Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
File:                     cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa (raw, json)
Hash identifier:          0dQFFjtTQoJOsu2TbYet8iydsAFgEf+YgSzyy3LJLpY=
Subject key identifier:   61:F0:9A:9E:04:A1:D3:3D:F8:E3:E2:5C:0A:13:17:B9:AA:34:49:25
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       231C58D266A5C41CB003349E90A2EB11547E43EC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
Signing time:             Fri 26 Sep 2025 18:42:17 +0000
ROA not before:           Fri 26 Sep 2025 18:42:17 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:80a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1c:58:d2:66:a5:c4:1c:b0:03:34:9e:90:a2:eb:11:54:7e:43:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 18:42:17 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=1aedd229c5cb2544cc344e9523bd18ecdda70b8b850c2d1ee3777e416f3830ec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:47:90:bf:0b:10:46:bd:82:69:f4:25:f0:
                    06:a5:44:89:7d:fd:87:e5:0d:3f:7b:ad:99:fd:7a:
                    cb:f0:d4:62:37:2b:b1:54:0a:1e:1b:cc:1d:51:43:
                    e2:db:51:f3:a4:7b:b2:10:1b:fb:1b:87:92:d6:cf:
                    f3:03:8f:9f:9a:dd:15:9d:22:63:d3:83:ff:99:26:
                    8e:b6:6b:db:e9:1a:76:85:bd:78:3c:15:2a:d5:50:
                    ec:fc:b3:4a:79:0f:75:41:7e:de:a7:88:28:ab:e1:
                    f8:2b:b0:ce:0c:8c:7a:75:fe:fd:f6:ff:28:3c:5a:
                    0f:e7:df:61:74:70:b3:d5:96:25:5d:e5:db:32:cc:
                    6b:c5:e9:4d:c8:33:21:d2:49:1c:ef:ac:e4:72:24:
                    e5:10:8d:2a:a2:6e:0b:8f:90:c7:cf:28:3d:89:0b:
                    14:29:3a:f0:25:43:7c:ad:e1:6e:c1:7d:2a:a0:e1:
                    27:9a:49:27:be:21:ae:92:03:6d:8f:ba:12:cc:fa:
                    0a:23:b3:c4:53:18:1a:2e:aa:1c:87:82:16:8d:a8:
                    0c:e6:da:57:cc:d4:9d:f5:a7:33:05:c1:84:83:7a:
                    65:f6:c6:e0:52:11:58:40:7d:2a:c5:2c:f8:3f:f5:
                    f7:0e:43:f3:78:44:b3:4d:f1:98:c3:1b:1a:53:ad:
                    0e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F0:9A:9E:04:A1:D3:3D:F8:E3:E2:5C:0A:13:17:B9:AA:34:49:25
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:80a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:fc:68:e6:e1:7a:e0:b1:0a:0c:fb:60:05:09:3f:73:27:c8:
         58:58:c4:43:44:0f:1c:23:ea:fd:1e:87:c5:7f:f0:19:12:9a:
         d6:de:3d:fe:50:89:09:1e:ce:e3:80:30:ce:ea:5b:89:1a:82:
         bf:fe:1c:ca:07:30:84:7b:cf:f7:d9:bd:ab:08:cf:2f:51:8d:
         44:8b:3b:25:25:be:57:d6:28:71:8c:e3:76:ae:01:a6:b4:2c:
         a5:aa:4d:ff:89:2d:ad:0a:26:f4:67:54:35:87:ff:75:98:75:
         2a:f7:4b:5b:cd:04:2c:35:cb:d4:39:98:0b:b6:e2:77:ef:b0:
         6b:31:70:5e:04:3b:73:29:f5:a1:a1:e7:01:ca:a7:4b:fb:3c:
         d5:91:0a:a7:21:fa:c6:16:e5:06:72:48:6e:d7:5b:db:0b:76:
         6d:cf:cc:f6:e9:85:aa:83:87:94:0a:02:04:7e:80:4f:a2:68:
         96:f8:be:b0:d3:ed:15:3f:ce:8d:d5:2f:0a:f4:d0:94:a8:7e:
         bf:d6:bd:df:c0:a5:a7:4d:dc:9c:c6:12:73:a4:ee:da:87:f8:
         2b:fc:5c:06:e6:f4:b8:d8:96:b8:2a:25:d7:38:53:91:8a:06:
         aa:f7:73:57:41:b7:c6:4f:d2:ff:9c:cc:1c:b9:48:a7:09:55:
         63:a4:00:28
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUIxxY0malxBywAzSekKLrEVR+Q+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MjYxODQyMTdaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDFhZWRkMjI5YzVjYjI1NDRjYzM0NGU5NTIzYmQxOGVjZGRhNzBiOGI4NTBj
MmQxZWUzNzc3ZTQxNmYzODMwZWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKjuR5C/CxBGvYJp9CXwBqVEiX39h+UNP3utmf16y/DUYjcrsVQKHhvMHVFD
4ttR86R7shAb+xuHktbP8wOPn5rdFZ0iY9OD/5kmjrZr2+kadoW9eDwVKtVQ7Pyz
SnkPdUF+3qeIKKvh+CuwzgyMenX+/fb/KDxaD+ffYXRws9WWJV3l2zLMa8XpTcgz
IdJJHO+s5HIk5RCNKqJuC4+Qx88oPYkLFCk68CVDfK3hbsF9KqDhJ5pJJ74hrpID
bY+6Esz6CiOzxFMYGi6qHIeCFo2oDObaV8zUnfWnMwXBhIN6ZfbG4FIRWEB9KsUs
+D/19w5D83hEs03xmMMbGlOtDgMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRh8Jqe
BKHTPfjj4lwKExe5qjRJJTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2Y2YWMzZWYtODJmNS00YWJjLWEzNmUtNDA1Yjg2M2Y4ODRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA
oDANBgkqhkiG9w0BAQsFAAOCAQEASfxo5uF64LEKDPtgBQk/cyfIWFjEQ0QPHCPq
/R6HxX/wGRKa1t49/lCJCR7O44AwzupbiRqCv/4cygcwhHvP99m9qwjPL1GNRIs7
JSW+V9YocYzjdq4BprQspapN/4ktrQom9GdUNYf/dZh1KvdLW80ELDXL1DmYC7bi
d++wazFwXgQ7cyn1oaHnAcqnS/s81ZEKpyH6xhblBnJIbtdb2wt2bc/M9umFqoOH
lAoCBH6AT6Jolvi+sNPtFT/OjdUvCvTQlKh+v9a938Clp03cnMYSc6Tu2of4K/xc
Bub0uNiWuCol1zhTkYoGqvdzV0G3xk/S/5zMHLlIpwlVY6QAKA==
-----END CERTIFICATE-----