Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2fe4803-5028-4c31-b369-a86c9539bfa2.roa
File:                     d2fe4803-5028-4c31-b369-a86c9539bfa2.roa (raw, json)
Hash identifier:          dnmfFF9+u0xYJv3HZPXEmuZ1q1iCz1PWYn205S50etI=
Subject key identifier:   9D:F7:F8:B0:91:92:8A:32:94:D7:EF:63:C3:5B:EE:71:28:C7:98:5F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7FAD2ABFEDC946B305AAB968FBD00E4C44343EF6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2fe4803-5028-4c31-b369-a86c9539bfa2.roa
Signing time:             Fri 17 Oct 2025 21:10:15 +0000
ROA not before:           Fri 17 Oct 2025 21:10:15 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06c:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ad:2a:bf:ed:c9:46:b3:05:aa:b9:68:fb:d0:0e:4c:44:34:3e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 17 21:10:15 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=b3931c2eeaa4bfdb5d014cbc5036759b054c1781a9d3e334cb35caf96b117430, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:58:57:c2:72:aa:50:a1:2f:d3:a7:7c:39:a2:
                    42:21:87:34:67:65:04:a8:e6:f4:e6:bb:f9:80:9e:
                    51:6e:88:d3:49:41:69:62:43:15:2d:7a:74:1e:5c:
                    93:06:28:f5:a2:ad:ea:a7:ca:7e:05:ed:ff:35:97:
                    b8:c8:d8:1e:21:62:d8:35:a7:ef:a1:3e:0e:f5:9b:
                    ed:89:3e:fa:8a:5f:1d:10:36:05:e5:d2:c9:0f:38:
                    76:83:39:48:1c:09:a2:38:b4:ae:32:38:e2:ec:18:
                    7d:8c:08:9d:ad:bc:72:25:3b:f3:d5:22:f4:01:bf:
                    25:52:71:6a:8b:34:6e:65:71:d4:55:6c:56:23:cf:
                    fb:2e:19:03:72:65:ed:fa:c0:3a:dc:c6:a0:13:94:
                    cf:bf:72:b0:4e:a9:02:18:56:c8:65:82:de:49:24:
                    ac:64:ba:a0:bd:f6:11:f4:81:18:ff:46:3a:c2:6a:
                    06:c2:59:e4:74:83:a2:3f:60:5d:7b:04:34:fa:f1:
                    5a:d9:0c:0e:b9:bb:53:54:94:c5:6e:43:73:4c:84:
                    32:4e:1a:a7:c6:07:4f:d9:48:fb:f9:46:11:04:67:
                    a7:41:49:51:e0:64:cc:ee:ec:30:0d:c7:d8:b2:e2:
                    c0:46:99:43:40:33:51:57:a8:21:ee:e1:40:57:0d:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F7:F8:B0:91:92:8A:32:94:D7:EF:63:C3:5B:EE:71:28:C7:98:5F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2fe4803-5028-4c31-b369-a86c9539bfa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06c:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:d1:86:75:db:02:bf:0b:66:a8:d2:fc:11:70:21:aa:cb:f8:
         a5:24:f6:9f:48:33:b4:60:e7:9e:ef:78:b9:9f:20:3c:44:1c:
         67:cb:67:80:c0:c0:05:02:44:e0:60:aa:06:13:1c:5a:4a:32:
         c0:87:48:3d:3f:f3:4a:72:69:bb:3a:c4:48:d6:e8:d6:e2:38:
         4c:89:28:01:36:77:2c:1f:bc:e6:56:f9:74:35:d8:32:f0:b5:
         18:44:45:35:3e:45:9b:1e:d9:a7:0e:e8:46:8c:98:e5:e2:e4:
         c4:53:41:ba:74:ab:77:13:bd:dc:2a:14:0f:49:74:e8:0e:a8:
         2d:fb:05:49:18:a2:55:e4:73:80:5c:91:a6:9c:26:d6:af:1b:
         2e:92:9e:4e:d5:18:04:5b:25:10:fa:65:9e:62:d4:05:39:b2:
         e1:a6:4d:b0:d4:0a:c1:e1:cf:2c:27:03:05:0e:a5:4f:77:8f:
         f0:fb:a0:28:8e:3b:a4:6e:60:18:73:97:eb:7a:0b:34:ba:d5:
         80:7f:6f:fc:51:9f:03:36:51:13:27:2c:97:66:a2:4b:9a:6d:
         b9:25:8f:96:7f:a7:67:01:d8:bb:8a:66:39:3d:4e:d9:0d:7d:
         5b:0d:0b:24:1c:b7:70:14:12:2a:49:96:8c:5b:27:1d:5b:bc:
         fc:2a:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----