Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
File:                     452f19af-8187-465e-9ab8-4e678c11315e.roa (raw, json)
Hash identifier:          Rr3xsmqlwahc5TdFAS0yFFGLrMFsgYTjo+69K3bTMEA=
Subject key identifier:   23:66:67:BE:4F:8D:87:04:DC:5D:57:EC:5C:0C:13:58:54:0A:45:F3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       29E5B4EA868DEF1CA9770619F52A332B387166F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
Signing time:             Fri 26 Sep 2025 20:11:23 +0000
ROA not before:           Fri 26 Sep 2025 20:11:23 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d02b::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e5:b4:ea:86:8d:ef:1c:a9:77:06:19:f5:2a:33:2b:38:71:66:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 20:11:23 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=eec845d9f295968e9650edf04f98d129e6a6b1d0ec314f31cf282caa531b19b0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:1b:95:a7:f6:97:d3:90:34:6f:2e:7b:9b:
                    f4:f7:5f:da:e9:b6:da:72:a8:f4:71:39:5a:d8:4c:
                    c9:34:9f:8b:15:7f:10:b5:d4:91:16:d8:9e:e7:ae:
                    59:63:77:4d:32:65:6e:12:ad:b5:a9:ce:d6:38:fb:
                    30:be:5a:a9:f4:3b:28:ea:44:c6:76:d5:59:83:ae:
                    1f:5c:bf:b7:50:30:30:73:3a:0c:83:1a:19:13:f1:
                    05:15:2a:df:e3:04:d0:ff:c5:50:fb:8e:53:9d:4c:
                    37:a5:09:70:ac:f1:1f:81:88:4f:4f:a9:46:5d:9f:
                    5c:f4:e3:3d:09:f0:66:18:c1:a6:a4:3a:9c:67:9d:
                    7c:86:95:a2:5a:59:e2:18:4f:4c:25:e8:72:0f:b9:
                    a7:f2:93:6e:e0:43:d3:16:85:4b:12:f3:66:75:29:
                    83:f6:1f:09:2d:61:2c:ea:c6:58:7e:3f:24:01:f4:
                    45:95:33:a6:47:97:a9:57:b8:76:9f:a4:d4:62:4e:
                    ac:89:ea:1f:64:0d:71:35:2c:e5:03:4b:6d:b5:ac:
                    c7:4a:ba:77:a4:bf:5c:83:63:5f:b2:85:ba:ea:c8:
                    ae:1e:ac:bc:cd:d1:67:d9:c1:b6:61:16:c7:43:fd:
                    b4:1f:91:b1:88:99:d3:16:1f:49:05:75:a9:f9:67:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:66:67:BE:4F:8D:87:04:DC:5D:57:EC:5C:0C:13:58:54:0A:45:F3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d02b::/37

    Signature Algorithm: sha256WithRSAEncryption
         40:03:43:60:7f:ea:46:c9:81:6d:72:b2:d2:72:0b:94:a2:c2:
         50:3e:61:67:c7:4d:b8:4f:c8:29:56:c9:69:a5:47:3a:96:d8:
         af:e4:da:59:53:3d:19:c8:1e:c3:05:79:7d:cd:f9:68:e4:b4:
         4a:3b:98:71:47:a6:b0:1a:63:b3:cc:20:98:27:f3:6b:12:10:
         87:b2:43:74:ff:60:4d:4c:90:29:49:6e:ba:d1:9a:dc:91:b8:
         c4:23:ab:b0:82:12:10:ea:4c:b8:64:9b:8d:39:29:5d:5f:16:
         3c:f4:f3:26:12:ad:b0:96:3f:b6:0b:f5:f1:cb:7b:9c:97:9e:
         4c:86:b8:68:09:bd:0d:95:0b:07:ae:87:e4:44:57:76:d5:50:
         4b:51:1c:9b:e9:09:ef:ac:c1:a4:4c:23:19:de:a9:1e:d4:d5:
         fd:d3:6a:c2:b0:11:0a:b7:55:eb:6b:1e:af:9d:1b:41:e6:cc:
         42:f6:0a:30:d1:5e:30:f2:d8:81:97:c9:fd:67:72:a0:11:ed:
         04:f8:a7:b0:d6:5d:e5:c4:62:f1:8f:bb:79:c8:1d:1c:8b:74:
         86:1e:29:88:50:33:a6:3a:62:b2:2f:01:48:b0:0d:9d:ca:c5:
         b9:e2:d9:77:84:66:0b:8e:c2:c7:3c:76:8a:c3:4e:f0:1c:f4:
         d7:78:87:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----