Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa
File:                     fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa (raw, json)
Hash identifier:          F+/4cB0dvOzaTGaLzH7oDu/RGAE89MMwKjGM1z5sFe8=
Subject key identifier:   DB:36:73:45:4B:AF:0B:6B:07:96:48:96:2F:52:51:0F:7C:8B:77:48
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6D95C10194D7253D8D7A36047B6A6AC59DAF8C48
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa
Signing time:             Tue 20 May 2025 20:01:07 +0000
ROA not before:           Tue 20 May 2025 20:01:07 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:95:c1:01:94:d7:25:3d:8d:7a:36:04:7b:6a:6a:c5:9d:af:8c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 20 20:01:07 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=2918b0215ef528040349b28dbf055bb094e9199bd6420c1fe96ed908d29e8719, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:56:b6:6b:46:51:27:fa:d2:c6:68:42:98:
                    4f:be:11:32:f9:fa:48:ab:9b:8b:1c:60:3f:e8:b8:
                    f8:b4:a1:f4:17:ba:fe:79:ab:0b:32:f6:42:d6:be:
                    86:86:a1:85:57:27:17:fd:0a:98:30:d8:bf:42:75:
                    25:30:01:8f:f8:a8:ce:b7:90:27:56:02:16:eb:8a:
                    ee:59:2f:3c:43:6e:4c:55:1f:d6:6c:cd:60:a8:b6:
                    69:e7:67:9e:cc:d8:ff:13:ab:81:43:34:06:f8:0b:
                    26:a0:86:1f:a9:ed:fd:ed:83:04:82:d0:3b:a7:d9:
                    01:f8:dd:a8:38:0f:2f:80:eb:f0:fd:7c:35:1d:18:
                    67:92:84:a1:ed:61:4f:78:23:ec:e3:8a:ed:1e:f6:
                    8b:b0:3a:23:da:93:fc:6e:de:f0:0b:98:54:82:e7:
                    c8:2f:f5:3b:b8:61:45:e0:50:34:7e:f3:c4:c4:0c:
                    10:cb:3a:25:16:ca:09:41:17:21:69:7a:77:35:5c:
                    a9:c2:ed:b5:87:f8:e2:69:38:54:00:29:96:6e:5c:
                    3b:e2:c9:9c:79:de:ff:c8:d7:e1:0d:c0:99:6c:62:
                    44:65:a9:44:75:e8:b7:8e:c8:90:70:2f:57:47:9e:
                    ff:05:29:5a:6b:14:74:aa:35:e4:18:9f:c2:87:50:
                    63:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:36:73:45:4B:AF:0B:6B:07:96:48:96:2F:52:51:0F:7C:8B:77:48
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b8:f0:22:09:db:d2:5c:64:20:d1:f5:71:c7:1c:41:6e:c6:93:
         0a:a1:3f:b5:b6:f0:ef:cb:7d:c7:25:99:61:e0:18:43:e9:d0:
         4e:50:6a:30:9d:62:c8:61:63:9b:16:c5:fd:f4:5b:39:8b:4b:
         ca:31:dc:70:c4:cc:b3:eb:7e:f9:89:15:f5:52:b9:55:22:4f:
         8d:6f:cd:5b:a2:86:86:ca:6f:0e:e0:c3:4e:79:b1:18:71:54:
         76:53:19:72:1b:e6:27:5f:64:a5:ea:13:36:23:a7:9a:56:f6:
         dc:cc:af:c3:d6:4e:32:82:f0:ab:84:bf:47:65:66:e6:81:e4:
         5d:c3:9e:19:37:dc:77:9b:8f:cd:a9:35:21:e8:24:08:c9:b6:
         96:37:be:15:d5:3f:58:3a:f0:e4:8c:d7:74:31:f4:2b:b7:a7:
         c8:81:30:a2:6c:31:a1:80:7f:72:2d:96:7f:07:da:3d:0e:08:
         75:3d:84:ae:ef:8f:c5:d1:02:92:06:7f:90:ee:f1:6c:c1:12:
         ad:22:8d:f9:68:98:55:c2:50:f6:99:4f:04:d3:9e:ad:d8:cd:
         be:73:96:be:4d:96:0b:71:e3:87:bb:f6:c2:ba:91:30:5e:bb:
         4c:00:04:97:3c:6b:d5:10:11:fe:03:8f:6c:53:69:ff:2c:f5:
         fb:8a:4d:a6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbZXBAZTXJT2NejYEe2pqxZ2vjEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAyMDAxMDdaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDI5MThiMDIxNWVmNTI4MDQwMzQ5YjI4ZGJmMDU1YmIwOTRlOTE5OWJkNjQy
MGMxZmU5NmVkOTA4ZDI5ZTg3MTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK1HVrZrRlEn+tLGaEKYT74RMvn6SKubixxgP+i4+LSh9Be6/nmrCzL2Qta+
hoahhVcnF/0KmDDYv0J1JTABj/iozreQJ1YCFuuK7lkvPENuTFUf1mzNYKi2aedn
nszY/xOrgUM0BvgLJqCGH6nt/e2DBILQO6fZAfjdqDgPL4Dr8P18NR0YZ5KEoe1h
T3gj7OOK7R72i7A6I9qT/G7e8AuYVILnyC/1O7hhReBQNH7zxMQMEMs6JRbKCUEX
IWl6dzVcqcLttYf44mk4VAAplm5cO+LJnHne/8jX4Q3AmWxiRGWpRHXot47IkHAv
V0ee/wUpWmsUdKo15BifwodQY78CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTbNnNF
S68LaweWSJYvUlEPfIt3SDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmNjMmM4NTUtY2E2Mi00YjRjLWExYzYtOGI0MTUyYmM3YTA1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HXA
MA0GCSqGSIb3DQEBCwUAA4IBAQC48CIJ29JcZCDR9XHHHEFuxpMKoT+1tvDvy33H
JZlh4BhD6dBOUGownWLIYWObFsX99Fs5i0vKMdxwxMyz6375iRX1UrlVIk+Nb81b
ooaGym8O4MNOebEYcVR2UxlyG+YnX2Sl6hM2I6eaVvbczK/D1k4ygvCrhL9HZWbm
geRdw54ZN9x3m4/NqTUh6CQIybaWN74V1T9YOvDkjNd0MfQrt6fIgTCibDGhgH9y
LZZ/B9o9Dgh1PYSu74/F0QKSBn+Q7vFswRKtIo35aJhVwlD2mU8E056t2M2+c5a+
TZYLceOHu/bCupEwXrtMAASXPGvVEBH+A49sU2n/LPX7ik2m
-----END CERTIFICATE-----