Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa
File:                     5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa (raw, json)
Hash identifier:          V1806CWvcsBk7/D0O07iJ5OAB7urYo5xbnQJDs8NEw0=
Subject key identifier:   EC:C3:8A:B0:0F:98:76:B8:2C:D7:24:1C:09:0A:C8:F4:0D:07:E1:84
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       69F20F1F52B9417414B671FA742C156FDB045266
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa
Signing time:             Tue 20 May 2025 20:31:31 +0000
ROA not before:           Tue 20 May 2025 20:31:31 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f2:0f:1f:52:b9:41:74:14:b6:71:fa:74:2c:15:6f:db:04:52:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 20 20:31:31 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=37d2f3c431627f34288dec80fae99bed74647f182d87db2747c256387a2b23b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:4a:53:1c:c6:33:13:c1:e2:83:fc:b2:9a:
                    20:f9:aa:f7:df:8d:98:fb:d0:c4:a7:8f:17:c6:3e:
                    be:ba:23:f9:f5:4c:ef:ec:1e:2f:6c:99:8d:5e:c7:
                    e5:da:9b:0b:48:f2:51:de:d5:a7:0d:3a:8b:4d:2d:
                    4e:11:d8:95:d5:54:c0:96:92:2e:73:ec:03:16:bd:
                    a0:cd:30:85:db:9c:73:10:32:53:6d:de:2a:33:99:
                    82:6b:18:f4:80:e4:2e:c6:2a:99:73:37:e7:a2:c6:
                    29:7d:25:f8:c0:4b:61:7b:47:62:35:14:72:a1:32:
                    8a:85:a9:71:08:1f:05:0e:54:b9:2b:3b:a5:a8:03:
                    1a:0d:7b:82:9d:70:c8:72:f5:ca:7a:e2:33:4b:f4:
                    3e:ec:22:d9:fd:2b:5d:f6:9b:b9:29:47:b0:53:1b:
                    12:99:82:95:e3:1e:73:e0:ac:94:20:df:ec:93:d7:
                    49:60:74:f2:6b:fe:4a:8a:44:41:ec:6a:b8:e3:a6:
                    e7:4e:46:69:36:58:ed:e9:b0:b2:fd:23:d1:c2:b3:
                    28:64:8e:96:f0:76:8b:23:31:c9:97:8f:d6:29:2e:
                    2c:e6:b2:82:49:7e:b8:5f:a6:60:52:c4:82:b5:5e:
                    bb:ff:8a:70:87:ce:18:72:fd:f0:50:e3:ef:63:c2:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C3:8A:B0:0F:98:76:B8:2C:D7:24:1C:09:0A:C8:F4:0D:07:E1:84
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01d::/36

    Signature Algorithm: sha256WithRSAEncryption
         be:f7:a5:1b:10:f7:16:8a:73:91:12:87:af:8e:fc:10:e3:45:
         8a:4d:2b:d2:ad:4d:a8:ad:a4:50:25:d0:98:52:e9:f6:7f:96:
         29:fb:f9:7d:4c:e5:83:cd:26:7f:09:ad:fe:60:a0:de:ba:cf:
         bc:37:8c:6a:a1:48:2e:2b:7d:e6:54:e5:33:ec:a2:af:26:2c:
         4f:83:18:34:0f:ca:9a:03:52:ff:27:2a:33:19:af:39:ec:c3:
         18:df:84:00:99:4f:0e:1f:7d:dd:23:59:3c:13:97:a5:48:27:
         20:8d:93:40:c6:1e:89:c2:a0:65:45:4e:6e:a5:66:07:39:0b:
         3e:3b:6c:75:d3:64:46:f7:b5:4f:40:2b:7a:d3:9f:12:45:d5:
         19:b1:c7:7f:af:de:44:ac:be:ed:70:9e:20:dc:b2:23:40:9f:
         10:eb:f2:f1:f0:62:8d:82:13:9a:da:98:1b:2c:d4:39:bc:e4:
         b8:43:df:62:23:15:1b:94:4c:b0:cb:e0:4a:c6:b9:9a:3c:72:
         e5:3a:c7:37:04:45:c7:e5:f1:4d:97:04:33:17:ac:3e:ef:7d:
         f2:d6:ed:83:97:b7:ce:7f:eb:19:94:85:03:b5:0e:e9:bd:db:
         86:cc:d3:91:32:4d:8e:55:89:11:59:3a:ec:67:34:02:11:5f:
         9f:8e:8d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----