Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
File:                     819bfec2-19de-4cdb-ba40-657fff6a743e.roa (raw, json)
Hash identifier:          VVe0t94W90pGBGJvoIBY2INJCVj6wIpQE/sJfSEzHSo=
Subject key identifier:   9E:66:02:B0:30:9C:EC:3E:8F:82:43:E2:05:E3:C0:B9:E0:4B:41:51
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3A8E1AE99879BA98193EBAF866B8D62A4B8AE995
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
Signing time:             Fri 26 Sep 2025 19:00:05 +0000
ROA not before:           Fri 26 Sep 2025 19:00:05 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8e:1a:e9:98:79:ba:98:19:3e:ba:f8:66:b8:d6:2a:4b:8a:e9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:00:05 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=22940c5687d297c8968d210aff9bd5764200aff9525400afbccdda69974bbdb3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:97:e5:26:59:8b:ab:44:2d:df:72:75:d6:
                    b0:5f:b0:44:9f:51:fe:52:89:4f:df:6c:16:8c:7d:
                    b6:9b:2f:78:36:ae:8c:49:b2:9a:24:f6:5a:3e:ef:
                    12:e8:5b:6a:02:1a:4e:99:e2:b8:49:72:b7:ad:52:
                    59:9b:f3:ff:85:cd:25:fc:b7:f4:f1:69:50:1d:0c:
                    3b:32:42:7d:42:c8:ce:4c:06:ed:55:9b:1e:89:7b:
                    f8:82:0a:43:70:6a:ba:20:61:73:6a:9a:d2:bd:b5:
                    c4:36:21:5d:51:bc:64:0a:28:93:87:66:5d:29:6a:
                    2c:d6:e7:6b:e6:d7:94:8c:37:91:7e:59:27:1b:f5:
                    83:b7:cb:dc:5e:a0:80:53:ad:e0:ac:07:a9:77:c5:
                    e6:75:ec:09:f3:72:7e:a2:ac:f3:0a:2a:07:ea:33:
                    40:30:d2:d9:58:ca:74:85:d1:d7:54:19:7b:e0:94:
                    36:04:c7:ff:4e:56:4c:ef:b2:36:5c:21:91:6e:2e:
                    58:e5:75:80:e3:0e:38:18:ba:f5:9a:31:ff:95:d6:
                    f4:b3:b7:ae:4d:35:96:da:33:93:86:b3:a4:bc:b6:
                    4f:d0:3e:4a:c2:04:cf:c1:d1:cf:96:c3:f2:8d:ff:
                    70:9a:2c:f7:2c:5d:1f:86:08:cc:ed:b1:40:48:df:
                    bf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:66:02:B0:30:9C:EC:3E:8F:82:43:E2:05:E3:C0:B9:E0:4B:41:51
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:91:e3:8a:05:d4:de:d3:90:c7:fa:25:ba:70:49:18:7e:b4:
         ec:fb:9c:de:64:66:79:b1:b7:5c:1b:5d:27:e2:d5:b0:15:f4:
         e3:32:f8:1c:0a:17:da:b0:48:60:f5:63:80:5d:1b:57:b8:6e:
         70:3d:74:ae:09:2d:b4:37:83:cf:2b:79:07:e1:a7:02:64:2a:
         6e:5a:01:a0:e4:0f:b2:8a:6c:5a:b8:a8:32:3c:ba:5c:ae:5c:
         e1:e1:d6:cf:f6:0a:8a:4e:77:a6:bc:54:ad:e5:cb:28:0c:94:
         fd:18:2b:b2:16:5b:78:90:8c:d1:40:6a:17:49:14:b0:13:08:
         0e:e1:b0:cc:12:d4:ca:07:c6:97:62:ef:f9:4f:05:ed:6a:b9:
         a4:00:f4:41:1e:c9:2a:95:53:f5:ce:c0:c5:0b:ca:f9:fe:fd:
         70:cf:86:b5:9f:f2:87:df:31:b0:ee:49:25:bc:4a:0a:a4:ec:
         df:7e:d8:f8:f1:d3:aa:b5:2b:a7:6a:20:ba:98:9e:01:84:3c:
         d0:d0:76:45:cc:79:13:ba:2d:ab:92:ff:2b:98:ad:7e:3b:9b:
         27:43:1d:e7:c1:b5:09:7f:04:50:39:7d:53:82:34:57:c7:22:
         f5:c5:c2:3b:98:82:e1:fb:ec:e8:6b:6d:47:fe:c4:8b:fe:db:
         e6:5c:a2:6d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUOo4a6Zh5upgZPrr4ZrjWKkuK6ZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MjYxOTAwMDVaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDIyOTQwYzU2ODdkMjk3Yzg5NjhkMjEwYWZmOWJkNTc2NDIwMGFmZjk1MjU0
MDBhZmJjY2RkYTY5OTc0YmJkYjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKACl+UmWYurRC3fcnXWsF+wRJ9R/lKJT99sFox9tpsveDaujEmymiT2Wj7v
EuhbagIaTpniuElyt61SWZvz/4XNJfy39PFpUB0MOzJCfULIzkwG7VWbHol7+IIK
Q3BquiBhc2qa0r21xDYhXVG8ZAook4dmXSlqLNbna+bXlIw3kX5ZJxv1g7fL3F6g
gFOt4KwHqXfF5nXsCfNyfqKs8woqB+ozQDDS2VjKdIXR11QZe+CUNgTH/05WTO+y
NlwhkW4uWOV1gOMOOBi69Zox/5XW9LO3rk01ltozk4azpLy2T9A+SsIEz8HRz5bD
8o3/cJos9yxdH4YIzO2xQEjfv1UCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSeZgKw
MJzsPo+CQ+IF48C54EtBUTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODE5YmZlYzItMTlkZS00Y2RiLWJhNDAtNjU3ZmZmNmE3NDNlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H+Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBhkeOKBdTe05DH+iW6cEkYfrTs+5zeZGZ5sbdc
G10n4tWwFfTjMvgcChfasEhg9WOAXRtXuG5wPXSuCS20N4PPK3kH4acCZCpuWgGg
5A+yimxauKgyPLpcrlzh4dbP9gqKTnemvFSt5csoDJT9GCuyFlt4kIzRQGoXSRSw
EwgO4bDMEtTKB8aXYu/5TwXtarmkAPRBHskqlVP1zsDFC8r5/v1wz4a1n/KH3zGw
7kklvEoKpOzfftj48dOqtSunaiC6mJ4BhDzQ0HZFzHkTui2rkv8rmK1+O5snQx3n
wbUJfwRQOX1TgjRXxyL1xcI7mILh++zoa21H/sSL/tvmXKJt
-----END CERTIFICATE-----