Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/880d0334-daaa-445a-9c06-7402ba023a86.roa
File:                     880d0334-daaa-445a-9c06-7402ba023a86.roa (raw, json)
Hash identifier:          WlJhSh2qj7JkzbQMV7wS77VOd6mSEOCRmEGj9nB36rU=
Subject key identifier:   BE:E2:CD:8B:BF:F7:32:7A:43:D1:4D:74:2C:EB:5A:50:2D:77:50:C5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4823EF9B4BEED867027EE0BE5C07FA502EBA16EB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/880d0334-daaa-445a-9c06-7402ba023a86.roa
Signing time:             Mon 21 Jul 2025 16:40:47 +0000
ROA not before:           Mon 21 Jul 2025 16:40:47 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:6040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:23:ef:9b:4b:ee:d8:67:02:7e:e0:be:5c:07:fa:50:2e:ba:16:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 16:40:47 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=7faf33d19c3d02041b024ead3fe1613a5e116c3b4847e152da4da67b974173a5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:19:c5:20:6b:5f:30:e7:fe:93:2f:36:7a:
                    c3:86:e7:2d:be:59:ed:a3:0f:4c:e0:0a:a7:bc:87:
                    b5:07:3f:a8:9d:d3:89:dd:6e:2a:21:84:82:c0:bd:
                    3c:c7:30:76:7b:ea:06:f9:32:6e:3f:b1:c3:a7:b8:
                    21:e8:65:8e:a2:a3:fc:4d:63:03:25:1b:cb:03:ac:
                    4d:90:c4:6b:b5:5f:42:3e:17:48:3d:8f:9f:ef:62:
                    a8:78:cf:d2:24:3e:9d:d2:1b:a8:d5:b3:24:dd:b3:
                    c3:0f:7e:cf:ff:4b:2d:68:2e:6c:01:77:aa:30:43:
                    d8:27:8a:0e:6d:ff:9f:c6:77:d8:db:a1:0a:4f:bc:
                    3a:6c:f1:19:a2:39:3e:ef:02:71:ad:95:7d:14:ca:
                    73:2d:c4:23:00:63:fb:d3:b7:e8:7a:cb:0c:11:f0:
                    20:d9:a8:d6:6a:69:d5:8f:f7:7d:85:63:dc:9d:29:
                    e1:1d:6b:74:80:f7:88:ad:7c:84:46:2e:f5:a0:a3:
                    8e:8f:f5:b8:9c:9e:b3:72:fd:36:61:74:21:6b:46:
                    da:65:9a:72:68:33:ba:e8:c7:31:ec:6c:73:99:f8:
                    3d:c6:02:ee:00:5a:a7:3b:0b:58:5a:ce:80:42:a3:
                    19:3d:ba:e0:f5:43:f8:c3:01:1a:f9:eb:7b:31:dc:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E2:CD:8B:BF:F7:32:7A:43:D1:4D:74:2C:EB:5A:50:2D:77:50:C5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/880d0334-daaa-445a-9c06-7402ba023a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:6040::/46

    Signature Algorithm: sha256WithRSAEncryption
         77:f1:15:b6:a9:82:04:7d:d7:ed:98:90:88:a1:75:fe:8e:2c:
         de:93:73:c3:21:b3:46:b3:53:ca:85:9a:9a:1f:37:bd:79:37:
         81:e3:a0:ba:6c:bb:dc:2a:ee:a6:ff:3b:b0:8f:c6:9b:d9:70:
         45:e9:06:74:90:04:e0:8a:21:67:cd:80:c6:30:47:12:51:be:
         c3:af:35:4a:db:20:04:44:9b:c8:6c:af:af:6a:e1:62:22:0b:
         65:b9:82:48:77:bf:c3:9b:86:ab:82:ae:4e:3b:c8:17:1f:f2:
         00:a7:7b:d6:0c:29:e3:dd:9b:8b:a2:df:f8:23:e3:53:51:b8:
         04:ed:ac:78:23:8a:48:0d:e9:d5:33:db:23:47:4d:35:8a:88:
         b8:1c:10:f8:0c:a9:54:47:7a:58:8a:3a:44:ae:7c:b9:74:15:
         4b:66:4b:0c:e7:c1:fa:2a:aa:82:0b:76:df:fb:d3:a2:52:eb:
         4f:88:d2:c4:05:f6:33:3b:17:22:e2:06:cf:21:a9:12:e7:c7:
         5d:b3:09:bd:db:bc:55:06:e0:89:9a:bb:e5:df:11:28:64:f3:
         00:10:e2:07:b8:3c:b0:31:6a:dd:31:b9:70:54:95:0e:fa:dc:
         b6:e3:e8:da:a6:12:17:8a:19:0a:36:c0:87:9d:0b:c9:2b:37:
         33:3d:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----