Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa
File:                     581266ac-af97-4864-a566-36693b593269.roa (raw, json)
Hash identifier:          KL63s79DKxkIlz4bqzZUw96FJwKVf61QL08fmfe/BTo=
Subject key identifier:   2A:39:B6:04:E3:97:07:DC:C3:CA:46:05:A8:08:AC:56:A0:B5:EE:56
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       01C981D9932D835E9CB83E4515F98DF4AA3A66B2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa
Signing time:             Fri 25 Apr 2025 19:10:44 +0000
ROA not before:           Fri 25 Apr 2025 19:10:44 +0000
ROA not after:            Fri 30 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c9:81:d9:93:2d:83:5e:9c:b8:3e:45:15:f9:8d:f4:aa:3a:66:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Apr 25 19:10:44 2025 GMT
            Not After : May 30 23:59:59 2025 GMT
        Subject: serialNumber=cdc8ec84bf1a242f35359e0576da121fa8bf65870b3392726641cb8854a223b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:d8:aa:ca:b3:78:4d:0f:97:3a:a7:ff:05:
                    91:83:bf:4d:e5:93:10:69:e6:53:7c:44:d8:98:67:
                    67:ca:46:bc:8a:c9:67:19:f5:1d:cd:12:23:72:f1:
                    37:bb:6f:0b:51:6c:50:28:dc:3a:fa:05:b4:ce:9b:
                    4c:0c:aa:9e:fc:f3:b2:07:66:e4:78:fe:6f:57:9f:
                    45:79:f8:b2:66:cc:44:23:a6:d8:30:38:2f:11:47:
                    a7:1e:bf:d8:a5:b7:a1:98:47:f5:ec:d4:52:b9:b7:
                    71:1f:a1:25:03:9f:1b:3f:f7:69:35:44:87:a3:ba:
                    9b:eb:65:cf:4e:99:ef:cf:ff:20:1d:b5:79:d7:2f:
                    cb:70:6f:d1:fa:ae:6d:f2:6f:b4:b8:9a:13:40:82:
                    7f:79:89:30:1f:1b:6c:fd:c1:a1:39:af:cf:9e:47:
                    c6:b7:0e:bf:8b:8c:e4:a9:ed:e7:ed:36:4d:e9:f8:
                    ec:2c:5f:81:83:dd:90:e9:ef:50:bf:60:1c:25:bb:
                    fb:59:d5:e7:3e:a3:cf:60:f9:80:07:b4:ca:33:d3:
                    06:15:a6:a3:33:68:aa:cb:83:02:ea:6c:05:14:b5:
                    42:dd:cb:50:ac:99:b7:3f:4d:35:35:9d:6b:8e:df:
                    db:a6:28:7a:7f:62:50:1c:36:94:bf:46:a7:ee:6a:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:39:B6:04:E3:97:07:DC:C3:CA:46:05:A8:08:AC:56:A0:B5:EE:56
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:52:b4:56:7b:0a:55:a1:e7:52:84:d0:c6:e7:fa:5f:01:97:
         22:fe:43:6c:07:9f:06:8c:e5:7f:bf:76:1f:bb:11:24:71:f9:
         ea:60:81:21:0e:3d:72:ea:d9:a9:ea:6b:1d:1b:88:f5:f0:aa:
         e7:ce:8e:3b:85:79:4f:96:de:23:7e:c5:41:db:19:dc:a6:9c:
         f4:c0:d5:1c:6b:ae:52:73:bc:18:fc:4f:38:cb:07:c7:2f:88:
         0b:cd:b5:8f:b9:c8:94:cc:8a:5e:61:ff:12:fc:c5:40:36:97:
         2a:a8:7b:b5:bb:9b:3d:a4:6f:01:27:a4:03:bc:a1:3c:2d:98:
         78:30:52:11:63:02:c3:6a:f1:61:fa:a6:0d:e7:eb:be:51:40:
         fc:ea:69:bc:ce:6e:b6:6d:c9:0b:a8:8e:18:39:c3:88:05:5a:
         a5:01:0b:fe:29:8b:75:14:f8:2d:db:2a:5d:8b:8a:4d:fb:c5:
         8b:83:12:e1:c9:b3:c8:be:e3:05:8b:5e:a4:2e:97:c8:c7:d6:
         83:2e:c5:43:0f:26:79:3f:01:bc:4e:c6:14:73:0c:c0:50:79:
         1d:2b:da:8a:08:b1:e1:1f:3e:2b:18:2c:67:db:ea:f8:94:39:
         75:20:ae:63:26:68:d6:ff:66:87:64:97:98:7e:a7:bf:12:e6:
         cf:00:20:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----