Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/096f7a1a-16f8-43a9-9924-45031719c04f.roa
File:                     096f7a1a-16f8-43a9-9924-45031719c04f.roa (raw, json)
Hash identifier:          g+KCD9KoLixY7/gqxoX1AOtKX0FYUu2GKXpvkDw0qkU=
Subject key identifier:   51:82:7B:6A:F9:32:F7:22:0F:4E:4B:A6:44:73:3A:B1:8E:B7:85:8E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6753FE9A30A368EB6AD7B6DF5D637AF79096E30D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/096f7a1a-16f8-43a9-9924-45031719c04f.roa
Signing time:             Thu 12 Mar 2026 15:38:28 +0000
ROA not before:           Thu 12 Mar 2026 15:38:28 +0000
ROA not after:            Wed 10 Jun 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d:20c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:53:fe:9a:30:a3:68:eb:6a:d7:b6:df:5d:63:7a:f7:90:96:e3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 12 15:38:28 2026 GMT
            Not After : Jun 10 23:59:59 2026 GMT
        Subject: serialNumber=10ae5af74e347beeafc33f65d8bd688d625da283a9f7abbc85e47401b7cedce8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:a3:8b:b2:dc:02:ef:fc:c7:c7:fe:a5:f1:
                    51:42:03:b1:84:17:a4:eb:65:4e:34:cf:f7:c7:5b:
                    4e:01:7c:f5:d3:3c:4c:a4:36:f0:b4:9d:dd:7e:d9:
                    2a:0a:0c:2b:03:f7:12:2c:5f:a0:9b:32:ce:3f:ee:
                    c2:60:58:1d:b4:61:20:b6:be:cd:42:c7:73:49:30:
                    83:34:a6:ba:32:30:92:35:95:88:b9:27:d0:3b:42:
                    f4:f8:bc:20:24:f4:56:47:f9:a3:8f:fd:66:d7:c7:
                    db:5c:75:2e:9e:f2:2b:cf:9c:c3:8e:e0:93:02:ca:
                    a7:c5:21:56:6c:f9:41:0e:4f:8a:53:7c:78:b9:f2:
                    ca:14:e5:6e:05:35:e9:7b:06:62:82:0e:9e:53:b3:
                    8a:ba:52:ab:b2:0d:25:32:b6:c3:a4:0e:3a:d7:a4:
                    c1:9c:44:2e:2f:fc:f5:10:e5:6f:1d:da:90:f9:68:
                    3e:75:e6:de:fd:37:7c:c2:e1:7c:fe:39:28:3e:99:
                    85:d5:49:bd:bc:3d:88:21:fb:2d:07:2f:76:1e:0c:
                    02:e5:2d:a4:a2:00:1a:48:4b:a8:11:94:f4:33:9f:
                    57:ce:66:fe:f0:09:91:a5:b2:d5:54:31:a7:82:0f:
                    d2:43:d8:18:69:b5:64:64:bc:e0:da:f4:2b:f9:58:
                    ba:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:82:7B:6A:F9:32:F7:22:0F:4E:4B:A6:44:73:3A:B1:8E:B7:85:8E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/096f7a1a-16f8-43a9-9924-45031719c04f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d:20c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:06:ec:b8:20:0f:63:66:f4:8b:54:2a:68:0d:06:34:7c:76:
         51:88:70:63:91:2b:87:bc:85:2b:f6:0f:4c:08:b2:ca:f8:a4:
         27:45:74:ba:80:f4:40:aa:1d:6b:16:1b:09:12:b2:d2:0c:db:
         12:5e:06:99:2e:33:ee:1f:18:86:af:81:8f:7c:f7:1c:3d:bb:
         e3:2c:c4:2e:70:74:64:6d:62:34:27:3b:80:ae:9e:c6:df:65:
         b7:fd:ac:4f:c6:c5:3b:ba:70:9b:83:be:5e:ec:21:41:4e:0e:
         00:58:5f:ba:d2:b8:54:ce:67:75:9a:63:45:b9:11:b0:7b:e1:
         88:c7:f2:a9:bd:ef:be:41:67:91:42:73:0f:8b:29:3e:b5:e7:
         cd:64:a7:62:63:38:04:a3:07:48:32:d9:b2:37:58:6b:83:42:
         d5:5d:80:d7:99:2e:a2:41:2e:12:85:f3:66:40:ed:b4:e2:5e:
         0a:18:0e:98:de:d4:5a:9f:16:8f:de:33:dc:2e:65:28:3a:5d:
         ae:78:48:84:46:16:fd:58:76:31:86:a9:46:7a:be:ab:78:2f:
         36:13:cb:fe:af:f5:79:59:c1:a5:ec:27:4b:a7:77:90:4f:1a:
         95:95:7c:a4:53:a8:95:c3:65:d9:01:2a:01:57:ad:ef:be:94:
         6f:b1:1b:d5
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUZ1P+mjCjaOtq17bfXWN695CW4w0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAzMTIxNTM4MjhaFw0yNjA2MTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDEwYWU1YWY3NGUzNDdiZWVhZmMzM2Y2NWQ4YmQ2ODhkNjI1ZGEyODNhOWY3
YWJiYzg1ZTQ3NDAxYjdjZWRjZTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMGYo4uy3ALv/MfH/qXxUUIDsYQXpOtlTjTP98dbTgF89dM8TKQ28LSd3X7Z
KgoMKwP3EixfoJsyzj/uwmBYHbRhILa+zULHc0kwgzSmujIwkjWViLkn0DtC9Pi8
ICT0Vkf5o4/9ZtfH21x1Lp7yK8+cw47gkwLKp8UhVmz5QQ5PilN8eLnyyhTlbgU1
6XsGYoIOnlOzirpSq7INJTK2w6QOOtekwZxELi/89RDlbx3akPloPnXm3v03fMLh
fP45KD6ZhdVJvbw9iCH7LQcvdh4MAuUtpKIAGkhLqBGU9DOfV85m/vAJkaWy1VQx
p4IP0kPYGGm1ZGS84Nr0K/lYuoUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRRgntq
+TL3Ig9OS6ZEczqxjreFjjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDk2ZjdhMWEtMTZmOC00M2E5LTk5MjQtNDUwMzE3MTljMDRmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H0g
wDANBgkqhkiG9w0BAQsFAAOCAQEASgbsuCAPY2b0i1QqaA0GNHx2UYhwY5Erh7yF
K/YPTAiyyvikJ0V0uoD0QKodaxYbCRKy0gzbEl4GmS4z7h8Yhq+Bj3z3HD274yzE
LnB0ZG1iNCc7gK6ext9lt/2sT8bFO7pwm4O+XuwhQU4OAFhfutK4VM5ndZpjRbkR
sHvhiMfyqb3vvkFnkUJzD4spPrXnzWSnYmM4BKMHSDLZsjdYa4NC1V2A15kuokEu
EoXzZkDttOJeChgOmN7UWp8Wj94z3C5lKDpdrnhIhEYW/Vh2MYapRnq+q3gvNhPL
/q/1eVnBpewnS6d3kE8alZV8pFOolcNl2QEqAVet776Ub7Eb1Q==
-----END CERTIFICATE-----