Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d2dcf71-0209-4006-a427-f221e27d6ed7.roa
File:                     5d2dcf71-0209-4006-a427-f221e27d6ed7.roa (raw, json)
Hash identifier:          qlDhMLUxNE9UtGD/VHFnErb5AQW9OrpWP1Dm6x6GW/A=
Subject key identifier:   33:69:C3:F1:71:E8:04:B6:EF:13:48:E3:53:42:EC:51:C2:EA:67:98
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       06D71F270A52F8522EC96AE72F5AD38CBA81FCF6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d2dcf71-0209-4006-a427-f221e27d6ed7.roa
Signing time:             Mon 16 Jun 2025 20:31:06 +0000
ROA not before:           Mon 16 Jun 2025 20:31:06 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:c080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d7:1f:27:0a:52:f8:52:2e:c9:6a:e7:2f:5a:d3:8c:ba:81:fc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 16 20:31:06 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=f3f27efbc995c4e5397976c74aff6f31c1733fc6fca6f281fdfb611d9afce463, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:a3:08:ac:bc:68:ab:7b:29:87:ae:99:91:
                    af:0a:14:18:3c:d9:c2:c0:34:38:ec:3a:0e:0b:d2:
                    71:7f:cb:96:6d:7d:db:f9:b9:8f:99:54:75:6b:20:
                    ab:8f:9f:65:20:7e:72:6c:44:55:c8:ed:59:72:d1:
                    da:01:4b:7e:41:56:9a:5a:27:d2:8b:52:64:ee:6b:
                    b7:3b:ff:04:17:63:e4:6b:65:ed:7b:a9:2e:96:ee:
                    bc:b3:fc:1f:5d:ac:83:26:e1:c4:64:e0:98:a4:a3:
                    19:56:de:4c:9b:2d:7b:0d:fa:24:a9:d7:7a:03:ec:
                    b7:19:65:35:c0:63:70:8e:ba:c9:54:f1:8b:bd:71:
                    72:d0:83:30:1f:bd:80:c9:10:d7:8a:5c:7f:57:00:
                    01:35:1a:2e:25:4a:96:af:29:d2:af:f4:26:96:c1:
                    4d:1e:c9:0d:35:0c:ac:b0:92:94:10:32:ad:06:c9:
                    91:12:48:60:97:d5:52:c4:44:54:77:a1:f9:7d:15:
                    5c:18:0a:da:34:44:7f:75:23:fb:83:22:05:0c:64:
                    1a:75:a0:3a:e3:79:c2:8b:cb:76:57:b2:96:da:e4:
                    ea:d8:aa:28:a6:7d:0f:b9:e7:fb:a9:7b:40:f4:0f:
                    25:7f:18:6c:b9:19:0c:57:07:90:a4:8b:8f:56:6b:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:69:C3:F1:71:E8:04:B6:EF:13:48:E3:53:42:EC:51:C2:EA:67:98
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d2dcf71-0209-4006-a427-f221e27d6ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:c080::/46

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:0d:13:bd:ae:04:fe:f3:ad:19:cb:89:e4:d9:27:ca:19:
         39:58:e4:98:9c:6c:e9:70:e5:4f:bb:a3:58:b3:80:9d:b3:62:
         cb:39:b1:92:aa:0e:09:a6:9b:7b:34:70:e1:58:31:30:4e:40:
         21:1c:a8:fb:3e:10:ba:a9:94:ba:02:99:9b:f2:5a:52:96:c4:
         86:9b:a9:be:d0:17:44:24:52:bb:40:6f:25:e9:b9:4d:7e:dc:
         47:96:53:7c:94:44:9a:61:67:ce:ae:e2:c5:d7:19:c4:cf:d9:
         ef:30:0f:ff:7f:2a:e1:d5:62:1b:6a:13:6a:46:b0:65:e9:f3:
         3a:ae:25:20:da:d4:26:7d:32:8d:46:3f:84:7a:14:cc:a8:e5:
         39:54:98:e2:2d:77:81:2a:59:8d:3c:af:fc:96:49:dc:ce:57:
         9d:d3:aa:f1:e0:ba:4d:ff:91:13:da:ed:2c:28:8b:cf:0c:83:
         f0:c6:c4:e5:e4:9a:27:71:95:6b:e9:1e:ab:81:0b:e3:e0:44:
         82:70:b2:2c:80:0e:80:18:10:55:ca:9e:22:b7:5e:05:1c:79:
         5e:7c:52:b7:a4:96:35:dc:97:ca:d4:9b:8d:a7:4b:c5:eb:04:
         87:62:ad:6c:06:15:85:7c:a9:55:a6:f0:e9:b2:c5:36:6d:97:
         1a:4d:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----