Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
File:                     44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa (raw, json)
Hash identifier:          jwd9PnfZ2oV4iOLG+FULbqBJIuIsLExFYv9EqGf+k6A=
Subject key identifier:   88:B2:79:09:32:EC:50:7E:3E:67:8D:77:51:D9:D1:E7:D8:9F:B5:74
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       53BF6B2A4167E3F72C2CE4115BF2E7143054B3AE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
Signing time:             Fri 26 Sep 2025 18:39:45 +0000
ROA not before:           Fri 26 Sep 2025 18:39:45 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:5040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bf:6b:2a:41:67:e3:f7:2c:2c:e4:11:5b:f2:e7:14:30:54:b3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 18:39:45 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=96aaaf051e991f6e91bf179483bb11279d4c1666c06696b8b9fc9c5cf0ee15e1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:fa:dc:1c:d8:82:82:e2:c6:f3:a2:6d:f2:
                    8e:12:41:23:75:48:e8:e1:5c:67:82:18:82:f9:4d:
                    3b:b5:4c:b1:46:70:ff:8b:95:e3:37:62:20:24:c8:
                    83:44:4e:dd:f5:01:97:d7:94:36:35:e0:ba:b6:dc:
                    b0:aa:1d:f1:ba:b2:ff:61:83:d4:0b:0b:5d:68:39:
                    5e:c5:fa:ac:40:7b:dc:9a:c7:a5:7f:1d:f0:9f:0f:
                    0e:91:ba:1f:b9:cc:c0:cd:89:7e:c6:8d:6f:d1:28:
                    9e:f6:f1:e1:ac:6d:27:57:7d:41:55:c6:ba:de:4c:
                    fd:22:20:8f:9c:b8:d1:a6:ea:cb:60:49:0c:79:53:
                    b5:47:f4:cf:5d:82:c3:13:f8:f6:98:3c:75:26:4c:
                    2e:55:7e:05:62:03:be:7f:52:ce:61:49:1e:71:16:
                    c1:76:f5:0b:84:63:8c:20:1d:8d:e4:8d:af:38:d4:
                    a8:9f:aa:77:5b:ad:02:68:d4:5f:72:be:cb:96:1f:
                    25:9c:12:2b:e9:95:8f:a6:1d:81:b6:2f:c7:f9:00:
                    95:f7:9a:c7:e3:73:80:95:7a:95:f8:21:24:15:ff:
                    4e:4c:b0:47:bf:8c:93:53:fe:c4:b7:83:83:6d:48:
                    32:3f:5c:23:20:40:2a:3b:13:d1:86:ad:5a:4d:d8:
                    38:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B2:79:09:32:EC:50:7E:3E:67:8D:77:51:D9:D1:E7:D8:9F:B5:74
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:fd:de:70:b3:a7:46:21:d3:58:77:d8:24:4e:d3:c2:32:3d:
         6c:2b:51:3d:6e:14:f3:ff:4c:f0:d6:14:39:3d:51:4b:8c:cd:
         2c:bb:c7:b6:ed:92:5f:21:9d:e6:7f:53:00:3c:20:54:ec:12:
         98:e0:74:c6:3a:b4:6c:90:5b:8e:7b:2c:01:fd:3b:0b:b9:cb:
         ed:2a:a4:26:51:03:87:63:32:fa:2d:11:88:30:2f:36:64:c7:
         88:05:47:15:02:3c:dc:a7:fb:35:77:87:36:6b:43:f4:0c:48:
         51:b8:9d:a0:be:6f:71:45:69:2a:0a:ce:98:1b:2c:cb:9f:67:
         ab:e1:ab:30:15:f2:14:68:01:77:4b:17:05:8e:7d:c5:53:a1:
         1b:1d:c8:35:a6:eb:11:10:0e:59:14:4f:86:2b:97:e4:0c:33:
         ab:ca:3e:39:eb:15:e0:d8:43:bd:02:50:be:e6:ce:21:43:df:
         8e:f1:ec:fd:ae:c0:1f:84:78:7c:66:0b:c7:9b:87:ae:8b:df:
         35:a9:7a:dd:82:7f:8a:84:d2:2a:f0:00:71:02:9c:fe:91:49:
         69:5b:9a:fc:21:e7:8b:52:c5:34:c5:4c:ab:27:29:89:ea:55:
         99:7a:20:eb:4e:91:e5:4c:83:8f:51:4e:85:17:a7:16:2b:3f:
         ba:60:a6:0d
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUU79rKkFn4/csLOQRW/LnFDBUs64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MjYxODM5NDVaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDk2YWFhZjA1MWU5OTFmNmU5MWJmMTc5NDgzYmIxMTI3OWQ0YzE2NjZjMDY2
OTZiOGI5ZmM5YzVjZjBlZTE1ZTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK1A+twc2IKC4sbzom3yjhJBI3VI6OFcZ4IYgvlNO7VMsUZw/4uV4zdiICTI
g0RO3fUBl9eUNjXgurbcsKod8bqy/2GD1AsLXWg5XsX6rEB73JrHpX8d8J8PDpG6
H7nMwM2JfsaNb9Eonvbx4axtJ1d9QVXGut5M/SIgj5y40abqy2BJDHlTtUf0z12C
wxP49pg8dSZMLlV+BWIDvn9SzmFJHnEWwXb1C4RjjCAdjeSNrzjUqJ+qd1utAmjU
X3K+y5YfJZwSK+mVj6YdgbYvx/kAlfeax+NzgJV6lfghJBX/TkywR7+Mk1P+xLeD
g21IMj9cIyBAKjsT0YatWk3YOKkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSIsnkJ
MuxQfj5njXdR2dHn2J+1dDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDRiYjJmNzYtN2MxZS00MTFhLTg1ZjYtYjljZDFjNzdkNjBjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAOv3ecLOnRiHTWHfYJE7TwjI9bCtRPW4U8/9M
8NYUOT1RS4zNLLvHtu2SXyGd5n9TADwgVOwSmOB0xjq0bJBbjnssAf07C7nL7Sqk
JlEDh2My+i0RiDAvNmTHiAVHFQI83Kf7NXeHNmtD9AxIUbidoL5vcUVpKgrOmBss
y59nq+GrMBXyFGgBd0sXBY59xVOhGx3INabrERAOWRRPhiuX5Awzq8o+OesV4NhD
vQJQvubOIUPfjvHs/a7AH4R4fGYLx5uHrovfNal63YJ/ioTSKvAAcQKc/pFJaVua
/CHni1LFNMVMqycpiepVmXog606R5UyDj1FOhRenFis/umCmDQ==
-----END CERTIFICATE-----