Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce04c6c2-3994-4b71-a579-ee490d4b125b.roa
File:                     ce04c6c2-3994-4b71-a579-ee490d4b125b.roa (raw, json)
Hash identifier:          rRSBqOFQdPmbxpVz8xOJUlflvU2rYYYjIJxteO9MiIc=
Subject key identifier:   0E:70:17:B6:46:0A:48:A4:2E:C0:D8:D5:F4:4A:DC:EC:E0:3D:18:04
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2E4A929CC3873234C386B1E71296CCC5CC74C123
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce04c6c2-3994-4b71-a579-ee490d4b125b.roa
Signing time:             Fri 17 Oct 2025 21:10:18 +0000
ROA not before:           Fri 17 Oct 2025 21:10:18 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d078:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4a:92:9c:c3:87:32:34:c3:86:b1:e7:12:96:cc:c5:cc:74:c1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 17 21:10:18 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=c12016a44f9b1137d840566a54d416654b51f3efe44998f8931dd37c7e0b4ef6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:38:39:cd:d6:bb:e2:37:9b:c1:6f:01:68:
                    9c:4f:f3:7d:27:3c:71:77:aa:58:4f:57:b4:30:82:
                    ed:3b:bc:83:75:96:7b:94:fb:24:55:fd:49:cf:a9:
                    a2:f5:b2:f0:3b:70:d1:6a:04:6f:d0:47:7a:47:b6:
                    2a:a2:4a:4f:b4:91:ca:0d:9c:5a:8f:ef:d3:95:27:
                    9c:0c:86:88:ab:16:e9:c0:1a:d0:a6:ac:ee:8f:f5:
                    6a:49:89:da:9e:1d:c3:97:cf:69:a4:b2:53:ab:95:
                    f6:ea:f7:1a:74:c5:66:da:de:3a:80:50:97:f8:31:
                    1c:91:f5:0d:79:92:68:ae:41:c9:d2:cd:43:00:32:
                    b9:f7:83:7a:37:a4:78:fc:d2:cb:5e:d7:4e:a8:71:
                    07:b4:9f:d0:fa:8f:c0:84:81:91:fb:93:fb:7f:1d:
                    15:d1:cb:09:0e:e6:c8:c5:45:c2:85:24:ea:e3:7b:
                    b5:5b:38:da:fe:08:fe:c6:2d:c6:d4:d7:a4:25:43:
                    f9:08:35:4c:69:27:9c:2f:3e:68:64:45:39:e9:f5:
                    84:76:4e:b5:42:09:96:f7:52:48:d0:a1:b3:e9:4f:
                    3f:79:31:c8:ce:e0:78:25:d4:de:26:2a:3b:3d:a3:
                    f1:d0:fe:84:ec:a2:90:c8:98:9a:cd:ea:2b:9f:57:
                    9b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:70:17:B6:46:0A:48:A4:2E:C0:D8:D5:F4:4A:DC:EC:E0:3D:18:04
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce04c6c2-3994-4b71-a579-ee490d4b125b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d078:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:04:df:3c:07:54:3e:cc:5c:93:cf:5b:2a:3f:03:69:a8:ec:
         f4:06:3c:59:93:a5:b6:a0:21:0c:67:e8:14:b8:f4:3c:cd:6a:
         a6:cd:f0:7a:31:15:a1:95:3c:e5:2b:fa:17:c3:58:06:62:e9:
         45:6e:82:fc:a2:e2:88:b0:ad:43:4e:af:95:df:01:41:b9:80:
         5b:57:4e:aa:4b:d5:5d:f4:7c:80:5c:0a:26:73:2b:16:e3:9e:
         e4:9a:20:2a:22:c5:7d:18:71:e9:f5:82:57:b5:ec:77:7d:4e:
         60:e4:fc:18:b7:2a:e0:9a:16:18:96:df:b3:77:fe:08:33:64:
         4f:ab:9a:43:79:63:44:75:96:f3:9e:4e:33:3e:73:b9:e0:ac:
         56:a8:ad:6b:4c:b3:6e:5f:50:1e:6b:99:ef:d1:ee:00:53:e6:
         96:9a:37:2d:d5:13:bd:99:d1:75:69:17:f6:89:79:4e:7f:84:
         f3:80:23:9f:b2:e1:9e:12:d3:cb:f2:5a:11:16:c4:1a:81:f0:
         5c:12:66:30:c4:37:21:a0:d6:fd:24:fd:2f:bf:30:9b:b2:90:
         35:57:56:fe:00:f0:f1:d0:24:6a:6a:15:b6:f7:b1:f0:f2:55:
         1d:62:3e:2c:5b:a1:f4:9d:33:bf:d0:ad:89:dd:09:b2:fc:44:
         a7:f9:a4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----