Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
File:                     c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa (raw, json)
Hash identifier:          f/YjDLCRvhL7N+G2UO0pva+cTzBtEw6ZkuZQD1wg67c=
Subject key identifier:   03:92:85:01:45:2B:F0:AC:5F:81:06:30:AB:8A:F3:27:0D:AD:FC:9C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4A78D076C2321297780812A3B5ADEF9F946C3950
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
Signing time:             Fri 26 Sep 2025 19:38:53 +0000
ROA not before:           Fri 26 Sep 2025 19:38:53 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07e:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:78:d0:76:c2:32:12:97:78:08:12:a3:b5:ad:ef:9f:94:6c:39:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:38:53 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=6797a8ab0d6d31813d4fecb88b3f4fa9ef475fa9623c685013f2180f6a5414fd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5e:ff:33:de:6e:64:e0:4e:75:6c:48:54:63:
                    8f:8c:8a:2e:ab:e8:f7:f5:d9:e2:81:ac:a5:57:ff:
                    b3:f7:05:a4:13:3a:10:22:ec:8c:0d:72:5d:a9:ea:
                    6e:f0:6f:c4:a5:cc:88:53:e3:2e:66:f0:ad:28:93:
                    d9:88:67:71:40:6a:a6:c4:f2:20:ac:84:99:91:de:
                    52:62:6c:7c:99:8c:ec:74:ee:58:20:c2:c8:24:fd:
                    23:74:57:26:78:09:27:6e:f2:35:72:df:57:e2:7b:
                    43:6a:1b:4d:90:18:d2:de:be:94:55:e8:3f:a0:ab:
                    5a:0c:3d:c5:2c:93:18:71:8c:dd:35:07:00:ac:83:
                    23:66:69:d4:54:8c:94:1b:e3:e2:b2:57:85:46:b6:
                    67:21:8c:4d:e3:28:9d:1e:91:16:29:26:bd:18:4d:
                    11:c7:cb:59:c7:bf:ee:12:ea:31:0b:ba:84:14:53:
                    10:d2:10:a9:c7:a9:73:56:7e:81:13:d9:1a:65:c9:
                    57:eb:e0:33:4e:93:7e:1e:fe:71:ef:6b:e9:a8:25:
                    16:c1:97:b5:60:51:e7:6e:1a:04:9d:75:08:fa:00:
                    35:70:49:d2:f0:26:bb:e4:46:55:9a:5a:0e:4a:b7:
                    0c:53:b8:2c:54:6d:c1:87:87:a7:96:02:e9:a1:c0:
                    06:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:92:85:01:45:2B:F0:AC:5F:81:06:30:AB:8A:F3:27:0D:AD:FC:9C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07e:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:29:e1:86:0e:c8:1c:5d:3c:02:44:f6:c8:4d:9a:2a:c1:99:
         ea:e6:94:c6:7f:a8:1c:fe:33:d2:4e:7d:d4:12:1e:4c:e9:ae:
         52:26:e6:ae:dc:51:dc:db:34:dc:32:5a:6a:70:20:cd:dd:16:
         9b:fc:0f:8d:58:35:ee:ef:68:26:85:40:0f:30:aa:4a:4b:be:
         f8:ae:f4:c8:35:4b:6e:ad:15:21:98:f3:fb:49:dc:66:a4:10:
         ca:c6:6e:87:8e:b3:eb:01:3a:8b:67:c4:22:71:48:93:89:f5:
         bd:8d:68:00:e8:31:95:36:bf:eb:a3:11:51:54:13:6e:29:c0:
         c6:a8:ad:85:79:02:48:a4:e1:ae:c6:2a:dd:1c:23:67:93:45:
         29:37:57:ba:fa:97:20:f4:d8:7a:7b:47:b2:6f:e6:07:84:cf:
         ac:0a:80:58:52:db:49:88:70:d8:ef:f9:47:ba:5c:c8:d2:f8:
         cb:da:9d:ca:20:f9:3c:24:47:56:1e:d2:77:ae:7e:b6:9e:b8:
         6f:2f:4c:a2:39:bb:77:a5:3f:34:91:2a:fc:ff:ff:31:51:77:
         37:c0:bc:0f:4a:8c:5d:77:b6:a8:23:46:66:57:83:e7:0c:89:
         75:5f:9b:1f:0f:71:a4:0e:76:13:bc:1b:aa:23:05:fb:a0:ec:
         03:6f:c3:63
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSnjQdsIyEpd4CBKjta3vn5RsOVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MjYxOTM4NTNaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDY3OTdhOGFiMGQ2ZDMxODEzZDRmZWNiODhiM2Y0ZmE5ZWY0NzVmYTk2MjNj
Njg1MDEzZjIxODBmNmE1NDE0ZmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOBe/zPebmTgTnVsSFRjj4yKLqvo9/XZ4oGspVf/s/cFpBM6ECLsjA1yXanq
bvBvxKXMiFPjLmbwrSiT2YhncUBqpsTyIKyEmZHeUmJsfJmM7HTuWCDCyCT9I3RX
JngJJ27yNXLfV+J7Q2obTZAY0t6+lFXoP6CrWgw9xSyTGHGM3TUHAKyDI2Zp1FSM
lBvj4rJXhUa2ZyGMTeMonR6RFikmvRhNEcfLWce/7hLqMQu6hBRTENIQqcepc1Z+
gRPZGmXJV+vgM06Tfh7+ce9r6aglFsGXtWBR524aBJ11CPoANXBJ0vAmu+RGVZpa
Dkq3DFO4LFRtwYeHp5YC6aHABj0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQDkoUB
RSvwrF+BBjCrivMnDa38nDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzM5ZGQ3MWMtZjIyYy00YmI0LTljNmYtZGZjOGM2YTAyZmZkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H6g
MA0GCSqGSIb3DQEBCwUAA4IBAQAQKeGGDsgcXTwCRPbITZoqwZnq5pTGf6gc/jPS
Tn3UEh5M6a5SJuau3FHc2zTcMlpqcCDN3Rab/A+NWDXu72gmhUAPMKpKS774rvTI
NUturRUhmPP7SdxmpBDKxm6HjrPrATqLZ8QicUiTifW9jWgA6DGVNr/roxFRVBNu
KcDGqK2FeQJIpOGuxirdHCNnk0UpN1e6+pcg9Nh6e0eyb+YHhM+sCoBYUttJiHDY
7/lHulzI0vjL2p3KIPk8JEdWHtJ3rn62nrhvL0yiObt3pT80kSr8//8xUXc3wLwP
Soxdd7aoI0ZmV4PnDIl1X5sfD3GkDnYTvBuqIwX7oOwDb8Nj
-----END CERTIFICATE-----