Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
File:                     4078cff6-9b34-4f16-903f-c7817d86bf50.roa (raw, json)
Hash identifier:          o4CPsSBoCuVUCayGAGiZWmBrgWjQ+voX3cTBo1Zi5MI=
Subject key identifier:   36:55:DC:7A:78:B0:A5:28:BA:D7:CC:15:ED:9A:53:A9:1D:D2:DD:6D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       522EBEDF1FDF4F6FC766D9B8E0613433D6C14C31
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
Signing time:             Tue 20 May 2025 18:31:45 +0000
ROA not before:           Tue 20 May 2025 18:31:45 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:a080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2e:be:df:1f:df:4f:6f:c7:66:d9:b8:e0:61:34:33:d6:c1:4c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 20 18:31:45 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=a8a3a66ee8a0c190e83d370ef4adeea182df1b3d00cec836fe11ef3ca2bc62af, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:33:68:8b:e8:72:90:ff:7d:fc:d4:79:92:
                    e9:6f:07:b6:6c:8a:3f:f2:0a:86:22:67:ce:c2:f3:
                    eb:c4:49:37:bb:57:4b:dc:d4:d3:13:a0:d6:56:5d:
                    d1:58:5c:2b:2d:f9:1b:b7:af:8f:30:30:0f:df:4e:
                    d8:ef:fb:fe:b7:dc:89:86:c5:02:f7:61:37:ae:30:
                    90:5a:6b:de:43:11:b7:4e:8f:bb:86:9f:14:d6:49:
                    ea:21:81:16:63:1d:34:86:da:7c:85:97:51:a9:32:
                    6b:7b:ee:77:e6:db:a2:6c:b8:11:60:59:33:07:46:
                    c7:64:7c:39:3d:ef:95:56:b4:b6:54:06:b9:68:97:
                    6c:3b:d3:74:a8:8b:95:64:0d:5f:86:df:b1:69:b5:
                    6d:8c:91:03:42:0c:16:92:af:dd:a0:96:05:37:ea:
                    ab:73:50:d4:12:9f:f4:9e:8f:f7:83:13:4f:28:9b:
                    08:3a:0e:b1:0a:11:ce:95:c9:49:d9:4c:5b:59:6c:
                    97:7f:ac:fc:e3:05:b2:18:9d:bf:a8:21:10:fc:2f:
                    7b:8a:ed:95:a1:9a:fc:4e:40:17:06:b3:54:79:ac:
                    16:09:9d:7f:13:b6:be:08:17:2c:5c:5e:d7:90:84:
                    b5:14:a8:b0:22:7c:8e:77:fe:61:a1:98:ae:79:a9:
                    1a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:55:DC:7A:78:B0:A5:28:BA:D7:CC:15:ED:9A:53:A9:1D:D2:DD:6D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:a080::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:b3:93:8c:62:e9:0f:86:50:8c:78:2d:29:c0:de:6f:e9:01:
         1e:2e:0d:26:1a:bb:82:ba:63:1a:51:86:53:33:6e:55:2e:3b:
         05:f8:a6:6d:41:1d:60:89:18:8b:7e:39:61:3c:9c:ec:6e:c2:
         96:aa:22:1b:7f:25:86:4b:71:b9:cd:fe:10:ef:a7:06:c7:d3:
         9d:0d:f9:e3:8f:31:ce:8e:a9:28:38:2b:99:f4:ec:76:e9:aa:
         3f:51:86:f1:5f:32:30:8f:ea:cc:e0:77:a3:6c:01:76:d4:45:
         31:83:6f:7e:ae:f6:73:ec:f2:66:e8:44:2f:3d:b8:e4:1f:d6:
         b7:5e:72:cc:e1:de:4e:4f:9c:65:0a:41:de:05:7e:36:d8:a4:
         2f:39:10:2b:72:06:92:e3:11:5a:3b:e9:62:ce:0d:d3:b9:9e:
         52:28:84:9d:05:dc:07:e7:2e:d0:72:a7:54:d3:fb:a8:52:73:
         c9:c8:d2:9c:a1:6c:d8:d1:62:bd:b0:b6:bb:4f:19:bf:ce:9d:
         1d:c5:67:b1:21:e7:91:44:16:db:ad:04:c5:21:3a:30:9f:ee:
         cb:4d:9c:bc:7e:ef:e4:e5:1f:e2:cc:67:e5:30:24:49:38:19:
         1a:44:d2:35:23:57:8f:95:5c:bf:7b:b1:cd:36:2c:9b:fd:37:
         fe:bd:ad:38
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUUi6+3x/fT2/HZtm44GE0M9bBTDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxODMxNDVaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGE4YTNhNjZlZThhMGMxOTBlODNkMzcwZWY0YWRlZWExODJkZjFiM2QwMGNl
YzgzNmZlMTFlZjNjYTJiYzYyYWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALnAM2iL6HKQ/3381HmS6W8HtmyKP/IKhiJnzsLz68RJN7tXS9zU0xOg1lZd
0VhcKy35G7evjzAwD99O2O/7/rfciYbFAvdhN64wkFpr3kMRt06Pu4afFNZJ6iGB
FmMdNIbafIWXUakya3vud+bbomy4EWBZMwdGx2R8OT3vlVa0tlQGuWiXbDvTdKiL
lWQNX4bfsWm1bYyRA0IMFpKv3aCWBTfqq3NQ1BKf9J6P94MTTyibCDoOsQoRzpXJ
SdlMW1lsl3+s/OMFshidv6ghEPwve4rtlaGa/E5AFwazVHmsFgmdfxO2vggXLFxe
15CEtRSosCJ8jnf+YaGYrnmpGgcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ2Vdx6
eLClKLrXzBXtmlOpHdLdbTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDA3OGNmZjYtOWIzNC00ZjE2LTkwM2YtYzc4MTdkODZiZjUwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+g
gDANBgkqhkiG9w0BAQsFAAOCAQEAt7OTjGLpD4ZQjHgtKcDeb+kBHi4NJhq7grpj
GlGGUzNuVS47BfimbUEdYIkYi345YTyc7G7ClqoiG38lhktxuc3+EO+nBsfTnQ35
448xzo6pKDgrmfTsdumqP1GG8V8yMI/qzOB3o2wBdtRFMYNvfq72c+zyZuhELz24
5B/Wt15yzOHeTk+cZQpB3gV+NtikLzkQK3IGkuMRWjvpYs4N07meUiiEnQXcB+cu
0HKnVNP7qFJzycjSnKFs2NFivbC2u08Zv86dHcVnsSHnkUQW260ExSE6MJ/uy02c
vH7v5OUf4sxn5TAkSTgZGkTSNSNXj5Vcv3uxzTYsm/03/r2tOA==
-----END CERTIFICATE-----