Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
File:                     119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa (raw, json)
Hash identifier:          0aQ96DegkURBlsnwgjv9vLvk5K78DjEv4/E3A8uGwt8=
Subject key identifier:   37:94:6A:D8:3B:FB:72:E9:75:3E:A4:F6:80:1C:8C:BD:C5:72:A4:18
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7477F5D4BAAA45F9381BB9AB3F0D5D73EF231244
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
Signing time:             Mon 21 Jul 2025 16:50:51 +0000
ROA not before:           Mon 21 Jul 2025 16:50:51 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:77:f5:d4:ba:aa:45:f9:38:1b:b9:ab:3f:0d:5d:73:ef:23:12:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 16:50:51 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=7c889f7042b7615c44d7a3ead8cc10318c077905ad0cca7bf1e410a1799be2f3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:64:79:f2:f9:dc:10:0e:43:75:c9:39:4a:b4:
                    71:ef:e0:70:b5:92:88:f5:12:35:14:52:37:68:72:
                    d3:6a:28:60:6a:93:48:98:d7:72:a8:7d:5f:22:47:
                    10:a8:a5:bc:48:41:01:dc:f0:43:78:df:95:c4:b4:
                    7f:80:18:29:84:bd:b6:4e:c7:d3:08:33:16:9f:46:
                    93:d3:5a:fe:7f:4e:a4:92:88:3e:90:ca:67:67:51:
                    46:02:d1:68:ab:9d:da:72:18:cf:26:6d:98:7d:40:
                    bb:8d:0d:eb:dd:3e:9f:57:b2:4d:a8:c5:9d:62:a4:
                    f2:44:e0:ee:2f:e2:9c:b9:65:e9:c2:3c:d4:9b:4a:
                    23:84:c2:60:ef:ce:32:62:39:04:54:31:c0:1c:95:
                    00:29:f8:02:33:f5:48:56:84:40:f6:34:d1:c5:4d:
                    75:eb:37:2e:a6:92:50:cd:9f:96:bc:fc:74:e2:54:
                    fc:1e:28:47:6d:c8:c2:15:68:69:a1:9d:4e:8e:1a:
                    87:e6:fd:6d:d8:11:c5:61:77:4c:a3:0e:f4:ec:4a:
                    dd:88:d5:f3:93:73:2b:62:b1:e7:00:6d:f7:14:99:
                    b7:92:20:4d:d7:e2:f6:a2:ea:fb:63:e0:0b:6b:94:
                    76:82:e9:1f:fd:42:a3:b4:39:25:30:71:24:4e:71:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:94:6A:D8:3B:FB:72:E9:75:3E:A4:F6:80:1C:8C:BD:C5:72:A4:18
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ca:66:8e:29:81:5f:01:0a:18:25:20:40:4a:07:a2:7b:d7:b2:
         c8:7f:94:c6:7d:92:8e:1a:a3:5b:63:a0:17:ae:1d:00:34:3d:
         21:3e:67:4f:36:20:cb:b9:bc:39:91:a7:a1:a5:0e:df:13:76:
         08:57:74:b6:eb:bc:f1:1f:2a:b2:dc:42:d4:b4:cd:de:ba:89:
         2c:63:34:8d:41:3a:7f:d2:9d:bd:28:c1:66:bc:e5:1d:6b:68:
         89:fb:0c:4b:ee:d0:c6:79:bb:c6:3b:f1:56:22:29:17:25:d5:
         26:8d:5d:44:04:04:b8:ba:b4:c8:42:ec:ed:94:a6:75:88:4a:
         92:ce:40:79:45:38:56:3d:28:95:1e:c1:5d:67:c4:9e:b0:12:
         3e:c5:1c:7f:3d:35:b1:ac:21:76:b3:92:53:ee:a5:73:17:ae:
         38:19:fc:32:0e:62:b2:94:cf:97:c2:93:b3:cd:d4:93:7c:22:
         60:a7:c7:4b:a2:58:28:e2:cf:60:1b:e5:d4:f9:de:72:51:37:
         ff:77:55:d4:eb:3b:9e:85:aa:1f:8c:71:d9:15:b2:d5:1a:cf:
         86:ff:bb:5e:30:f5:71:44:23:04:93:dd:b8:17:19:32:d7:76:
         15:0d:f6:e0:bc:f1:d0:f7:2f:6f:53:82:ca:d7:be:9a:c2:25:
         e5:97:46:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----