Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4875c926-8b00-4b21-bffa-08659e5c223d.roa
File:                     4875c926-8b00-4b21-bffa-08659e5c223d.roa (raw, json)
Hash identifier:          n/YrvJb/NWcfFFkocAl0sWEWIEWjadeumj5yzcoo4Zo=
Subject key identifier:   24:D6:4A:AD:CC:2F:0A:5D:A0:1A:DA:8E:19:02:44:D9:B1:19:BF:AA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7AF01B00F605EFDBB7C5A2B06B99E1B9828EC373
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4875c926-8b00-4b21-bffa-08659e5c223d.roa
Signing time:             Fri 17 Oct 2025 21:40:16 +0000
ROA not before:           Fri 17 Oct 2025 21:40:16 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d076:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f0:1b:00:f6:05:ef:db:b7:c5:a2:b0:6b:99:e1:b9:82:8e:c3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 17 21:40:16 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=8a7c7f1368a28928062f1556009d3c2e64f0b90ce0a2a786ea6530f4f773aab6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:30:73:1a:08:29:7d:5e:c5:14:62:1e:3f:
                    f9:06:3d:be:31:4d:5a:f6:3e:43:c9:15:7f:78:e6:
                    f0:18:b0:1b:4c:bc:3c:3a:da:c4:e7:2f:fe:b7:70:
                    f4:39:fc:4a:b2:92:60:43:90:6f:e9:31:a9:64:d9:
                    9d:9e:e1:9d:eb:21:e5:34:7a:1a:de:23:84:58:fe:
                    5f:43:eb:b3:62:cb:d7:ba:7c:cd:59:c9:5e:78:00:
                    ed:30:aa:14:52:17:c6:5c:be:0b:e7:8a:65:79:b4:
                    5c:e4:dd:c8:6d:83:1a:06:c2:17:ed:6a:ab:95:00:
                    f6:f2:f5:89:8a:bf:d2:2c:6a:9a:3f:c0:58:21:44:
                    c9:cb:f0:e0:9c:fa:7d:d9:a7:c9:ce:63:f4:d4:d3:
                    cc:b5:95:06:b1:83:c7:25:b8:c3:46:ed:7b:17:40:
                    e0:76:96:d6:36:41:94:f0:f2:6a:bd:30:98:8d:01:
                    08:3f:bc:df:dd:6c:79:25:68:fd:51:84:7f:cc:87:
                    52:da:f6:85:68:d1:46:d0:b9:b3:af:e7:85:0f:97:
                    7d:f0:9e:22:0f:0b:d0:d8:d4:91:37:ef:8d:8f:eb:
                    d3:3d:82:37:07:b1:37:ae:94:99:00:c6:b0:e2:45:
                    76:c8:aa:54:84:54:8b:21:51:e6:8c:a6:3f:39:af:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D6:4A:AD:CC:2F:0A:5D:A0:1A:DA:8E:19:02:44:D9:B1:19:BF:AA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4875c926-8b00-4b21-bffa-08659e5c223d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d076:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:d1:4a:59:ec:52:a2:86:ae:ea:a5:e5:88:12:57:6f:4a:8e:
         4a:14:1b:0c:28:c1:f5:b5:a5:18:aa:b3:90:8c:58:a1:62:0d:
         37:17:7e:fc:ba:80:79:53:9c:f3:5c:70:9c:6f:8b:bd:03:4d:
         ad:7c:02:17:c9:81:2b:56:fb:75:c5:a0:48:41:eb:24:67:d3:
         2a:c7:12:29:43:7c:47:fd:3e:ea:39:5d:33:e7:af:99:54:72:
         22:f4:f1:b0:2b:23:5b:fb:43:31:b8:55:bc:14:80:ab:fe:7b:
         33:f2:c3:11:d2:ae:38:82:df:85:96:c1:a7:18:91:e8:ae:80:
         de:8f:d1:12:36:cf:30:ef:bf:4b:28:41:7c:bc:e7:64:d9:53:
         f0:c7:41:3a:15:65:80:3f:9f:89:71:c2:9e:c6:6b:90:93:5f:
         7e:13:32:e6:f5:a3:14:04:77:c1:4a:0f:61:d9:37:b5:20:a2:
         fa:78:3b:91:f1:c3:9c:25:c7:b3:f2:80:4d:3f:a1:64:51:86:
         e2:c3:e9:53:d8:05:52:2d:50:87:9c:98:e2:f5:55:9c:e4:bf:
         76:93:d9:cd:8c:64:8f:fe:69:8d:0d:75:9a:c8:62:b5:ac:69:
         e5:e3:c5:6a:91:2b:f3:4f:b4:1a:13:21:ac:d4:d1:11:50:09:
         aa:98:79:88
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUevAbAPYF79u3xaKwa5nhuYKOw3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMTcyMTQwMTZaFw0yNTExMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDhhN2M3ZjEzNjhhMjg5MjgwNjJmMTU1NjAwOWQzYzJlNjRmMGI5MGNlMGEy
YTc4NmVhNjUzMGY0Zjc3M2FhYjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOOgMHMaCCl9XsUUYh4/+QY9vjFNWvY+Q8kVf3jm8BiwG0y8PDraxOcv/rdw
9Dn8SrKSYEOQb+kxqWTZnZ7hnesh5TR6Gt4jhFj+X0Prs2LL17p8zVnJXngA7TCq
FFIXxly+C+eKZXm0XOTdyG2DGgbCF+1qq5UA9vL1iYq/0ixqmj/AWCFEycvw4Jz6
fdmnyc5j9NTTzLWVBrGDxyW4w0btexdA4HaW1jZBlPDyar0wmI0BCD+8391seSVo
/VGEf8yHUtr2hWjRRtC5s6/nhQ+XffCeIg8L0NjUkTfvjY/r0z2CNwexN66UmQDG
sOJFdsiqVIRUiyFR5oymPzmvfEECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQk1kqt
zC8KXaAa2o4ZAkTZsRm/qjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDg3NWM5MjYtOGIwMC00YjIxLWJmZmEtMDg2NTllNWMyMjNkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HYQ
MA0GCSqGSIb3DQEBCwUAA4IBAQA70UpZ7FKihq7qpeWIEldvSo5KFBsMKMH1taUY
qrOQjFihYg03F378uoB5U5zzXHCcb4u9A02tfAIXyYErVvt1xaBIQeskZ9MqxxIp
Q3xH/T7qOV0z56+ZVHIi9PGwKyNb+0MxuFW8FICr/nsz8sMR0q44gt+FlsGnGJHo
roDej9ESNs8w779LKEF8vOdk2VPwx0E6FWWAP5+JccKexmuQk19+EzLm9aMUBHfB
Sg9h2Te1IKL6eDuR8cOcJcez8oBNP6FkUYbiw+lT2AVSLVCHnJji9VWc5L92k9nN
jGSP/mmNDXWayGK1rGnl48VqkSvzT7QaEyGs1NERUAmqmHmI
-----END CERTIFICATE-----