Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
File:                     b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa (raw, json)
Hash identifier:          +lY4H+3vG771c0hj2OGQuW5zzni43+oSjoYGQ/WgvZA=
Subject key identifier:   0A:42:47:FE:7F:F5:1B:65:AB:B0:C7:46:AD:6F:40:6F:A8:77:1C:B0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       171D731095609508C8AD00354FD8580A408874EB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
Signing time:             Fri 15 Aug 2025 15:40:10 +0000
ROA not before:           Fri 15 Aug 2025 15:40:10 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:4020::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1d:73:10:95:60:95:08:c8:ad:00:35:4f:d8:58:0a:40:88:74:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 15 15:40:10 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=eeddf8b17a779ed4ee6c0ad73c15bbe851defdb243ca575a440d2a98a70f024e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:66:b6:76:ca:ce:fa:21:6e:66:09:10:25:d0:
                    fe:d2:37:ad:75:39:8b:4a:af:20:b7:8e:ee:a1:10:
                    9d:bd:93:ab:62:35:a7:5d:ff:2f:ca:ec:fa:28:97:
                    39:48:8c:43:a7:3f:86:5c:36:57:9d:96:ab:98:02:
                    34:ff:8e:22:13:74:e7:81:7d:90:de:1e:8e:f1:83:
                    f8:e3:ff:f5:14:6e:98:06:87:21:66:fb:05:36:87:
                    65:5e:8e:92:e2:ae:a5:f5:95:d3:48:e1:8e:5d:4e:
                    15:b3:bc:8a:d4:f4:f1:02:0e:5e:d9:1f:dc:84:4e:
                    d5:1b:3f:55:0b:a5:48:2e:ec:fc:f0:1a:f4:dc:d7:
                    28:d2:59:1e:43:27:35:bf:ce:7b:60:fe:5e:05:5f:
                    b6:4f:ce:00:e1:bb:d1:aa:d5:db:bb:17:61:0a:89:
                    7e:2f:c2:8f:e6:74:f5:31:6e:ed:02:d7:15:fd:96:
                    b7:0b:60:28:11:39:93:48:6a:5d:49:eb:69:f2:81:
                    14:38:f2:48:3d:0d:6f:ec:03:1b:54:a6:ac:06:40:
                    fd:2f:76:a8:a3:fb:4d:7d:66:83:60:dc:3b:8e:ac:
                    82:67:eb:1f:04:d5:b6:d2:f5:f4:b4:a1:2e:2a:d9:
                    5d:e8:0a:21:28:ea:af:0f:04:70:b0:44:d1:02:6f:
                    88:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:42:47:FE:7F:F5:1B:65:AB:B0:C7:46:AD:6F:40:6F:A8:77:1C:B0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:4020::/46

    Signature Algorithm: sha256WithRSAEncryption
         83:7d:fd:14:ae:ac:c5:35:81:8b:13:10:c7:c2:6d:b1:d3:f2:
         dc:3d:19:9a:0c:26:78:f1:29:4f:60:b8:e4:44:af:93:5d:71:
         37:ff:37:33:89:63:ea:be:26:b9:5b:17:80:e4:d0:af:f7:38:
         72:04:c2:c8:8a:4b:e5:be:50:52:02:5e:63:5c:91:1e:7f:13:
         c4:fb:28:16:39:05:6a:48:b8:ca:8c:04:7f:23:ce:67:cd:35:
         a4:a0:66:b9:4a:46:4f:b9:5e:b7:2d:a0:9b:f2:c6:b9:12:f8:
         a3:f0:28:ea:82:e5:04:13:04:66:df:6d:e7:8e:d7:38:95:52:
         e9:34:b4:8e:cf:c9:d6:c6:3e:ad:28:ce:e6:51:f1:49:21:69:
         cb:63:2e:aa:c6:b8:5e:f6:68:bc:a9:9c:f8:fb:a1:24:67:5f:
         e0:f4:53:32:24:ab:cb:0c:12:3e:52:aa:7b:0c:57:99:7b:17:
         32:5c:ba:23:6b:2e:4f:dd:38:9a:3e:21:a5:34:14:d3:95:72:
         a8:29:88:1c:6b:02:7b:cb:2f:6f:b3:f4:96:36:8e:1b:8c:94:
         8b:0e:ce:0b:76:4e:ec:5e:d8:4d:9f:ea:6e:07:c7:f3:4e:2b:
         fe:64:80:08:6a:c1:8f:3a:70:2c:a4:56:6a:27:d2:3e:62:23:
         85:86:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----