Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
File:                     4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa (raw, json)
Hash identifier:          zkxl9btH2Mxqv76RTs3ayEWFhVBdjL8T0EHjpehC5xc=
Subject key identifier:   3F:5C:DD:5E:05:A5:A7:D3:25:09:B7:CD:B3:E7:A5:09:11:DF:79:C3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       45E437DA43D9C3AA07CE906D1D74D1D672CCC67A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
Signing time:             Mon 13 Oct 2025 17:56:09 +0000
ROA not before:           Mon 13 Oct 2025 17:56:09 +0000
ROA not after:            Mon 17 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        176.34.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e4:37:da:43:d9:c3:aa:07:ce:90:6d:1d:74:d1:d6:72:cc:c6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 13 17:56:09 2025 GMT
            Not After : Nov 17 23:59:59 2025 GMT
        Subject: serialNumber=c17b983cedef893c78186315013de964a405cb0c13ffe66d968c3596a82b543d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:84:4f:63:af:fb:1c:7b:a4:11:f8:b0:c2:
                    b7:e5:b4:9c:2d:80:3b:00:45:19:5a:c3:cd:98:9b:
                    af:9f:02:ba:ac:1e:64:82:02:c5:93:5f:cc:c2:69:
                    07:58:81:49:85:b7:4d:c9:75:f7:71:fe:85:5e:7b:
                    e4:65:15:d7:8e:ed:ce:fe:9b:31:a8:e7:2e:15:09:
                    51:29:b2:2c:a9:21:c5:5b:06:43:45:6b:4b:45:fd:
                    80:97:20:3d:4a:40:6a:32:24:35:ed:8b:12:30:70:
                    3d:3c:e6:83:76:6d:b9:59:43:86:e1:b2:89:91:10:
                    ba:10:db:e8:da:d1:04:ae:ea:86:bf:49:c7:f1:58:
                    73:44:81:0d:15:09:1e:71:a4:30:cb:72:c7:54:6e:
                    f1:92:a2:e6:1e:a8:11:5e:90:f6:d6:ef:e0:d7:0c:
                    b8:0d:b3:27:6d:63:6d:67:e1:44:32:61:69:de:15:
                    95:ad:47:58:ba:d2:5f:5b:cc:06:21:5f:d5:f7:ff:
                    74:b1:76:3b:e7:46:7d:14:72:d0:2e:d6:01:e2:60:
                    9a:d5:a8:07:f2:72:18:5a:ee:57:9d:5a:b8:bb:dd:
                    c2:8b:f5:55:47:d4:32:9b:ee:9a:89:13:84:af:12:
                    ac:bd:82:7c:3d:51:7c:1c:f4:4d:ae:e1:12:b0:fd:
                    00:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5C:DD:5E:05:A5:A7:D3:25:09:B7:CD:B3:E7:A5:09:11:DF:79:C3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.34.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:75:b2:ca:8f:82:51:f5:b5:b6:89:5b:75:8b:a4:d9:59:3e:
         7e:a4:d4:27:ea:9c:f9:2f:94:45:e3:ad:58:1e:49:d1:f5:8f:
         b2:b3:0a:d5:ec:79:10:0c:ca:aa:df:60:a0:59:8c:db:7b:fe:
         40:8d:b8:f3:85:0e:6a:4d:ed:8d:84:65:21:67:5e:f4:65:9a:
         b0:fe:fe:2f:a9:9b:70:1f:c2:ef:a5:29:59:60:41:67:2a:32:
         93:4f:59:1d:95:6b:bc:da:4a:ee:14:e1:a3:fb:57:b3:44:89:
         ce:87:e4:66:35:00:ff:06:df:5c:6e:e3:8c:c7:78:1e:3f:f8:
         10:0e:2f:b1:30:27:86:f8:6c:73:bb:73:54:b9:16:a4:b0:55:
         99:74:0d:65:f3:8d:5d:c5:7f:cb:d7:44:0e:a3:fe:e6:56:c2:
         c2:ff:41:cd:fc:9a:32:c4:80:04:a1:82:70:95:40:bd:60:47:
         8f:58:1b:c1:d4:81:4d:0f:df:c6:ff:f1:9b:65:79:5c:c2:8c:
         13:ba:4a:1c:aa:7c:be:27:d1:d5:f9:ce:dc:b1:56:2f:74:6b:
         e8:e1:45:6a:b0:68:4e:53:20:c3:e8:ab:2e:48:07:94:4f:9b:
         03:85:ba:c1:2b:cd:eb:9f:f9:44:cf:59:05:a4:61:5d:1c:79:
         c7:8a:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----