Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea271f77-763d-42f8-a315-60081847d059.roa
File:                     ea271f77-763d-42f8-a315-60081847d059.roa (raw, json)
Hash identifier:          pAnwxM17NU5D2EKWR2Qbv7l8yzXiIifkx/RaADb82Qg=
Subject key identifier:   18:14:60:23:35:9F:C6:75:28:A6:5A:7B:C7:02:AC:F1:43:05:3B:B0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       43DEE1D9BB1A017A18108F6B9E190C5E626E5455
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea271f77-763d-42f8-a315-60081847d059.roa
Signing time:             Tue 20 May 2025 18:21:25 +0000
ROA not before:           Tue 20 May 2025 18:21:25 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:e040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:de:e1:d9:bb:1a:01:7a:18:10:8f:6b:9e:19:0c:5e:62:6e:54:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 20 18:21:25 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=d13490a0d0cb23096f6e663c12cf2bbc9bea8b05170d8913e57325a5862d03d8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:63:79:52:4c:34:9e:ff:78:5b:b5:a6:47:e7:
                    de:e6:34:aa:fe:a1:e7:d5:72:4b:ad:83:29:b7:0c:
                    27:31:48:2a:ad:6f:b7:7b:bf:03:df:e0:3c:c3:6e:
                    14:fb:6e:6e:0f:a2:5f:1c:a8:8f:45:f4:32:9c:68:
                    10:cb:59:cc:3a:2e:27:9c:66:3e:2d:b3:62:42:da:
                    39:fc:66:46:c5:18:74:80:a3:a5:26:7a:5f:11:4d:
                    18:33:2f:04:6d:3b:3a:2e:c3:34:26:41:1c:96:9b:
                    1f:48:30:f7:2e:1f:80:9c:d6:36:7c:3a:97:7e:ce:
                    52:fa:f4:3d:aa:c9:8d:a5:f2:3a:b6:40:a4:df:78:
                    42:36:8e:f4:c3:b4:10:19:f8:69:dd:e3:1e:07:fb:
                    07:8e:38:90:02:89:fc:59:52:4e:2b:b4:af:80:03:
                    eb:13:89:b9:17:2a:3a:8c:27:67:97:0e:5e:0b:ba:
                    87:e3:17:2e:b7:04:33:fe:0f:60:b0:ba:c1:8d:fc:
                    3c:a3:91:06:a7:86:b3:c1:46:45:e6:70:49:11:d6:
                    bb:0c:e2:5f:98:b6:39:2f:b0:1c:ab:b6:8d:f4:d5:
                    f7:34:ef:82:25:3a:32:d5:2c:da:62:91:13:51:8e:
                    1b:8f:a6:8e:bb:93:64:8f:3a:57:6a:c7:be:59:22:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:14:60:23:35:9F:C6:75:28:A6:5A:7B:C7:02:AC:F1:43:05:3B:B0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea271f77-763d-42f8-a315-60081847d059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:e040::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:f2:1f:30:96:1d:22:51:90:35:36:be:7f:1f:3f:99:ec:
         9d:a3:ec:6a:9b:06:d9:f5:78:47:5c:55:27:e9:69:87:2d:3b:
         71:e8:1f:05:a0:78:b0:0c:54:a4:74:4f:c7:7a:43:78:dd:3d:
         a1:7f:93:6f:91:01:4c:c3:74:6f:2d:49:51:4a:8a:f2:0a:6a:
         c6:eb:d1:b9:14:02:de:94:4e:72:d8:fd:39:a0:de:93:2a:f8:
         05:61:85:8c:24:d2:6b:ed:5e:64:cc:7b:5c:da:85:55:cd:58:
         92:85:f9:2d:9f:8e:a3:c9:59:1c:11:d6:6a:ff:05:9a:f4:fa:
         d1:51:53:58:85:f0:1c:74:94:1f:18:46:88:82:79:7d:43:22:
         0d:2f:a6:dc:df:2a:80:b9:b7:b7:e1:57:55:b6:78:26:70:b5:
         88:52:d3:87:51:d2:44:fb:77:f3:cf:a9:7a:d8:fe:0b:83:26:
         e5:c4:cb:7d:27:f2:f9:50:f6:0d:08:e7:a2:25:84:51:1b:4c:
         3b:28:fa:91:75:92:2c:44:cc:1a:9d:82:bf:fc:f9:0b:b1:2e:
         ac:8f:ed:bf:ea:83:62:93:1b:97:fe:7d:6d:37:31:9f:dd:1a:
         a2:d6:75:09:e6:e5:6e:01:1e:23:8d:ab:55:1a:29:24:0d:56:
         f1:ab:78:d5
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUQ97h2bsaAXoYEI9rnhkMXmJuVFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxODIxMjVaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGQxMzQ5MGEwZDBjYjIzMDk2ZjZlNjYzYzEyY2YyYmJjOWJlYThiMDUxNzBk
ODkxM2U1NzMyNWE1ODYyZDAzZDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPFjeVJMNJ7/eFu1pkfn3uY0qv6h59VyS62DKbcMJzFIKq1vt3u/A9/gPMNu
FPtubg+iXxyoj0X0MpxoEMtZzDouJ5xmPi2zYkLaOfxmRsUYdICjpSZ6XxFNGDMv
BG07Oi7DNCZBHJabH0gw9y4fgJzWNnw6l37OUvr0ParJjaXyOrZApN94QjaO9MO0
EBn4ad3jHgf7B444kAKJ/FlSTiu0r4AD6xOJuRcqOownZ5cOXgu6h+MXLrcEM/4P
YLC6wY38PKORBqeGs8FGReZwSRHWuwziX5i2OS+wHKu2jfTV9zTvgiU6MtUs2mKR
E1GOG4+mjruTZI86V2rHvlki+LsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQYFGAj
NZ/GdSimWnvHAqzxQwU7sDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWEyNzFmNzctNzYzZC00MmY4LWEzMTUtNjAwODE4NDdkMDU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DHg
QDANBgkqhkiG9w0BAQsFAAOCAQEAGcTyHzCWHSJRkDU2vn8fP5nsnaPsapsG2fV4
R1xVJ+lphy07cegfBaB4sAxUpHRPx3pDeN09oX+Tb5EBTMN0by1JUUqK8gpqxuvR
uRQC3pROctj9OaDekyr4BWGFjCTSa+1eZMx7XNqFVc1YkoX5LZ+Oo8lZHBHWav8F
mvT60VFTWIXwHHSUHxhGiIJ5fUMiDS+m3N8qgLm3t+FXVbZ4JnC1iFLTh1HSRPt3
88+petj+C4Mm5cTLfSfy+VD2DQjnoiWEURtMOyj6kXWSLETMGp2Cv/z5C7EurI/t
v+qDYpMbl/59bTcxn90aotZ1CeblbgEeI42rVRopJA1W8at41Q==
-----END CERTIFICATE-----