Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa
File:                     efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa (raw, json)
Hash identifier:          jjt0NadoYAyEfLEg8SzP0JSxhU2dVsFh5sYsUnYgPV4=
Subject key identifier:   E9:26:74:3A:C0:F4:7E:12:8F:22:F9:5B:23:87:40:5F:BD:57:76:5B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       73249933DE246823D6A14566DBCCCCC6E4D2B039
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa
Signing time:             Mon 25 Aug 2025 16:37:02 +0000
ROA not before:           Mon 25 Aug 2025 16:37:02 +0000
ROA not after:            Mon 29 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06c:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:24:99:33:de:24:68:23:d6:a1:45:66:db:cc:cc:c6:e4:d2:b0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 25 16:37:02 2025 GMT
            Not After : Sep 29 23:59:59 2025 GMT
        Subject: serialNumber=b31befdc374f9d7d06da515822003e19aec20c078781da232959f62faf2d10f5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:1f:6f:f7:d6:5e:c7:91:dd:f4:9e:ab:76:
                    22:86:8f:0e:a0:33:79:4c:e8:3a:ba:95:15:d1:d8:
                    ac:8a:55:e9:0f:b9:9b:0c:ec:30:c5:f0:ed:79:1c:
                    d2:14:3b:db:d5:70:55:ae:4d:75:67:c3:6d:ac:69:
                    32:d1:94:1d:47:0e:27:8a:c3:24:36:8d:5d:d6:fd:
                    22:e8:ae:18:71:cb:5e:4c:b2:58:c5:45:2b:76:99:
                    84:39:80:e0:1d:fa:d1:fb:bc:b2:72:09:c3:79:ec:
                    41:94:8b:36:9f:60:f4:a7:5a:d2:de:c8:aa:dd:f8:
                    ca:ed:9b:46:00:e1:78:bf:8d:c3:78:0a:33:83:eb:
                    f5:07:38:f1:10:b9:5e:2e:f8:f8:06:28:27:5f:63:
                    87:cc:76:1e:5b:5a:22:ca:94:fe:70:3d:42:58:3b:
                    44:66:3c:37:0a:9e:03:78:ef:4b:d6:e2:e4:20:35:
                    6c:c8:3e:34:91:58:53:0b:61:3f:77:e5:c9:ff:8c:
                    11:71:f1:e4:e1:f6:08:d0:5a:62:c5:35:87:19:d1:
                    2d:66:6b:f8:b1:8f:de:fd:a2:d7:7a:ac:74:fd:0e:
                    e7:1d:99:fc:8b:c9:da:98:46:28:f2:21:8c:28:d4:
                    65:14:9a:58:90:69:d1:f7:f5:6d:01:dd:21:6e:a2:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:26:74:3A:C0:F4:7E:12:8F:22:F9:5B:23:87:40:5F:BD:57:76:5B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06c:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:db:69:ad:9c:43:7d:cd:55:fc:40:e9:ea:40:0c:02:3a:7e:
         21:1a:36:eb:b9:ec:da:1a:3a:39:79:ce:86:02:93:0a:df:b9:
         e0:d8:a9:3d:1d:90:c0:05:16:c5:d0:c7:69:67:e8:57:96:94:
         27:52:61:17:18:6d:1a:d1:ea:ea:df:c4:83:3f:a6:1b:31:85:
         a7:04:6d:f7:b0:3e:bc:08:48:13:09:cd:70:91:a9:0d:ed:59:
         49:7f:86:8e:a9:08:4a:8b:94:8e:f2:57:1a:db:41:d4:b1:d4:
         09:60:1f:43:6c:db:ed:b5:1e:68:65:1e:5e:84:d6:30:79:c1:
         b8:bf:f4:9d:87:57:13:6c:5c:d2:d6:87:59:87:ea:3d:fc:a5:
         80:93:4f:8f:70:c6:2a:81:66:7f:77:47:81:24:e5:c9:dc:66:
         ed:25:38:b7:89:7f:c2:df:30:87:82:e3:7e:d7:db:3b:f3:f8:
         29:59:da:43:c1:31:d7:d8:b9:0f:52:88:b1:7b:f4:2c:08:d7:
         d3:dc:6b:7b:28:c5:37:17:ee:13:0e:1b:fe:f2:89:73:3b:e2:
         b0:8b:b7:60:7d:5c:db:4c:42:c1:52:f1:43:ce:14:5e:e5:8e:
         7c:f7:33:dd:62:7f:98:bc:63:c5:d7:61:86:ef:f8:ab:ac:a9:
         3a:e2:08:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----