Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
File:                     fc353215-935f-47d2-9298-767ccc0eae1a.roa (raw, json)
Hash identifier:          7+3KP6D/dkObJEWnvtzUolTltuHC1FmtMrCJEh+UfWI=
Subject key identifier:   E6:BB:DE:A3:A7:EB:45:F4:11:5D:13:C1:C2:7C:B9:F7:94:85:FC:22
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       614B2C36A2169422E50D707AAE88B4162EF16B19
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
Signing time:             Fri 26 Sep 2025 20:39:27 +0000
ROA not before:           Fri 26 Sep 2025 20:39:27 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        85.151.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4b:2c:36:a2:16:94:22:e5:0d:70:7a:ae:88:b4:16:2e:f1:6b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Sep 26 20:39:27 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=113792c07a4f8cebc790c58e6dbe65c0c7197e4e597c66498034583f7b8f75a7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:43:1a:58:4c:d1:5e:d7:24:f9:5d:ea:90:43:
                    43:98:90:83:aa:c0:c3:3f:5c:cf:8d:b3:9d:f4:da:
                    77:00:ab:66:d6:45:2c:c1:af:90:50:3f:c7:60:01:
                    b6:e2:0b:ef:8f:cd:cc:aa:ec:d7:07:d8:14:4b:78:
                    28:3d:b7:82:b8:39:88:0f:36:76:cc:e5:3e:ac:00:
                    cf:f3:b7:a1:7d:61:71:90:93:88:67:19:32:e0:54:
                    35:10:f8:a6:28:53:bd:5e:f0:a4:c4:93:da:69:2e:
                    15:aa:09:ce:f5:c5:bd:a4:fc:d7:03:aa:cf:e3:77:
                    42:56:c2:7f:f6:7d:23:df:5c:d1:ec:d2:d0:34:15:
                    68:51:a4:0a:55:15:b9:6d:3c:71:c7:41:20:a5:bd:
                    e8:8a:4c:45:99:ac:2d:44:12:d6:83:07:45:41:97:
                    8e:50:38:5d:39:58:e9:b9:e8:8a:49:1c:11:63:ca:
                    22:04:e1:1f:7c:8e:b9:53:d4:3b:b2:6d:c6:6b:e0:
                    6c:0a:ca:6d:19:d6:c7:14:b5:c1:25:44:82:6a:e9:
                    e6:ef:04:aa:72:6f:b1:33:4b:65:c6:3a:d8:97:2f:
                    ae:02:00:d2:92:7c:0d:90:47:62:c9:75:de:6c:79:
                    17:67:63:56:c5:47:47:ac:bf:8d:fe:b7:52:35:5a:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BB:DE:A3:A7:EB:45:F4:11:5D:13:C1:C2:7C:B9:F7:94:85:FC:22
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.151.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         83:ef:8d:04:58:43:e4:10:07:4d:70:fc:49:cc:63:3f:54:b0:
         d0:db:59:ab:c8:e8:cd:83:14:df:b8:19:58:1d:75:28:63:ed:
         a5:94:a8:48:68:5d:66:d4:b1:01:87:70:a2:ad:ee:b2:15:12:
         f7:fb:ee:4d:32:ce:ee:b4:08:b4:a4:cf:e1:62:a8:6e:89:b2:
         e4:5d:cf:0d:45:61:17:14:ae:f9:d9:ac:d5:b3:15:9a:9e:f2:
         56:c2:36:eb:88:7b:7b:a3:58:24:28:32:81:d8:a6:79:b4:25:
         18:30:a8:5f:c9:86:33:a5:e0:33:1b:e4:0f:1d:e9:c1:3c:c1:
         99:75:ce:e7:17:1f:ae:65:f9:62:8f:0a:8d:19:f3:c4:03:64:
         f6:2c:2e:89:fb:68:a1:6c:be:55:ed:90:4e:38:4f:67:47:51:
         53:51:22:09:eb:7a:13:c5:52:0e:c2:cd:0e:2a:65:1d:c4:e7:
         1c:78:e0:c4:7c:1c:b4:0f:6d:0a:0a:69:eb:f2:ff:2b:97:2a:
         c6:05:ff:77:bc:f1:06:70:21:b7:1e:24:d9:c3:b9:1b:64:67:
         a8:b6:47:bf:50:dd:1c:e8:26:cd:85:e7:a8:51:8b:6b:f4:7d:
         a0:0a:34:62:60:29:b8:b4:c3:b5:aa:52:c2:0a:b8:bd:1f:a8:
         ac:2c:e2:9e
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUYUssNqIWlCLlDXB6roi0Fi7xaxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA5MjYyMDM5MjdaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDExMzc5MmMwN2E0ZjhjZWJjNzkwYzU4ZTZkYmU2NWMwYzcxOTdlNGU1OTdj
NjY0OTgwMzQ1ODNmN2I4Zjc1YTcxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMtDGlhM0V7XJPld6pBDQ5iQg6rAwz9cz42znfTadwCrZtZFLMGvkFA/x2AB
tuIL74/NzKrs1wfYFEt4KD23grg5iA82dszlPqwAz/O3oX1hcZCTiGcZMuBUNRD4
pihTvV7wpMST2mkuFaoJzvXFvaT81wOqz+N3QlbCf/Z9I99c0ezS0DQVaFGkClUV
uW08ccdBIKW96IpMRZmsLUQS1oMHRUGXjlA4XTlY6bnoikkcEWPKIgThH3yOuVPU
O7JtxmvgbArKbRnWxxS1wSVEgmrp5u8EqnJvsTNLZcY62JcvrgIA0pJ8DZBHYsl1
3mx5F2djVsVHR6y/jf63UjVap88CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTmu96j
p+tF9BFdE8HCfLn3lIX8IjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZmMzNTMyMTUtOTM1Zi00N2QyLTkyOTgtNzY3Y2NjMGVhZTFhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAFWXMA0G
CSqGSIb3DQEBCwUAA4IBAQCD740EWEPkEAdNcPxJzGM/VLDQ21mryOjNgxTfuBlY
HXUoY+2llKhIaF1m1LEBh3Cire6yFRL3++5NMs7utAi0pM/hYqhuibLkXc8NRWEX
FK752azVsxWanvJWwjbriHt7o1gkKDKB2KZ5tCUYMKhfyYYzpeAzG+QPHenBPMGZ
dc7nFx+uZflijwqNGfPEA2T2LC6J+2ihbL5V7ZBOOE9nR1FTUSIJ63oTxVIOws0O
KmUdxOcceODEfBy0D20KCmnr8v8rlyrGBf93vPEGcCG3HiTZw7kbZGeotke/UN0c
6CbNheeoUYtr9H2gCjRiYCm4tMO1qlLCCri9H6isLOKe
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:54:13 2025 by rpki-client