Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9709897-68c6-44f9-98f1-1f292cf13bea.roa
File:                     e9709897-68c6-44f9-98f1-1f292cf13bea.roa (raw, json)
Hash identifier:          Z2xgLmnBtHAMn3N8V4czoSSzFbsN3/02PwUUUCr7IXI=
Subject key identifier:   E1:92:43:38:4E:F6:5B:CB:09:D1:F7:85:F4:A7:0D:7C:42:CA:69:F4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6AA63B3A7D421364F12C6C3115950D1987682313
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9709897-68c6-44f9-98f1-1f292cf13bea.roa
Signing time:             Fri 25 Jul 2025 16:50:14 +0000
ROA not before:           Fri 25 Jul 2025 16:50:14 +0000
ROA not after:            Fri 29 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d074:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a6:3b:3a:7d:42:13:64:f1:2c:6c:31:15:95:0d:19:87:68:23:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 25 16:50:14 2025 GMT
            Not After : Aug 29 23:59:59 2025 GMT
        Subject: serialNumber=0b72713cc4d88a830da7a9e298869f4e8efb3f093b1a0fd05c7e83ce9cbe1833, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:e3:3b:87:a5:bb:88:39:ac:49:90:6e:84:
                    59:03:67:23:c5:1c:35:45:08:31:9e:30:02:b0:9d:
                    09:1a:3a:c0:71:fb:0a:c4:dc:67:33:c7:5d:26:4d:
                    7b:34:c2:3b:0f:9b:ac:48:ff:9d:2e:f0:e6:18:27:
                    eb:b4:f3:32:f7:96:60:20:00:3c:06:f5:07:f0:79:
                    ab:17:ba:02:29:40:a7:96:90:e3:04:09:20:10:5e:
                    4c:d2:17:8e:27:40:0e:66:f2:9a:1e:d7:53:48:31:
                    cc:d8:f9:4f:d1:e1:ec:1d:70:8d:3e:83:b0:46:3e:
                    98:7f:bb:1e:4d:0a:1a:97:e9:d0:2a:bb:2b:5e:da:
                    38:2b:74:42:63:5d:42:c0:ce:97:cf:44:86:9b:bc:
                    da:7a:b2:5f:b1:f5:b3:90:c7:d3:d7:53:55:91:c9:
                    57:18:f0:87:56:86:b7:f3:33:fc:8c:b5:2c:5e:b7:
                    9b:41:71:b1:e6:e0:16:43:18:b2:9d:2b:99:66:4d:
                    1f:db:4d:b4:d6:67:46:a4:ee:21:4b:25:f3:e6:f3:
                    a6:af:f2:df:f2:73:f2:7f:12:4a:c5:d4:a6:c6:e9:
                    2d:bd:26:10:6c:d9:c9:c4:d8:61:11:ff:29:1d:75:
                    d2:bf:db:ec:0b:af:e0:24:54:e6:cd:c6:e0:2f:b2:
                    2a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:92:43:38:4E:F6:5B:CB:09:D1:F7:85:F4:A7:0D:7C:42:CA:69:F4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9709897-68c6-44f9-98f1-1f292cf13bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:80:57:18:0d:b6:c3:84:0e:fa:22:9f:27:a5:be:34:e4:25:
         59:f0:ec:67:3b:25:36:9b:e5:94:81:ee:3d:10:e7:1d:55:93:
         cf:1c:3f:d7:a7:32:08:30:33:3e:52:30:a5:34:ed:6d:7d:d5:
         0f:77:92:8f:d4:3c:9e:4b:80:1c:ea:f9:01:d6:2c:4f:6b:1a:
         99:c2:7c:4b:04:3f:67:fd:e4:13:c9:b7:62:3c:c6:92:c1:3a:
         c3:c1:84:33:12:2d:00:20:ac:c3:8d:76:49:57:e6:d7:57:8b:
         06:51:ea:94:e4:b7:3a:1f:8a:cd:e4:b0:51:8f:97:53:c4:9c:
         78:a1:b7:df:de:49:b8:88:c2:ce:8a:1b:b8:cd:11:c2:f0:22:
         b5:69:73:b8:95:a9:a8:bf:14:df:f9:ab:fa:2a:cb:e1:0e:4c:
         20:1d:31:5e:59:c7:b8:b9:af:9a:23:1c:df:86:64:ca:02:29:
         f0:80:9d:67:0e:eb:33:98:bc:89:1c:6a:cb:dd:ef:3f:8d:20:
         c0:13:a2:66:60:a7:15:6e:49:b8:35:52:60:cf:ae:da:2f:81:
         0e:b5:6c:d2:05:f4:fb:c1:8b:01:7f:f3:8d:63:3a:3c:43:a4:
         8a:cd:a8:13:b9:8a:5c:70:35:36:ca:8f:7f:8f:7b:45:e6:fa:
         7d:c8:74:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----