Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ebcf25-b35b-4dbc-bae2-bee0e176b454.roa
File:                     42ebcf25-b35b-4dbc-bae2-bee0e176b454.roa (raw, json)
Hash identifier:          eTglBW7Z5K7jeC8y9+umc5xDRAeGEETa8xQZuhsKX4k=
Subject key identifier:   24:98:32:EA:A9:69:47:31:5E:81:B6:10:1C:52:77:4F:76:32:5D:1C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4986DC5BF90BB5D3C25808E48444252D35D4118C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ebcf25-b35b-4dbc-bae2-bee0e176b454.roa
Signing time:             Tue 10 Jun 2025 17:20:44 +0000
ROA not before:           Tue 10 Jun 2025 17:20:44 +0000
ROA not after:            Tue 15 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:840::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:86:dc:5b:f9:0b:b5:d3:c2:58:08:e4:84:44:25:2d:35:d4:11:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 10 17:20:44 2025 GMT
            Not After : Jul 15 23:59:59 2025 GMT
        Subject: serialNumber=a0afb13c1c8df58071a6aaebc4cef9d254990f327bc04e09402c92778cf3257e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:a3:d8:18:5e:bb:20:4f:12:d3:c0:ed:95:
                    20:0a:51:61:d8:aa:a2:12:af:06:3b:bd:48:36:d6:
                    4d:ec:71:b8:ba:64:43:9a:ec:e4:69:99:35:56:6d:
                    88:64:96:83:83:ed:89:04:77:91:c4:78:fb:9e:3f:
                    c8:2d:65:7c:31:58:63:3e:a9:81:8e:1d:52:47:c2:
                    37:e5:8d:b9:0d:38:4f:15:6a:b4:f6:7c:82:f6:0e:
                    5d:dd:33:e7:1b:0a:25:54:70:2d:a6:ac:24:92:ae:
                    21:31:00:2a:97:a0:ac:9c:2d:aa:dc:c9:b9:2e:02:
                    8b:35:0d:d5:c3:c8:45:9d:9d:b8:39:1c:8a:4c:c0:
                    57:de:3a:38:32:06:b6:8b:a9:9a:48:99:ed:8c:24:
                    93:90:4d:91:87:5d:f2:c3:36:43:26:26:c6:56:ff:
                    e7:78:f0:fa:fd:8d:10:a8:90:81:de:23:60:f6:97:
                    c5:ab:a2:8c:10:da:5e:af:b4:cc:7b:8a:68:94:52:
                    ca:4d:63:c1:f1:bc:5d:eb:78:01:fa:4e:c0:cc:41:
                    37:c6:04:5f:09:3c:90:47:03:2e:72:69:81:7f:58:
                    d2:34:6b:74:8d:6c:82:c4:28:dc:df:6b:41:16:30:
                    bc:67:0e:17:83:d2:0e:4b:c7:9a:5c:61:fb:2d:89:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:98:32:EA:A9:69:47:31:5E:81:B6:10:1C:52:77:4F:76:32:5D:1C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ebcf25-b35b-4dbc-bae2-bee0e176b454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:840::/46

    Signature Algorithm: sha256WithRSAEncryption
         b9:71:8d:ab:d7:25:c1:8a:5b:25:ea:f8:10:ef:de:74:b6:de:
         1c:b9:59:c0:8a:56:7b:74:b5:76:33:a6:7a:69:01:ea:21:a6:
         fb:e7:49:ce:c6:e2:37:63:f1:f1:4f:85:cb:e3:86:50:1c:20:
         65:5e:e0:b3:39:fc:b3:c2:5e:f9:35:3f:4a:de:55:7e:88:86:
         7f:52:cc:d9:dd:b5:98:2f:87:3f:ef:1f:57:9b:12:6c:85:3a:
         0c:a0:7a:ca:b3:e2:b2:bd:58:10:ff:71:d5:2a:5d:ee:ff:d8:
         06:3b:af:58:5b:41:62:8f:99:ce:1a:86:6b:18:7d:93:d5:cc:
         0c:ba:ea:96:d8:32:42:49:03:7c:1f:8c:7f:35:a0:ed:26:cb:
         24:ef:33:39:93:b5:02:fa:7d:49:00:19:e5:24:88:f2:63:db:
         ac:c5:cb:d1:d2:8a:5f:bd:90:ec:7f:84:08:85:9c:5d:bd:36:
         0d:62:e3:70:3a:97:c5:98:17:6f:b8:ad:d8:51:e5:40:79:3f:
         9b:9d:0f:bb:24:30:6f:d3:e0:40:7a:49:be:41:9a:72:a1:96:
         2c:b9:60:1b:0e:aa:24:88:b7:dc:cf:d4:93:58:28:7a:d3:48:
         61:fe:bf:c9:85:41:bc:5d:10:68:52:be:68:0a:6b:5f:4f:e6:
         36:fb:70:fa
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUSYbcW/kLtdPCWAjkhEQlLTXUEYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTAxNzIwNDRaFw0yNTA3MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGEwYWZiMTNjMWM4ZGY1ODA3MWE2YWFlYmM0Y2VmOWQyNTQ5OTBmMzI3YmMw
NGUwOTQwMmM5Mjc3OGNmMzI1N2UxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALr2o9gYXrsgTxLTwO2VIApRYdiqohKvBju9SDbWTexxuLpkQ5rs5GmZNVZt
iGSWg4PtiQR3kcR4+54/yC1lfDFYYz6pgY4dUkfCN+WNuQ04TxVqtPZ8gvYOXd0z
5xsKJVRwLaasJJKuITEAKpegrJwtqtzJuS4CizUN1cPIRZ2duDkcikzAV946ODIG
toupmkiZ7Ywkk5BNkYdd8sM2QyYmxlb/53jw+v2NEKiQgd4jYPaXxauijBDaXq+0
zHuKaJRSyk1jwfG8Xet4AfpOwMxBN8YEXwk8kEcDLnJpgX9Y0jRrdI1sgsQo3N9r
QRYwvGcOF4PSDkvHmlxh+y2J/dcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQkmDLq
qWlHMV6BthAcUndPdjJdHDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDJlYmNmMjUtYjM1Yi00ZGJjLWJhZTItYmVlMGUxNzZiNDU0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HsI
QDANBgkqhkiG9w0BAQsFAAOCAQEAuXGNq9clwYpbJer4EO/edLbeHLlZwIpWe3S1
djOmemkB6iGm++dJzsbiN2Px8U+Fy+OGUBwgZV7gszn8s8Je+TU/St5VfoiGf1LM
2d21mC+HP+8fV5sSbIU6DKB6yrPisr1YEP9x1Spd7v/YBjuvWFtBYo+ZzhqGaxh9
k9XMDLrqltgyQkkDfB+MfzWg7SbLJO8zOZO1Avp9SQAZ5SSI8mPbrMXL0dKKX72Q
7H+ECIWcXb02DWLjcDqXxZgXb7it2FHlQHk/m50PuyQwb9PgQHpJvkGacqGWLLlg
Gw6qJIi33M/Uk1goetNIYf6/yYVBvF0QaFK+aAprX0/mNvtw+g==
-----END CERTIFICATE-----