Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bfae711e-b0c4-404f-be1f-a99990818ac6.roa
File:                     bfae711e-b0c4-404f-be1f-a99990818ac6.roa (raw, json)
Hash identifier:          BUqAd/H6BLVBG3bTI03IFXUXQ5rp9QitOYkMSok2rsM=
Subject key identifier:   02:F7:97:6B:A5:06:C0:98:25:48:E9:99:B2:17:64:B0:78:F7:95:07
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       322A6DC610A2E0772357F41B4365CBF06243B61A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bfae711e-b0c4-404f-be1f-a99990818ac6.roa
Signing time:             Fri 26 Sep 2025 20:10:23 +0000
ROA not before:           Fri 26 Sep 2025 20:10:23 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        79.125.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2a:6d:c6:10:a2:e0:77:23:57:f4:1b:43:65:cb:f0:62:43:b6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 20:10:23 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=2795c65a233dfb98eb5088b377958d34de0ae6cdfb47f3625950e650f62d2607, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:50:ba:97:8a:f7:7f:80:23:48:f4:90:65:
                    d6:eb:af:31:be:98:3c:96:7d:8e:04:62:58:54:b8:
                    2c:1b:76:88:35:72:f0:4b:7d:17:73:32:c5:7b:06:
                    0c:b5:e2:56:7f:a1:36:4b:8a:33:5d:ff:ba:d9:ff:
                    ef:8f:c1:35:11:75:62:96:b0:c2:ec:3a:56:4e:c6:
                    70:b6:9a:38:ed:23:90:3b:52:9f:70:c9:b6:60:72:
                    d3:2c:72:62:ff:46:e7:fc:98:4e:1f:5e:75:69:9b:
                    bd:bf:0d:00:4b:8e:14:f6:82:2c:ce:94:bf:c9:7f:
                    6f:10:bd:8d:7d:96:fc:b0:1b:1c:8f:84:61:21:78:
                    ab:09:dd:34:80:18:52:f3:74:d8:b3:c4:f0:91:69:
                    29:14:78:67:55:8c:d1:65:94:ea:67:50:24:a8:43:
                    84:30:2d:de:1c:fa:74:c0:28:ce:73:9c:b2:10:06:
                    e5:15:d8:73:fb:53:86:be:d5:2a:8e:1d:49:66:39:
                    11:b5:b3:23:7b:02:d6:5f:7c:87:54:de:30:d1:8a:
                    9c:d2:b8:9d:07:20:aa:84:b0:63:41:e4:0e:56:e3:
                    7c:bc:39:63:06:c7:ee:f0:21:dc:37:91:1c:1f:2d:
                    22:c8:2e:43:b2:5e:1f:d1:05:65:5b:36:c3:33:7e:
                    16:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F7:97:6B:A5:06:C0:98:25:48:E9:99:B2:17:64:B0:78:F7:95:07
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bfae711e-b0c4-404f-be1f-a99990818ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.125.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:7a:36:61:cd:38:09:ea:8f:f6:98:fe:93:f4:45:98:e3:23:
         ba:d5:40:89:4f:74:9c:42:af:37:69:ed:76:6f:16:dd:b1:05:
         c0:60:51:67:c0:7a:10:bc:80:4d:72:73:41:f5:10:bb:75:fb:
         bd:23:67:0d:3c:e5:b2:dc:78:1b:46:13:cd:a2:bf:e9:31:2b:
         87:62:4d:88:d9:e7:31:fc:21:1c:6d:e9:45:4b:09:7f:12:08:
         5b:7d:96:c8:80:2e:03:61:0a:0c:16:89:26:90:42:91:20:86:
         9e:1b:57:7a:f6:97:a4:10:24:47:53:1f:e6:50:c6:e1:3c:fe:
         fa:f0:7a:41:69:f5:06:21:3d:c2:09:59:f0:b0:ed:20:8d:db:
         f2:21:7e:ec:be:68:f7:95:f9:e7:a0:c8:b5:82:98:3e:05:20:
         fc:a9:4d:dc:20:3d:48:23:b5:51:8c:3a:2d:b4:82:c7:57:6e:
         11:61:f5:86:c2:29:65:42:b7:fc:35:47:3f:8a:fa:4b:93:30:
         53:37:a8:af:65:49:9c:31:f4:0a:3a:83:83:23:c4:0a:08:e8:
         a0:b4:0b:cc:e9:8e:35:df:8f:67:ef:c5:2d:b0:da:6a:57:cb:
         f3:5b:43:8e:a4:44:0b:9c:f2:5c:83:b8:82:b6:b3:1c:2a:18:
         8b:69:f6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----