Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f71feb-77ff-438f-8d1f-e553194144d2.roa
File:                     53f71feb-77ff-438f-8d1f-e553194144d2.roa (raw, json)
Hash identifier:          Lm7Ra+P0t0/6LkvLk/0ql93qH1Q+AYDsuTjp9W0SwAE=
Subject key identifier:   24:55:9D:C7:04:5A:59:1E:DF:DF:7C:D3:F3:B8:29:6D:A5:EF:FE:E5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       722F6E6C8124D34C3CBA47B6A01996E92292B68A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f71feb-77ff-438f-8d1f-e553194144d2.roa
Signing time:             Thu 26 Jun 2025 19:52:01 +0000
ROA not before:           Thu 26 Jun 2025 19:52:01 +0000
ROA not after:            Thu 31 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:4020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2f:6e:6c:81:24:d3:4c:3c:ba:47:b6:a0:19:96:e9:22:92:b6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 26 19:52:01 2025 GMT
            Not After : Jul 31 23:59:59 2025 GMT
        Subject: serialNumber=68a7aa4d21529592fe9d3edabe145ffabc5aabb362c4c4aba5963efdb4b218d7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:77:df:40:b8:59:d7:09:3b:ea:23:52:88:46:
                    b2:38:13:ba:55:0d:49:46:23:62:97:95:04:19:c7:
                    8e:f3:18:9f:ba:a7:0c:2d:f6:03:33:79:fa:34:41:
                    8d:72:a6:a7:43:94:7b:ea:46:4c:87:d2:61:1d:0e:
                    22:bf:49:f6:d9:31:5b:2a:74:12:6e:b0:90:57:c3:
                    dc:73:46:80:ea:a5:01:40:80:9d:16:ce:86:89:23:
                    d4:1c:c3:59:83:c8:a7:3b:75:13:5d:9e:e8:61:a0:
                    87:d5:f5:4c:cb:b9:be:56:26:4a:31:a8:ac:60:6e:
                    98:51:00:2e:52:fc:87:22:1b:dc:92:15:88:cd:f7:
                    e7:54:d1:d5:c4:38:2c:bc:9c:58:fb:ff:df:6e:79:
                    4c:1a:32:28:f4:56:20:37:be:36:fe:bd:17:ae:39:
                    68:74:1a:c3:26:34:7c:bd:92:44:16:12:41:9d:7b:
                    ab:24:ef:0e:78:d8:75:c0:6a:7d:55:03:80:8b:f9:
                    d3:0c:97:3b:4e:de:9d:95:92:ac:c4:23:3a:6a:e6:
                    48:b8:50:77:8a:19:5c:72:09:73:b4:a2:a7:1b:66:
                    86:01:78:19:18:3e:c6:ca:36:f6:7f:f5:8c:5e:dd:
                    55:a7:33:7a:31:6b:bf:c7:ad:40:c5:1d:f0:13:ae:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:55:9D:C7:04:5A:59:1E:DF:DF:7C:D3:F3:B8:29:6D:A5:EF:FE:E5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f71feb-77ff-438f-8d1f-e553194144d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:22:1a:3f:6f:52:57:60:fe:8a:ee:4a:46:65:4f:32:69:82:
         46:79:78:4a:42:7d:c5:75:a3:61:97:2f:d1:88:09:cf:35:29:
         12:84:50:06:0a:61:ca:97:06:d2:56:95:8c:de:46:d5:18:25:
         ef:b4:11:65:53:e3:8d:cb:71:c8:76:d7:85:29:50:51:65:fe:
         90:30:bb:d1:36:e7:27:58:22:19:e8:69:91:fb:ea:c6:17:cc:
         2d:90:14:e5:b3:12:95:33:fd:87:80:49:8a:15:d8:f2:98:5e:
         60:c7:d8:c5:ad:6c:20:ef:8f:5f:3c:b6:4f:87:4f:d5:55:bc:
         66:62:7f:a5:f9:2b:1e:3c:0b:25:0c:a1:6e:b0:f2:94:e8:79:
         2b:ef:7f:84:d6:7b:49:7a:25:8c:23:69:10:ac:7e:60:87:b2:
         27:fb:ee:46:c6:32:15:03:d1:aa:7a:20:b6:f5:ac:33:71:29:
         e5:87:34:65:5c:5d:05:3e:32:d9:83:b3:ed:f2:a5:0f:4f:2c:
         7d:3a:72:fb:ea:98:7c:1b:14:16:c8:3f:3f:ea:a6:0f:05:83:
         6f:fb:0a:81:be:a7:a6:f6:ce:7f:a3:2b:aa:e4:0f:6c:c2:be:
         d8:4a:ce:0b:8a:f9:3d:60:cd:e1:a9:b2:08:90:2e:f6:60:99:
         99:42:cf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----