Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3d50aa3-801c-41c7-b501-d491c4534515.roa
File:                     d3d50aa3-801c-41c7-b501-d491c4534515.roa (raw, json)
Hash identifier:          Q35Uj0SvShdGEYfNpIl9ls6QPOVM0UIhHQ4SLa63MK0=
Subject key identifier:   21:E5:07:05:CB:4D:C3:88:A3:2D:24:A2:3F:1D:50:92:15:4A:B7:5C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       19123867D5BDE980ECD854BFF8212AACB45107C5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3d50aa3-801c-41c7-b501-d491c4534515.roa
Signing time:             Tue 10 Jun 2025 17:20:42 +0000
ROA not before:           Tue 10 Jun 2025 17:20:42 +0000
ROA not after:            Tue 15 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d077:8c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:12:38:67:d5:bd:e9:80:ec:d8:54:bf:f8:21:2a:ac:b4:51:07:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 10 17:20:42 2025 GMT
            Not After : Jul 15 23:59:59 2025 GMT
        Subject: serialNumber=a2b605f191a5f4006d2db02131aad72d17482778c01cd36de3ae89aeae73f2d6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ae:ac:56:29:35:af:7e:70:e0:e8:e9:8d:84:
                    2b:e3:d3:81:1c:a8:74:1c:b8:b1:b9:51:cd:28:b5:
                    ce:67:ba:e8:e9:d4:91:49:17:aa:aa:12:0d:ed:6b:
                    fc:d1:c1:cd:8d:54:27:80:9e:f0:da:e9:3a:71:2e:
                    43:96:dc:2f:87:de:fe:7f:ba:0d:19:8e:86:4b:38:
                    c9:c1:b1:be:82:2e:fc:1c:f7:e7:82:cb:ef:1d:c1:
                    82:93:f7:6e:2b:00:95:23:2b:9e:b2:e5:0d:32:94:
                    94:07:80:c1:fe:4f:06:9a:12:6f:89:d8:4d:6b:53:
                    ec:f5:e8:22:f8:29:24:b6:e8:cd:a8:f2:f7:88:3b:
                    29:ba:72:fd:8d:a0:21:25:5b:e9:da:25:39:88:e5:
                    21:69:86:63:24:fb:0b:29:6f:28:6b:e4:15:0e:66:
                    96:67:29:ce:ab:45:9c:9f:0e:b4:09:45:a1:16:25:
                    09:c2:a5:73:e2:74:f5:d9:6b:44:e6:a3:d4:32:b6:
                    57:7f:a1:fd:bd:5d:8d:74:f1:be:42:c2:29:5c:29:
                    85:31:cd:e8:b8:13:5b:2c:ef:a5:eb:5d:02:3d:3f:
                    8b:aa:be:5b:2e:86:69:33:20:93:a3:9e:59:5b:d3:
                    be:4a:51:bc:65:de:11:7b:dd:09:de:4b:67:8d:6d:
                    79:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E5:07:05:CB:4D:C3:88:A3:2D:24:A2:3F:1D:50:92:15:4A:B7:5C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3d50aa3-801c-41c7-b501-d491c4534515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d077:8c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         7c:7e:19:2b:5b:6e:2b:3d:de:7c:82:38:41:8d:3c:19:22:d1:
         ed:3f:13:c1:56:48:5f:6a:1c:bc:6f:07:3e:41:d5:c2:0a:49:
         56:4d:8b:71:ca:9f:65:8a:6f:2c:f7:ec:31:07:3d:0c:15:21:
         e3:ce:2b:73:4f:c6:e2:fc:41:43:eb:83:1d:c0:9f:16:fc:ac:
         30:0f:e7:1a:9e:53:d9:7e:bb:cd:86:83:4c:e7:ca:b9:81:58:
         92:f7:e5:17:d4:b3:40:cf:84:a8:b4:42:99:fd:56:8d:be:90:
         7f:2b:7e:9a:15:e9:ea:6f:c8:cf:33:c1:65:89:63:95:c9:8a:
         0c:4f:09:6a:74:12:94:d0:88:ff:72:d3:78:c7:32:de:65:89:
         7d:82:e8:1e:5d:dd:17:66:6b:db:63:dc:da:00:c9:68:95:61:
         1b:80:5a:c8:db:db:00:8d:fa:87:2c:84:bd:6f:b9:57:04:2f:
         51:48:c9:f9:8a:79:82:7c:ed:73:ff:41:27:23:98:77:bc:4e:
         36:a8:1f:5c:a6:17:f4:5b:1c:d1:24:2e:d4:62:8f:b3:d8:2c:
         90:3b:f8:0f:66:14:79:e6:7f:5a:eb:10:84:2c:15:fa:8a:d7:
         11:bb:5e:34:93:7e:c8:35:f8:e1:63:1e:cd:62:46:cc:1a:25:
         15:c3:3a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----