Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fc80124-256d-4d3d-bffc-2fe5d82c477f.roa
File:                     7fc80124-256d-4d3d-bffc-2fe5d82c477f.roa (raw, json)
Hash identifier:          erYQ/7ITwmAM0mqQIZal+UxMQbCfQOehuc9iV8kNGDA=
Subject key identifier:   09:78:42:53:1C:37:C9:AD:63:A5:06:C0:DF:00:1C:A7:4C:4B:F3:CD
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2AB4CD9944ECB5FC10CE8516C87D841C1DF6FDC3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fc80124-256d-4d3d-bffc-2fe5d82c477f.roa
Signing time:             Fri 17 Oct 2025 21:40:11 +0000
ROA not before:           Fri 17 Oct 2025 21:40:11 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b4:cd:99:44:ec:b5:fc:10:ce:85:16:c8:7d:84:1c:1d:f6:fd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 17 21:40:11 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=f1a149a0b882bf36cc0432c39588e7358538739d3cd2895aa19d8fb2770bbc6c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:d0:c9:09:ae:59:0c:75:fc:44:06:b8:3d:
                    dc:e4:cb:63:eb:12:53:35:31:51:0e:8e:63:89:d5:
                    54:ec:05:58:0a:fa:e0:88:21:19:6a:78:fe:dc:5e:
                    9e:2d:bc:ba:96:9e:fd:61:74:a7:97:8b:80:0b:e5:
                    35:c5:2f:e2:6b:69:e1:8b:ed:32:73:2b:52:01:9a:
                    7f:af:47:62:c2:32:53:92:1a:e0:d0:2f:36:0f:86:
                    f9:08:6c:8c:82:e6:2b:f9:74:1f:dd:90:4a:e5:a1:
                    1d:05:c3:8c:11:07:51:d8:ec:a5:11:93:67:d4:0c:
                    2f:57:fb:b8:da:d7:b1:66:0b:16:c6:40:94:35:b7:
                    e0:5f:a6:ea:61:50:15:75:2a:cf:89:f3:c5:cc:9c:
                    a2:8c:7f:f5:ca:0a:78:63:3f:e8:61:70:40:0c:90:
                    1d:20:12:01:6d:1c:08:7e:d6:fe:1e:84:73:ad:6a:
                    a3:01:60:92:24:f1:81:31:e9:1e:8a:e2:47:76:8d:
                    b6:90:f5:8d:f3:b1:b1:c2:ce:a5:08:b3:4e:6b:be:
                    92:13:0f:fa:9d:2e:cb:2c:a2:6e:3a:80:91:e7:d5:
                    98:bc:a9:0c:1f:97:7f:57:b4:f2:59:76:31:fc:46:
                    2b:30:06:fb:ca:21:b6:5f:0e:5a:44:ed:c2:a9:44:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:78:42:53:1C:37:C9:AD:63:A5:06:C0:DF:00:1C:A7:4C:4B:F3:CD
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fc80124-256d-4d3d-bffc-2fe5d82c477f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:e1:26:ec:a7:b7:36:4d:34:d6:12:59:42:27:f9:9e:f2:09:
         4d:d1:ca:91:a5:23:5b:68:41:d1:4f:74:6a:3c:55:05:7e:d4:
         34:29:28:d5:0a:93:ee:ad:92:d5:d1:e7:ce:c5:e5:55:2b:5d:
         f8:e4:cf:91:df:c2:7a:6b:38:8c:e3:65:54:9d:30:02:df:b3:
         80:b8:b7:a9:b3:49:41:c8:7d:22:64:f3:f5:36:42:83:38:71:
         42:7c:4d:c1:53:ef:e0:d4:b8:01:e6:be:7e:bd:cc:c0:31:38:
         61:c3:01:80:7e:8b:28:ed:d3:31:3f:4b:1b:91:47:b0:4a:61:
         72:e7:0d:84:60:c3:76:6e:13:25:60:75:f2:19:7c:79:86:97:
         f4:2d:28:56:23:27:05:28:a6:34:9e:52:3e:d4:a4:3d:4c:55:
         2a:54:e3:ab:d8:b9:e5:d4:28:76:41:d9:0c:49:b2:17:ea:ad:
         55:55:b2:96:19:dc:e7:2f:71:8f:18:5a:35:aa:ef:b7:3f:07:
         d7:5e:40:2a:bd:05:17:4f:0c:63:79:6d:85:d1:57:20:61:76:
         81:cb:04:d7:36:c9:6b:78:85:fd:af:09:bb:3e:43:d2:9d:6b:
         4a:b8:bf:64:74:9a:1f:fb:41:cc:a3:bf:83:20:2b:9c:e1:bf:
         d9:a6:5e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----