Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14a1cb35-92d7-4bc2-854c-094a3829c73e.roa
File:                     14a1cb35-92d7-4bc2-854c-094a3829c73e.roa (raw, json)
Hash identifier:          p87t9mrzwkcdHXCpB6cO4HCWqBB/QpN9Ye7WMukjkPI=
Subject key identifier:   FE:2D:53:C9:92:B2:7A:5E:B5:13:93:F8:59:80:F8:62:58:8F:5A:9D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4619BE5949E7C0CFE900A6A9F3C78EF311F408D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14a1cb35-92d7-4bc2-854c-094a3829c73e.roa
Signing time:             Mon 26 Oct 2026 04:50:41 +0000
ROA not before:           Mon 26 Oct 2026 04:50:41 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d038:8040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:19:be:59:49:e7:c0:cf:e9:00:a6:a9:f3:c7:8e:f3:11:f4:08:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:50:41 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=78e0908d864615794661e0a761078c43c3c6876c22c79a117d8fc550052352f4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:c3:6b:42:dc:a5:a1:4d:2f:6b:ce:6b:92:
                    ec:35:c5:08:f2:77:0f:2b:fb:4a:3d:ca:cd:60:71:
                    5b:a3:00:b2:5e:de:95:0c:be:ce:2d:59:c2:19:ca:
                    a3:fd:ba:a9:19:42:43:ca:7d:1d:7a:13:fb:71:f3:
                    12:bb:c9:4e:1e:91:5a:95:a7:f2:0c:b0:7c:9a:12:
                    1f:c5:78:de:d9:8b:c5:74:08:e9:b2:4e:cc:ac:91:
                    7c:25:0e:46:11:b9:60:ab:aa:40:4d:cf:f0:52:f3:
                    a1:e9:96:e9:8f:11:31:b9:67:da:7a:23:21:d0:f1:
                    64:de:0d:1f:fd:4a:0b:5f:7c:f2:c4:cc:48:9d:64:
                    bf:4a:c7:bc:5c:18:1f:9a:17:f8:e7:6a:59:80:b6:
                    88:11:b9:30:94:4e:2b:61:e5:ee:d0:75:a4:a2:46:
                    a9:6c:e3:47:17:4b:ab:56:62:2a:0d:26:45:ae:d2:
                    8e:27:b8:45:68:c5:4d:d2:85:05:18:ac:ad:b7:31:
                    86:1d:96:63:d4:50:75:25:5c:97:39:28:38:ea:c6:
                    b6:5a:f9:94:3b:82:a0:eb:ff:f8:01:26:0d:d8:f9:
                    f5:5f:6f:5f:67:51:96:26:6d:8f:48:2f:42:6c:a1:
                    66:31:4c:5c:5a:eb:8d:89:8a:0f:93:d7:f2:0b:af:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2D:53:C9:92:B2:7A:5E:B5:13:93:F8:59:80:F8:62:58:8F:5A:9D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14a1cb35-92d7-4bc2-854c-094a3829c73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d038:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:25:f6:05:b3:91:6e:42:58:a9:17:b5:08:d1:bf:b6:cb:95:
         29:2a:fa:ef:39:c3:db:46:46:76:e8:77:62:93:c9:d3:f5:b3:
         84:38:c5:63:bb:4f:dd:b9:e8:1e:da:e5:9a:f3:ce:ae:33:53:
         ce:04:de:24:8f:12:1b:ea:61:0c:b5:70:57:e2:0e:92:49:39:
         c6:aa:dc:f0:ed:09:b8:58:01:5d:d6:87:bb:54:d9:c3:70:b1:
         b4:9c:c0:fc:bc:4d:b4:66:06:13:93:c4:c3:67:57:0f:42:d8:
         4d:68:4a:85:87:b3:d2:ab:8f:5b:bb:27:6f:01:c1:65:db:fe:
         2e:64:3e:ea:0e:56:da:ed:8b:c3:11:ea:83:bc:39:53:26:c4:
         2f:ef:20:7e:a2:49:a4:57:c6:94:a1:2d:5c:e6:83:3c:ca:22:
         43:0c:2a:14:bd:90:83:77:ed:7e:a8:f1:dc:82:d4:22:e6:0c:
         91:23:a3:2e:b5:e6:02:23:45:f5:62:7c:a2:db:c9:bf:42:e2:
         52:bc:4e:cf:a3:6b:c4:79:c0:65:20:e7:66:59:2c:5f:80:ec:
         47:f2:5f:54:ad:30:1a:28:9a:82:70:57:e5:c1:be:57:02:0a:
         9b:83:43:f8:4e:2a:ea:37:a6:06:7f:8e:c7:53:e8:ad:ae:1c:
         07:d2:a3:c4
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIURhm+WUnnwM/pAKap88eO8xH0CNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDUwNDFaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDc4ZTA5MDhkODY0NjE1Nzk0NjYxZTBhNzYxMDc4YzQzYzNjNjg3NmMyMmM3
OWExMTdkOGZjNTUwMDUyMzUyZjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL5kw2tC3KWhTS9rzmuS7DXFCPJ3Dyv7Sj3KzWBxW6MAsl7elQy+zi1ZwhnK
o/26qRlCQ8p9HXoT+3HzErvJTh6RWpWn8gywfJoSH8V43tmLxXQI6bJOzKyRfCUO
RhG5YKuqQE3P8FLzoemW6Y8RMbln2nojIdDxZN4NH/1KC1988sTMSJ1kv0rHvFwY
H5oX+OdqWYC2iBG5MJROK2Hl7tB1pKJGqWzjRxdLq1ZiKg0mRa7Sjie4RWjFTdKF
BRisrbcxhh2WY9RQdSVclzkoOOrGtlr5lDuCoOv/+AEmDdj59V9vX2dRliZtj0gv
QmyhZjFMXFrrjYmKD5PX8guvLtMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT+LVPJ
krJ6XrUTk/hZgPhiWI9anTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTRhMWNiMzUtOTJkNy00YmMyLTg1NGMtMDk0YTM4MjljNzNlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DiA
QDANBgkqhkiG9w0BAQsFAAOCAQEAfSX2BbORbkJYqRe1CNG/tsuVKSr67znD20ZG
duh3YpPJ0/WzhDjFY7tP3bnoHtrlmvPOrjNTzgTeJI8SG+phDLVwV+IOkkk5xqrc
8O0JuFgBXdaHu1TZw3CxtJzA/LxNtGYGE5PEw2dXD0LYTWhKhYez0quPW7snbwHB
Zdv+LmQ+6g5W2u2LwxHqg7w5UybEL+8gfqJJpFfGlKEtXOaDPMoiQwwqFL2Qg3ft
fqjx3ILUIuYMkSOjLrXmAiNF9WJ8otvJv0LiUrxOz6NrxHnAZSDnZlksX4DsR/Jf
VK0wGiiagnBX5cG+VwIKm4ND+E4q6jemBn+Ox1Pora4cB9KjxA==
-----END CERTIFICATE-----