Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/02637666-ed34-43aa-b7a8-bb29f34fad13.roa
File:                     02637666-ed34-43aa-b7a8-bb29f34fad13.roa (raw, json)
Hash identifier:          C4Nb1a/2E+hwOc+NsXgQ4MpmejJzKJ/Udo8IYb9Ii7M=
Subject key identifier:   5F:E3:01:49:60:F7:06:FE:F2:7C:68:DC:42:1A:28:C3:ED:42:69:A9
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       406A2DBB12C5BAD9E190DF8F806AF43559639373
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/02637666-ed34-43aa-b7a8-bb29f34fad13.roa
Signing time:             Sat 18 Oct 2025 04:30:25 +0000
ROA not before:           Sat 18 Oct 2025 04:30:25 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6a:2d:bb:12:c5:ba:d9:e1:90:df:8f:80:6a:f4:35:59:63:93:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 18 04:30:25 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=ffbc81d1a0ba3686c97e452597bbe6b5b36aa25e1cae24a865756686e0b602cc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:a0:8d:9f:6c:cc:43:9f:f0:e1:7f:17:5d:
                    6c:12:ea:07:95:05:ba:e3:ed:62:5b:8b:32:8f:6b:
                    6f:d7:32:ee:b1:a4:2b:51:8a:85:7c:a4:c9:b0:8d:
                    28:6d:97:a2:ce:73:f8:8e:c2:a7:36:7a:0c:ac:1f:
                    4c:7b:ac:46:6b:37:c8:b6:9e:4a:6d:e0:33:10:12:
                    0b:6c:97:43:2f:e8:7b:ba:7f:3e:5a:67:ed:ce:99:
                    fa:dd:91:96:0f:7c:29:c1:bf:97:bd:f0:d5:f5:ee:
                    51:c7:68:03:05:53:38:13:43:cd:a8:9b:ea:4f:27:
                    7e:d9:27:61:4a:21:b6:66:83:eb:67:71:7f:fb:8b:
                    3f:19:94:4c:a9:a0:82:88:e6:be:a3:6a:42:18:cf:
                    8e:b3:9d:23:57:dc:26:f6:02:1d:1b:70:7d:99:45:
                    2d:84:95:78:f1:bb:4b:2c:72:d7:bc:a0:5a:4e:ad:
                    7d:d0:f4:bf:d0:19:e9:46:5d:5c:53:a3:ad:fa:ea:
                    32:87:af:7f:e5:f1:2d:36:42:ba:a1:a3:fc:bd:f8:
                    19:8b:7a:12:54:7e:d3:45:83:9b:55:66:08:2a:1c:
                    1f:be:42:b0:41:7d:d6:98:69:1f:66:ad:87:4a:20:
                    95:91:ba:f3:ff:40:dd:30:2c:00:1f:95:c1:49:05:
                    6f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E3:01:49:60:F7:06:FE:F2:7C:68:DC:42:1A:28:C3:ED:42:69:A9
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/02637666-ed34-43aa-b7a8-bb29f34fad13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:24:3c:fb:b5:e9:58:ac:76:cf:63:14:fa:f9:00:8b:da:1f:
         d9:53:c7:fd:43:66:64:1e:63:81:97:6f:c1:d1:58:6d:32:bc:
         0a:23:47:5f:79:6b:23:a4:28:0c:e0:9a:ef:34:7d:12:a1:42:
         20:73:a4:a7:8c:f1:0d:0b:46:e9:20:fc:28:e9:f7:e4:7a:4e:
         bc:47:3d:dc:60:20:65:7f:60:5a:0c:36:cb:5b:04:04:04:1d:
         7f:07:44:b2:75:27:7a:1b:7c:e3:a1:32:e1:d6:3b:75:6b:7b:
         49:3f:13:b8:90:0c:be:14:8b:0f:74:48:74:3c:ad:55:92:c4:
         b4:d1:12:d6:aa:e7:be:4b:ed:10:49:bc:02:71:3d:22:d2:86:
         3e:e7:ca:61:8a:d4:9f:06:ce:97:e0:be:2e:3a:c3:6c:5e:53:
         20:ad:ea:aa:06:f8:e4:77:22:85:d1:d6:a7:7d:3a:b9:c1:1d:
         05:3b:f8:1b:07:4c:5b:89:05:90:a5:9b:ea:f3:1d:6e:76:cb:
         6a:6b:b1:54:e3:9b:11:76:d2:32:c2:a0:c0:d6:9f:bd:cb:f3:
         e7:e7:76:ee:87:b6:41:65:ce:e0:3f:36:e1:3d:25:89:c9:cf:
         e1:1d:9c:33:be:64:e3:15:49:7e:5d:47:7a:19:77:0a:bf:a1:
         16:4a:c7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----