Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
File:                     df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa (raw, json)
Hash identifier:          jQeUcyy9LhVDPiBs42gffwpQBd7UktDS4Cnf9rh7Hto=
Subject key identifier:   7D:FD:91:31:30:34:5D:E3:FD:FC:D2:D9:3D:87:22:07:72:6F:E7:ED
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       23D9DFA63C4CFB1D9E20F2475F5EB11B71B95FB8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
Signing time:             Fri 10 Oct 2025 17:10:17 +0000
ROA not before:           Fri 10 Oct 2025 17:10:17 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        46.137.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d9:df:a6:3c:4c:fb:1d:9e:20:f2:47:5f:5e:b1:1b:71:b9:5f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 10 17:10:17 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=b6c990e22315a3aab2e1dc2b1065bce410647ed8c88fe535c8d70323434a7af7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9d:40:ba:76:1d:46:7b:03:2c:3e:5d:b7:5e:
                    74:20:d8:e5:61:55:ef:1e:e3:83:53:61:1b:47:ed:
                    97:d2:5d:aa:5f:50:fa:8d:8b:99:1f:54:dc:34:9d:
                    68:f4:e1:a2:92:42:72:b8:89:c5:f5:5c:f9:45:ac:
                    b4:0c:60:0b:41:c0:24:c8:b7:67:29:04:31:53:4d:
                    85:b7:06:27:1c:2b:17:c2:ad:3b:11:98:76:e9:5d:
                    35:7d:0b:4b:96:73:2b:fe:88:79:c8:ac:76:27:09:
                    db:50:c2:2e:8f:c0:1e:f4:2f:58:81:d2:8d:a1:27:
                    dd:81:c0:8b:35:62:06:25:5f:e6:32:85:4c:1f:06:
                    a6:f2:b5:2d:a8:8a:dc:00:c7:d5:25:8c:87:52:dd:
                    a9:b7:96:a9:c9:d5:e2:6f:39:33:e7:b3:c5:bc:5e:
                    df:f6:ea:75:f7:58:87:98:2f:a6:1e:18:cd:f8:ea:
                    53:fa:f1:38:1a:23:07:24:ee:e5:c1:82:57:6a:40:
                    19:b3:cb:bc:79:4b:62:36:5b:ac:66:67:0a:1b:a0:
                    3e:09:65:5b:41:85:06:51:2d:8f:11:83:82:4a:f2:
                    9f:8b:76:c4:72:f1:f5:05:65:a8:ed:78:86:8d:9d:
                    36:71:79:62:ec:65:11:e0:83:69:4c:ac:e2:8c:1a:
                    62:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FD:91:31:30:34:5D:E3:FD:FC:D2:D9:3D:87:22:07:72:6F:E7:ED
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.137.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:86:45:ad:dc:f4:a8:30:0c:3e:ce:4c:31:f0:08:87:5c:3a:
         5e:fb:b2:c6:c8:ed:cb:4c:f3:fe:73:6e:60:97:8b:d9:77:e8:
         93:e5:1f:0e:14:3c:ed:bf:6a:ca:e3:d7:96:74:64:e0:cc:85:
         1a:ce:1a:c1:57:42:d0:a5:d2:fc:0b:29:f0:1b:37:58:11:98:
         ae:5d:ab:45:5d:40:80:84:29:2f:21:35:28:36:ca:bd:4c:29:
         67:f2:61:b5:8b:75:f7:28:64:34:97:7e:9b:4c:8d:35:b7:81:
         cd:55:c4:e9:29:95:eb:c6:32:b1:3f:df:10:6e:e0:a5:93:95:
         94:c4:18:b8:de:01:d2:ae:ba:73:71:23:01:51:6b:4a:a0:8d:
         23:26:9c:c3:93:1d:95:c4:12:77:15:a4:0d:b6:47:ba:5e:f3:
         4d:7d:6c:2c:ff:9e:6b:97:e2:0f:60:8e:f6:04:12:9d:89:59:
         c1:5e:75:59:7e:c2:73:60:78:2e:f2:d9:f0:e9:26:2d:e3:08:
         5d:41:a7:c7:aa:f0:e0:42:bd:c6:d3:d7:b1:ad:94:74:05:3b:
         e6:dc:42:32:68:8a:33:0f:ae:37:94:d9:87:52:fe:fa:cb:7f:
         ca:09:9e:ef:35:03:25:85:c7:5c:56:97:57:e3:b3:7d:24:3b:
         5d:d5:d7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----