Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b28278f-4fad-45f4-a194-c2e785f1c443.roa
File:                     0b28278f-4fad-45f4-a194-c2e785f1c443.roa (raw, json)
Hash identifier:          gcFY92q5ntJo/CHphuWBJ18zXJ0CzACGLyHu+rlz5SA=
Subject key identifier:   C9:B8:7A:14:4C:3C:6A:D6:70:63:EC:10:FC:46:54:F9:A6:7A:FF:62
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5B71CD1B454DFC3C004558A05175F8AC5844E69B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b28278f-4fad-45f4-a194-c2e785f1c443.roa
Signing time:             Mon 26 Oct 2026 04:31:05 +0000
ROA not before:           Mon 26 Oct 2026 04:31:05 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d019:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:71:cd:1b:45:4d:fc:3c:00:45:58:a0:51:75:f8:ac:58:44:e6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:31:05 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=48917d68c4157ca1eedf80274d35e982990d37104da928b52f394a8443236901, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:15:26:8b:3e:21:86:1e:81:c3:4a:20:e5:
                    5d:5b:b3:44:76:b9:75:9f:9c:d4:1f:a9:10:3b:1a:
                    4a:1e:bd:1a:75:e0:66:dd:34:45:b5:2f:67:d3:3f:
                    8c:9a:4c:48:4d:fe:81:ed:ca:2c:e4:a3:51:bb:ca:
                    3c:0e:1b:85:8d:26:c3:25:6b:ed:1d:a2:5f:cb:10:
                    48:f7:28:32:fd:87:56:c2:d3:5a:9e:9d:a6:69:20:
                    c4:50:0d:e9:3c:8f:06:89:47:b5:c8:43:4c:65:0b:
                    62:78:c2:76:57:93:78:8f:3c:d0:dd:84:45:f4:32:
                    97:ed:a0:60:3c:1d:ce:d0:5c:cc:b3:4a:cc:a6:a1:
                    78:20:d2:d0:64:a8:4e:c9:94:9c:58:0b:e5:1f:80:
                    7e:8e:aa:60:a3:42:7c:08:3c:da:5c:51:99:bb:00:
                    72:a7:ff:d1:15:8f:c1:87:38:4e:6d:23:d9:ba:e0:
                    9a:97:a0:46:c2:1e:1a:c7:07:17:5b:42:60:bb:9e:
                    80:8e:40:67:18:c3:27:dc:1a:d8:40:9f:6a:27:6d:
                    6c:4b:79:89:f3:24:81:bf:dc:f8:1b:a7:bf:c1:7f:
                    b0:9f:7b:8b:1a:93:8e:e5:39:7b:b7:8a:de:36:75:
                    c9:d8:80:89:ca:81:ab:c7:74:b0:cc:ea:18:41:f5:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B8:7A:14:4C:3C:6A:D6:70:63:EC:10:FC:46:54:F9:A6:7A:FF:62
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b28278f-4fad-45f4-a194-c2e785f1c443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d019:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         1a:e2:d7:ab:a3:1f:97:8d:38:7e:44:9c:15:69:8c:13:28:c7:
         ec:7f:1f:da:91:b7:9c:a4:aa:9e:a9:1a:20:99:e7:16:75:89:
         d7:90:77:dc:4a:3c:b4:92:72:3d:4c:d5:78:6c:8c:4e:ae:96:
         03:1a:9f:f6:4e:ff:b4:bb:f8:11:6d:f2:32:ed:76:8e:36:4f:
         35:00:06:b7:b0:fd:b5:84:9f:d0:50:80:de:d7:04:d7:eb:d6:
         8d:4c:70:5a:26:ac:77:d3:df:ac:04:27:92:fd:e2:83:ae:7e:
         da:c4:8c:68:1b:9c:2c:50:83:77:4f:0b:fc:82:5b:af:90:c3:
         54:00:49:0c:3e:8a:9f:63:f1:93:59:af:9c:69:30:eb:41:ad:
         6c:fd:bb:5b:11:50:4d:3d:e3:ef:3c:58:78:20:35:27:6d:ef:
         63:85:91:1e:ec:47:af:93:e6:e0:76:5e:df:e0:13:d1:a0:95:
         d2:23:cf:8b:20:40:72:7f:b2:c7:14:89:9f:fe:6f:16:b7:cc:
         a5:15:7a:11:b3:b0:22:c5:16:73:b0:bd:e3:8d:f5:18:df:a9:
         13:db:d3:5e:02:58:95:cd:cd:c5:5d:00:95:2d:8e:69:f4:bf:
         b4:50:ec:78:ae:d6:cd:f5:21:05:70:4a:93:23:a5:ff:c7:07:
         17:ff:66:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----