Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa
File:                     25b2b0c2-5313-4108-9379-3a551ea46c87.roa (raw, json)
Hash identifier:          P7AIbm9Vlvf8RibfGgbNKCTeIQ0qwVIAUr3q5vI08n0=
Subject key identifier:   3C:95:4F:EC:5F:64:1B:A5:C7:6E:97:02:8E:C5:71:49:0E:38:AE:95
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       049E7563C56D3DD6DDD92222A1430445C0FECDE3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa
Signing time:             Fri 10 Oct 2025 17:04:20 +0000
ROA not before:           Fri 10 Oct 2025 17:04:20 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d059:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9e:75:63:c5:6d:3d:d6:dd:d9:22:22:a1:43:04:45:c0:fe:cd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 10 17:04:20 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=8c62a22e8bde8626fddd18899f3333e458a52444db8b058a07c29c64bea385c3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:48:76:a2:af:88:95:88:c0:b5:46:31:ee:53:
                    74:b3:1e:ea:98:e6:c4:be:f4:ae:00:bf:94:e6:4b:
                    bd:3a:a8:d2:9b:c7:38:3c:7b:9c:49:18:6c:75:cc:
                    ed:80:84:c4:4b:7f:1b:8f:45:23:d9:b8:76:20:82:
                    a2:2d:e1:ab:f9:54:e1:88:bc:ff:d8:62:6a:80:58:
                    82:cb:61:17:d1:40:03:de:df:81:3c:da:06:51:35:
                    a0:18:fc:b3:c8:8c:55:fa:f8:54:f6:8d:9f:ed:47:
                    60:0b:8e:0e:b7:6c:90:f6:1b:50:d4:c0:59:96:32:
                    ff:45:e2:4a:fe:0a:08:95:21:0e:4f:c3:02:84:d5:
                    a9:e1:1d:fa:05:c5:56:4d:5f:54:12:c5:43:8d:37:
                    f9:69:bd:44:d5:a8:24:6f:64:1d:f6:4f:3a:e7:ca:
                    5f:29:47:ec:f7:b7:30:51:a2:82:26:95:7a:b4:13:
                    c8:a4:a8:7b:74:6c:82:d0:21:97:0b:0e:d2:f2:1e:
                    cc:52:82:97:80:4b:9d:61:b6:05:10:fa:8d:89:2a:
                    2a:a7:6a:1e:1f:44:77:1f:c6:91:78:6b:70:b3:6c:
                    df:7f:ad:d3:71:a0:71:66:23:47:6d:31:ed:84:b1:
                    88:6e:8e:b8:ab:8c:86:63:b3:f6:25:52:7b:b6:af:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:95:4F:EC:5F:64:1B:A5:C7:6E:97:02:8E:C5:71:49:0E:38:AE:95
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:ed:e9:28:95:98:a8:da:28:a3:8a:7d:c2:81:1d:4e:f6:b1:
         c6:7b:97:68:a5:09:31:e8:14:33:42:72:a1:f4:ff:4b:6e:26:
         cf:e0:13:94:a4:35:2e:9b:b6:3a:f0:2f:2c:be:5b:80:36:a2:
         fe:ee:2d:cc:37:94:ae:d3:17:7f:5e:ca:6c:37:69:dc:7c:4f:
         78:71:af:26:b2:eb:e9:df:c7:2c:5e:41:af:83:b8:5c:fa:81:
         2c:dd:d9:16:5f:62:ba:32:b0:8f:c1:50:43:25:d7:5f:87:b7:
         76:c9:36:1e:0c:13:99:6f:ee:b9:96:1c:a2:9b:26:5b:5a:30:
         a9:93:58:d0:bc:f0:9a:3d:76:29:28:11:42:b7:a9:c7:02:cf:
         5f:35:5f:ce:a9:64:8b:a9:45:b6:14:14:3e:bd:7e:1c:76:c2:
         0e:a7:56:10:7e:92:65:c6:a1:98:b5:e6:46:93:bf:90:66:95:
         27:71:48:40:bd:a1:fd:4a:46:00:3e:b5:26:02:4f:cd:bc:64:
         2f:97:cc:39:5d:ea:12:91:bf:aa:32:f0:73:0c:48:e0:ac:36:
         a7:7c:6c:59:54:b5:eb:d0:53:60:05:72:1f:f8:0f:7d:fc:50:
         d5:05:38:4d:e0:23:4b:02:93:4d:7c:57:64:02:58:80:a8:bc:
         1c:95:33:4a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUBJ51Y8VtPdbd2SIioUMERcD+zeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMTAxNzA0MjBaFw0yNTExMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDhjNjJhMjJlOGJkZTg2MjZmZGRkMTg4OTlmMzMzM2U0NThhNTI0NDRkYjhi
MDU4YTA3YzI5YzY0YmVhMzg1YzMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJlIdqKviJWIwLVGMe5TdLMe6pjmxL70rgC/lOZLvTqo0pvHODx7nEkYbHXM
7YCExEt/G49FI9m4diCCoi3hq/lU4Yi8/9hiaoBYgsthF9FAA97fgTzaBlE1oBj8
s8iMVfr4VPaNn+1HYAuODrdskPYbUNTAWZYy/0XiSv4KCJUhDk/DAoTVqeEd+gXF
Vk1fVBLFQ403+Wm9RNWoJG9kHfZPOufKXylH7Pe3MFGigiaVerQTyKSoe3RsgtAh
lwsO0vIezFKCl4BLnWG2BRD6jYkqKqdqHh9Edx/GkXhrcLNs33+t03GgcWYjR20x
7YSxiG6OuKuMhmOz9iVSe7avLgcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ8lU/s
X2QbpcdulwKOxXFJDjiulTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjViMmIwYzItNTMxMy00MTA4LTkzNzktM2E1NTFlYTQ2Yzg3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FnA
MA0GCSqGSIb3DQEBCwUAA4IBAQBs7ekolZio2iijin3CgR1O9rHGe5dopQkx6BQz
QnKh9P9LbibP4BOUpDUum7Y68C8svluANqL+7i3MN5Su0xd/XspsN2ncfE94ca8m
suvp38csXkGvg7hc+oEs3dkWX2K6MrCPwVBDJddfh7d2yTYeDBOZb+65lhyimyZb
WjCpk1jQvPCaPXYpKBFCt6nHAs9fNV/OqWSLqUW2FBQ+vX4cdsIOp1YQfpJlxqGY
teZGk7+QZpUncUhAvaH9SkYAPrUmAk/NvGQvl8w5XeoSkb+qMvBzDEjgrDanfGxZ
VLXr0FNgBXIf+A99/FDVBThN4CNLApNNfFdkAliAqLwclTNK
-----END CERTIFICATE-----