Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
File:                     4cb86308-98a0-48e5-8825-d398c0ce8099.roa (raw, json)
Hash identifier:          O4qjV8I9f2ozRR/D4Xs38s55D1Sv2rG1b94o3RV50Dg=
Subject key identifier:   E4:13:F9:55:41:B3:49:79:48:2E:5C:C7:F3:B8:DF:46:20:6F:46:33
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0FAA94B6613C724CDBCCDD2A6B6D0B378ADFDA6E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
Signing time:             Mon 16 Jun 2025 20:20:51 +0000
ROA not before:           Mon 16 Jun 2025 20:20:51 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:5080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:aa:94:b6:61:3c:72:4c:db:cc:dd:2a:6b:6d:0b:37:8a:df:da:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 16 20:20:51 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=002bb001b90c11134c10a08db873a23bc2f3bd149856043918d82f6c430b8ba5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:28:ab:e9:99:8e:30:8a:88:b1:39:f1:75:c3:
                    ee:f9:a8:49:0d:2f:92:0c:ac:38:0e:79:c1:b9:75:
                    23:ac:4c:92:1a:6f:78:3f:46:9e:0b:0f:61:58:de:
                    54:15:a1:d9:94:75:f0:d4:b5:b4:41:9e:24:6d:83:
                    0c:f0:e5:66:7e:ea:bd:2e:ab:db:8d:90:8c:f1:75:
                    fd:a0:16:16:89:9e:eb:ab:25:f1:80:bc:54:89:96:
                    6e:8e:7d:79:eb:23:04:1d:3f:0c:8d:5a:85:e9:b8:
                    27:eb:a5:e1:89:63:d3:17:11:4f:f5:d0:3d:50:bc:
                    23:f4:0f:7e:2e:8a:00:db:4e:83:2c:5d:1b:c1:26:
                    5a:e2:8d:90:4e:fa:c5:e5:5a:8c:6f:66:ff:f7:c0:
                    26:a4:91:6e:af:59:eb:a1:8d:02:ed:23:e9:65:e0:
                    04:e3:18:35:0d:ca:96:9c:a2:5e:e9:86:7a:48:50:
                    c6:09:31:3c:79:99:56:9f:b9:8f:2b:5d:6e:e5:39:
                    8f:09:54:97:f2:72:c5:70:54:d4:65:5f:46:8f:d1:
                    d2:35:ff:e3:00:bd:45:f6:f5:d6:ba:3f:ec:16:e4:
                    9c:8a:10:73:93:87:c9:a6:d1:e2:42:14:99:ee:da:
                    84:15:cb:df:54:cc:72:a3:e9:03:77:7c:02:08:4d:
                    73:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:13:F9:55:41:B3:49:79:48:2E:5C:C7:F3:B8:DF:46:20:6F:46:33
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:5080::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:24:45:fc:f1:23:22:21:6b:dc:cb:bf:53:89:34:26:0d:76:
         7e:e5:f7:05:21:cc:4a:10:04:2f:ae:b3:eb:11:47:4a:7d:fa:
         d1:eb:22:6f:10:52:2d:be:15:a3:ac:e3:a3:fe:b4:3e:df:f5:
         e5:60:76:ea:e6:18:4b:0d:56:86:4a:ed:3d:fb:60:5b:69:c3:
         4a:43:56:3d:f2:2e:36:ab:fb:9a:f4:f3:60:4f:fd:75:0d:80:
         da:3e:72:75:db:68:43:c7:df:4f:18:5d:b3:14:a8:8f:f9:c4:
         d1:cd:56:96:fe:a4:1a:14:08:a4:cb:b1:0f:53:60:19:09:df:
         26:eb:76:0c:44:d3:38:49:6d:89:a3:a9:02:2c:59:76:3a:70:
         84:59:eb:9b:51:0d:a7:e8:14:96:df:f7:9c:56:c1:fc:e9:c9:
         86:84:5e:09:22:8c:64:ba:9f:88:fc:2b:88:40:6a:9e:4d:30:
         fe:d8:94:01:0e:56:ce:9f:ea:4e:8d:69:24:9b:ae:4d:b8:57:
         a7:16:ff:85:9b:c7:c8:5c:d7:97:2e:1a:c1:e3:f8:f4:4d:de:
         d2:d3:b0:fb:18:4b:d7:3f:14:41:20:3e:88:a4:ac:b4:44:28:
         13:86:9b:1c:ce:d7:bb:e2:00:28:31:83:16:52:61:20:0a:68:
         5e:56:d8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----