Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
File:                     d7bd85bf-2af2-46a0-91d6-f945e7063231.roa (raw, json)
Hash identifier:          rms8nLLICIcRI62EAau8NMm33vG/++brjG4bQ/32kC8=
Subject key identifier:   C9:4D:9E:37:AE:16:A8:19:82:F7:D7:85:B7:5D:85:8E:A0:36:76:DD
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       034138E921407FA046D5C9C19FF1899929D19B32
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
Signing time:             Tue 20 May 2025 19:10:46 +0000
ROA not before:           Tue 20 May 2025 19:10:46 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:c080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:41:38:e9:21:40:7f:a0:46:d5:c9:c1:9f:f1:89:99:29:d1:9b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 20 19:10:46 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=88ae022c1dc966ebba21b50aa8f1607e8d0d95b4cafb1557df135b5db06032d6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:3f:cb:34:68:4d:a2:47:c7:d0:80:bd:82:
                    7b:4b:c8:06:f5:0c:74:db:98:83:98:21:99:de:03:
                    82:11:2b:1f:3b:14:30:8b:e7:f8:05:eb:84:a3:d7:
                    81:65:13:a4:40:37:2c:c9:7b:39:84:9b:f5:aa:6e:
                    34:65:05:8e:65:e4:fd:28:f6:76:2b:6b:c4:fa:ba:
                    12:cb:5c:ff:25:c8:74:4f:1a:4c:fe:25:e2:c8:d3:
                    c8:4d:89:e1:87:d2:7b:2b:6d:c0:b5:5b:c9:73:bf:
                    ba:4c:49:d2:4b:b3:d0:a9:a2:84:33:02:08:bf:c9:
                    9b:92:cb:5f:6a:c1:ac:ad:d8:46:97:02:fb:6c:92:
                    7e:95:31:7f:49:82:5c:3d:2a:bb:25:77:e5:63:68:
                    ea:59:1a:ad:72:38:5c:3a:51:f2:93:b0:3d:08:47:
                    3e:53:cd:12:69:4e:fa:5c:73:a9:1d:24:8a:82:91:
                    02:c8:52:cf:ec:32:09:3c:3c:39:53:ba:55:02:a7:
                    aa:84:52:ad:5f:7c:2f:6a:08:a7:73:e1:9f:3d:13:
                    58:59:70:2b:7a:2c:11:df:b2:17:86:c2:c7:48:ce:
                    7b:ca:65:84:04:db:54:ea:20:72:13:3e:4c:1e:3f:
                    9e:4c:60:01:ed:67:2e:3f:2c:83:08:12:40:2d:8f:
                    57:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4D:9E:37:AE:16:A8:19:82:F7:D7:85:B7:5D:85:8E:A0:36:76:DD
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:c080::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:62:d3:8a:f5:20:5f:fb:0b:99:65:79:89:e8:f5:98:70:de:
         20:5a:fa:29:b2:52:5e:d3:e4:bd:c5:cc:6d:b4:17:86:5b:12:
         7c:07:52:8d:81:fe:04:4d:6b:11:3c:5f:44:05:3e:47:08:2c:
         cd:8a:33:d8:89:a7:ac:e1:b9:3d:fb:c7:f9:9d:e1:75:70:d0:
         a9:58:a7:11:49:f7:1d:f1:3a:fe:30:ff:66:af:78:fe:cc:ee:
         89:28:0d:1d:f2:e1:d6:a9:1d:63:bb:29:bf:13:16:d2:ef:bf:
         6e:86:09:c7:42:c2:8d:3a:b4:0b:df:2e:16:c2:53:0c:0e:72:
         95:9b:11:10:47:17:32:0d:82:d3:54:57:01:79:55:46:8c:cb:
         a2:5f:d2:68:3a:91:16:b7:66:8d:e6:9b:e1:29:00:05:59:dd:
         d4:18:01:89:e9:a6:82:a5:05:0e:ea:b0:f4:42:b6:41:f2:4d:
         b4:26:8e:e3:db:4c:4f:79:54:8b:0b:d3:37:9a:40:1a:87:db:
         a0:76:88:79:97:2a:a5:3a:25:eb:81:f4:85:7e:19:95:8d:85:
         c4:69:f1:7a:c5:8f:7f:a0:45:f1:b3:c4:a3:9d:6d:0b:24:b0:
         9c:dd:26:ad:27:f3:87:35:d0:2d:c9:72:ce:ef:4e:5b:e7:ba:
         2f:1c:56:63
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUA0E46SFAf6BG1cnBn/GJmSnRmzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTEwNDZaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDg4YWUwMjJjMWRjOTY2ZWJiYTIxYjUwYWE4ZjE2MDdlOGQwZDk1YjRjYWZi
MTU1N2RmMTM1YjVkYjA2MDMyZDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMXoP8s0aE2iR8fQgL2Ce0vIBvUMdNuYg5ghmd4DghErHzsUMIvn+AXrhKPX
gWUTpEA3LMl7OYSb9apuNGUFjmXk/Sj2ditrxPq6Estc/yXIdE8aTP4l4sjTyE2J
4YfSeyttwLVbyXO/ukxJ0kuz0KmihDMCCL/Jm5LLX2rBrK3YRpcC+2ySfpUxf0mC
XD0quyV35WNo6lkarXI4XDpR8pOwPQhHPlPNEmlO+lxzqR0kioKRAshSz+wyCTw8
OVO6VQKnqoRSrV98L2oIp3Phnz0TWFlwK3osEd+yF4bCx0jOe8plhATbVOogchM+
TB4/nkxgAe1nLj8sgwgSQC2PV7sCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTJTZ43
rhaoGYL314W3XYWOoDZ23TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDdiZDg1YmYtMmFmMi00NmEwLTkxZDYtZjk0NWU3MDYzMjMxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H/A
gDANBgkqhkiG9w0BAQsFAAOCAQEAiGLTivUgX/sLmWV5iej1mHDeIFr6KbJSXtPk
vcXMbbQXhlsSfAdSjYH+BE1rETxfRAU+RwgszYoz2ImnrOG5PfvH+Z3hdXDQqVin
EUn3HfE6/jD/Zq94/szuiSgNHfLh1qkdY7spvxMW0u+/boYJx0LCjTq0C98uFsJT
DA5ylZsREEcXMg2C01RXAXlVRozLol/SaDqRFrdmjeab4SkABVnd1BgBiemmgqUF
Duqw9EK2QfJNtCaO49tMT3lUiwvTN5pAGofboHaIeZcqpTol64H0hX4ZlY2FxGnx
esWPf6BF8bPEo51tCySwnN0mrSfzhzXQLclyzu9OW+e6LxxWYw==
-----END CERTIFICATE-----