Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2678e5d7-5995-4791-9318-f087e83654a9.roa
File:                     2678e5d7-5995-4791-9318-f087e83654a9.roa (raw, json)
Hash identifier:          9Sj+SQVv89qr9Zp+VHXMHle3+/VBCT9Nub2x4GHUnAM=
Subject key identifier:   87:4E:82:BF:EE:37:C6:2F:8C:06:45:46:1D:B0:6A:8E:20:44:C7:4D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0DB3B37DBBC5D6C28BD20EC68042D7F1E4E11545
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2678e5d7-5995-4791-9318-f087e83654a9.roa
Signing time:             Sat 18 Oct 2025 04:30:24 +0000
ROA not before:           Sat 18 Oct 2025 04:30:24 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d076:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b3:b3:7d:bb:c5:d6:c2:8b:d2:0e:c6:80:42:d7:f1:e4:e1:15:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 18 04:30:24 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=73ba22485ee6d3e8ee04edb574940d8635c5b733e10279efb4937b289b490982, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:46:3f:28:65:04:41:3f:05:c2:ed:88:72:
                    af:c5:bf:83:62:f5:8a:6b:56:25:34:73:d5:2a:c9:
                    84:d0:b7:e6:74:af:bc:1f:aa:03:92:81:be:59:3d:
                    80:bc:10:4b:8a:62:08:84:56:43:c9:35:3c:61:3e:
                    24:60:45:ca:e6:ec:7f:fd:ee:e0:25:a5:8c:b8:b8:
                    cf:2b:b2:10:35:f3:f6:5c:01:5f:61:27:06:48:40:
                    4f:35:d6:61:9f:b9:cc:e7:4a:fb:85:16:0b:97:c2:
                    e6:3d:4c:b4:f8:72:1e:e6:ec:94:3d:cd:d3:9a:ae:
                    01:66:dc:83:74:9a:4d:cc:36:d2:0e:be:39:10:69:
                    97:a4:fa:55:f3:d6:26:2c:de:87:3f:02:4d:76:ef:
                    a3:00:ee:3d:7e:23:0b:8a:d1:1d:43:d5:66:bd:4b:
                    92:55:1c:4f:0a:7d:24:46:38:eb:65:c2:08:e3:1d:
                    a4:f4:e4:aa:61:b6:f5:73:10:9b:4f:4a:9a:6c:99:
                    54:c4:ba:8e:e4:87:38:4f:66:18:c8:a7:b7:bb:52:
                    37:d2:f0:9e:e2:73:a8:72:32:bd:d0:36:fc:b7:72:
                    15:bf:8d:30:4e:5d:76:9b:61:c8:a2:c8:7c:2a:b5:
                    cb:17:2e:86:aa:bb:0e:28:5e:f9:17:10:5e:31:cf:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4E:82:BF:EE:37:C6:2F:8C:06:45:46:1D:B0:6A:8E:20:44:C7:4D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2678e5d7-5995-4791-9318-f087e83654a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d076:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:97:78:88:be:75:39:b2:fa:11:69:74:1c:b6:e2:65:ca:0f:
         94:9f:10:43:4f:30:69:80:39:20:bf:88:4c:77:cc:17:54:72:
         35:7a:c6:c1:d6:30:d7:0b:aa:9b:1f:ca:4b:b9:b1:f8:6d:08:
         b1:a2:40:66:53:c3:d4:0d:13:5c:26:df:d5:28:0d:c3:f2:2f:
         59:c0:2b:fe:2e:31:ef:d2:d1:3d:e5:ea:ef:69:02:3c:d7:28:
         ba:8a:d6:d3:e6:11:61:71:48:23:e7:eb:2d:46:cd:b2:3e:0f:
         cf:85:e7:22:66:01:04:cb:95:c0:63:2d:80:59:5a:88:97:f0:
         07:dd:1d:bf:eb:60:02:99:25:cb:44:e9:97:16:14:87:8d:a1:
         a7:9d:66:da:ea:0f:71:a9:cb:89:ba:a2:67:8e:c7:1e:a8:db:
         3c:fc:f4:ff:12:88:ea:d2:a9:9c:39:4a:32:eb:f4:4b:f8:06:
         02:ad:95:70:30:68:b7:21:27:2d:1d:75:e0:b0:14:c2:a6:44:
         50:e0:38:09:60:20:72:78:fb:22:b8:85:ca:76:88:aa:2c:69:
         f6:49:d8:b9:ec:fe:fc:47:be:05:aa:d6:ec:3c:26:20:1b:86:
         99:07:08:98:15:29:b7:db:c1:bd:90:f8:fd:9d:a8:68:e6:aa:
         6e:8a:29:35
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUDbOzfbvF1sKL0g7GgELX8eThFUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMTgwNDMwMjRaFw0yNTExMjIyMzU5NTlaMHoxSTBHBgNV
BAUTQDczYmEyMjQ4NWVlNmQzZThlZTA0ZWRiNTc0OTQwZDg2MzVjNWI3MzNlMTAy
NzllZmI0OTM3YjI4OWI0OTA5ODIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKQIRj8oZQRBPwXC7Yhyr8W/g2L1imtWJTRz1SrJhNC35nSvvB+qA5KBvlk9
gLwQS4piCIRWQ8k1PGE+JGBFyubsf/3u4CWljLi4zyuyEDXz9lwBX2EnBkhATzXW
YZ+5zOdK+4UWC5fC5j1MtPhyHubslD3N05quAWbcg3SaTcw20g6+ORBpl6T6VfPW
Jizehz8CTXbvowDuPX4jC4rRHUPVZr1LklUcTwp9JEY462XCCOMdpPTkqmG29XMQ
m09KmmyZVMS6juSHOE9mGMint7tSN9LwnuJzqHIyvdA2/LdyFb+NME5ddpthyKLI
fCq1yxcuhqq7Dihe+RcQXjHPkykCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSHToK/
7jfGL4wGRUYdsGqOIETHTTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjY3OGU1ZDctNTk5NS00NzkxLTkzMTgtZjA4N2U4MzY1NGE5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Hbg
ADANBgkqhkiG9w0BAQsFAAOCAQEAlpd4iL51ObL6EWl0HLbiZcoPlJ8QQ08waYA5
IL+ITHfMF1RyNXrGwdYw1wuqmx/KS7mx+G0IsaJAZlPD1A0TXCbf1SgNw/IvWcAr
/i4x79LRPeXq72kCPNcouorW0+YRYXFII+frLUbNsj4Pz4XnImYBBMuVwGMtgFla
iJfwB90dv+tgApkly0TplxYUh42hp51m2uoPcanLibqiZ47HHqjbPPz0/xKI6tKp
nDlKMuv0S/gGAq2VcDBotyEnLR114LAUwqZEUOA4CWAgcnj7IriFynaIqixp9knY
uez+/Ee+BarW7DwmIBuGmQcImBUpt9vBvZD4/Z2oaOaqboopNQ==
-----END CERTIFICATE-----