Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cac850f8-5aa9-4a56-aea2-e22d3afd4e38.roa
File:                     cac850f8-5aa9-4a56-aea2-e22d3afd4e38.roa (raw, json)
Hash identifier:          1IoWaIcDbMNgyfvpXhBKLnd0+erYEXuqc9+a7VFF0Ko=
Subject key identifier:   90:86:8D:7E:12:F2:D8:A7:4E:0D:8B:6C:A7:6C:DF:51:BD:E2:1C:BB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3088B52F97FA09177C3C6BE5321EFADAE99231BE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cac850f8-5aa9-4a56-aea2-e22d3afd4e38.roa
Signing time:             Fri 26 Sep 2025 19:10:57 +0000
ROA not before:           Fri 26 Sep 2025 19:10:57 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:1040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:88:b5:2f:97:fa:09:17:7c:3c:6b:e5:32:1e:fa:da:e9:92:31:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:10:57 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=b87342386e28c25672133731576a1164141d37f3900e773b64441c83df4f3925, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:0f:84:93:8b:88:c3:15:af:64:01:5f:54:
                    30:a8:c7:c0:a7:f6:10:d4:9a:77:9b:2f:b4:4c:e9:
                    93:44:7c:fb:57:f2:22:ea:dc:c1:47:f9:4a:ad:fd:
                    7a:e8:4d:be:b2:e7:af:02:2c:16:42:62:1d:a3:1d:
                    ef:0e:4f:5e:a4:26:2d:44:01:2e:2d:8a:dd:10:aa:
                    68:fb:29:80:93:f9:1b:6a:c3:1e:62:23:bf:31:4e:
                    20:e6:c2:03:43:81:65:a5:b6:31:81:a6:3f:15:d7:
                    7f:1d:5d:6b:76:5f:67:a3:14:6c:75:fb:42:14:81:
                    ba:51:3e:cf:f5:e4:85:f5:08:0e:bf:23:4d:6a:26:
                    ae:69:3f:c7:8f:34:78:4a:c8:2f:bd:78:a8:c6:a5:
                    0e:cb:20:b1:3e:c8:c0:89:c5:e0:81:5d:f7:9d:9c:
                    5b:18:bc:9e:30:16:26:a6:ed:7f:42:9b:03:aa:02:
                    29:8f:41:7f:fd:bb:47:c5:e9:90:ec:59:f6:7e:64:
                    51:2a:3b:08:65:d4:2c:81:af:7f:df:20:29:93:c4:
                    a3:7f:89:c3:65:c8:b8:ff:20:d1:a8:86:59:a1:5a:
                    a6:d6:fa:ed:68:6e:34:fa:78:5b:37:24:f4:2c:f6:
                    34:d0:a4:f6:1d:b2:36:11:d2:da:ab:46:4c:62:54:
                    3a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:86:8D:7E:12:F2:D8:A7:4E:0D:8B:6C:A7:6C:DF:51:BD:E2:1C:BB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cac850f8-5aa9-4a56-aea2-e22d3afd4e38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:93:36:0c:ea:2d:ab:51:33:82:0c:7c:d8:f1:b2:19:0a:
         31:53:a1:70:47:2f:37:ea:2c:5d:cc:29:e4:ee:34:76:10:10:
         0d:f9:d2:03:83:04:3c:3a:f8:42:ae:51:a4:95:1b:c7:c1:1d:
         16:c9:84:37:ee:53:01:9e:cb:ef:b8:e2:70:ec:80:94:00:23:
         fc:fc:9d:31:4f:c2:2f:f9:59:16:07:d1:59:72:df:15:ce:22:
         71:41:3c:1f:42:c0:31:0e:ae:1e:e8:e9:18:69:2d:d0:7e:09:
         27:11:d7:3c:68:73:10:1a:42:f5:3d:89:39:bd:b8:f6:93:ce:
         0e:2c:6d:2d:a9:dc:54:81:8e:f7:f4:c7:38:d5:f4:5b:47:95:
         3a:8a:12:54:9e:59:1d:d1:fb:7e:a6:8b:52:52:2d:c6:f7:68:
         c0:dc:3a:da:19:54:46:8e:96:63:8e:b0:f2:15:1b:d9:0c:5c:
         ad:c5:77:4a:cd:3a:70:96:58:33:5c:8c:dc:c1:8b:8f:75:a0:
         8d:11:3c:e5:27:dd:8f:46:2d:d1:56:73:af:26:d8:8e:77:8c:
         ca:6c:0e:97:70:e4:8f:99:30:6a:59:e0:6b:2a:42:e3:d4:6f:
         a4:f3:f7:14:8f:37:0c:40:0d:51:f1:84:ae:83:a9:5a:b6:04:
         c6:3c:37:c0
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUMIi1L5f6CRd8PGvlMh762umSMb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MjYxOTEwNTdaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGI4NzM0MjM4NmUyOGMyNTY3MjEzMzczMTU3NmExMTY0MTQxZDM3ZjM5MDBl
NzczYjY0NDQxYzgzZGY0ZjM5MjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMfAD4STi4jDFa9kAV9UMKjHwKf2ENSad5svtEzpk0R8+1fyIurcwUf5Sq39
euhNvrLnrwIsFkJiHaMd7w5PXqQmLUQBLi2K3RCqaPspgJP5G2rDHmIjvzFOIObC
A0OBZaW2MYGmPxXXfx1da3ZfZ6MUbHX7QhSBulE+z/XkhfUIDr8jTWomrmk/x480
eErIL714qMalDssgsT7IwInF4IFd952cWxi8njAWJqbtf0KbA6oCKY9Bf/27R8Xp
kOxZ9n5kUSo7CGXULIGvf98gKZPEo3+Jw2XIuP8g0aiGWaFaptb67WhuNPp4Wzck
9Cz2NNCk9h2yNhHS2qtGTGJUOhUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSQho1+
EvLYp04Ni2ynbN9RveIcuzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2FjODUwZjgtNWFhOS00YTU2LWFlYTItZTIyZDNhZmQ0ZTM4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0AAQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAnUmTNgzqLatRM4IMfNjxshkKMVOhcEcvN+os
Xcwp5O40dhAQDfnSA4MEPDr4Qq5RpJUbx8EdFsmEN+5TAZ7L77jicOyAlAAj/Pyd
MU/CL/lZFgfRWXLfFc4icUE8H0LAMQ6uHujpGGkt0H4JJxHXPGhzEBpC9T2JOb24
9pPODixtLancVIGO9/THONX0W0eVOooSVJ5ZHdH7fqaLUlItxvdowNw62hlURo6W
Y46w8hUb2QxcrcV3Ss06cJZYM1yM3MGLj3WgjRE85Sfdj0Yt0VZzrybYjneMymwO
l3Dkj5kwalngaypC49RvpPP3FI83DEANUfGEroOpWrYExjw3wA==
-----END CERTIFICATE-----