c2:b9:5d:7a:b4:c7:
         60:e9:20:2d:5f:1e:f8:09:c7:71:56:42:b5:48:0a:ce:16:93:
         91:2e:4b:0a:4f:34:61:1c:fb:51:ee:eb:cc:a3:7a:17:71:4a:
         73:77:18:89
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUThgb3p73dtfc/g/FQJuJfDtji5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExNDQwMDdaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGM1YzkwZGFlMWQ3ZjU0NjhkN2Q4MjRmMjcyYWFkMTg1NGQxNWIzZjhlNTEz
NjExZTY2YTZlMzQ4YWFlNThmMDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMRMDAfDqoi4wWJCA8tG2sXjKiVXO3wBuCy8WTNhts28XCJE/KP+cNpJDgXk
QUaQZTX46S3Y8ctWlT0GBhTHQ3wzyExtf0467XVnXexj9p/7lDLtXBAUEf4I6dt/
E01nZRdmds4Gj+TnZModcB5MHquw1FGO8dXX54KyVLSiYxmG18mGGRoS2kpzBSdF
Ny6q3CxKnsVLuOgM42bQ2eAtDkC0zWDJ+En/N2xYNnZilqHxESpG8BnFHYKbN+NE
InB+NAztPwv1Lw44BIFFfomXh38ccrc3fTkNiVrAmEJ18AIlItm/JMpXr/FWy07s
HqrutbAuSSIojP0Crf09yz8TH7cCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS21Nrt
Ftxc1YaQdWn1r+1Kun2G0DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWYxODllZmYtMzRkZS00NjUyLWEwMjktZDY4MmM5MGQxZmM1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+A
wDANBgkqhkiG9w0BAQsFAAOCAQEAaMMUeQihep86BEyVTSe7Ex7uKbxAKHlrlnUK
XS7Eqh/WtYqRuDpfuLtOzLSaQ3+2KX7glMYRVXDMoR+/gQEaCqFCuqjQO+qbuUJt
5Xq/RocuEkP/O3rahldNdGFieSpzcRVX3eaNryVQsVhkFI3fyzMwW6/Ss7FDu9bY
P6a5AsePKeyjmgtAC62NyvBnlpSHpwGIJjSCa9XOQZn1SAotws4OfWM50sl+3e8D
QZDHzH2wXnFHxp5veMlby5FhcMIN3djOIomJz451tU6ZRFUoKRUZwrlderTHYOkg
LV8e+AnHcVZCtUgKzhaTkS5LCk80YRz7Ue7rzKN6F3FKc3cYiQ==
-----END CERTIFICATE-----