Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
File:                     1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa (raw, json)
Hash identifier:          O+a1+v+76EvOG616lzgE9l85UF1QKF4yAeovHkkP8Cg=
Subject key identifier:   C2:7F:8D:08:B6:E6:90:E1:D8:10:2C:A6:B0:3E:E0:B6:B0:D1:DD:DB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4616450E2D1BD6B9FF76BB4FE87A0E3A60BAF7B7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
Signing time:             Thu 30 Jul 2026 01:40:47 +0000
ROA not before:           Thu 30 Jul 2026 01:40:47 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        176.34.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:16:45:0e:2d:1b:d6:b9:ff:76:bb:4f:e8:7a:0e:3a:60:ba:f7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 30 01:40:47 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=2a4b8f0f6320f0d525f42429ff8c8be3e831e3901ba8b68b50850c0211b536c3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:03:21:c8:76:5c:49:7a:d2:73:fe:b4:92:
                    bf:df:5d:42:f1:b8:28:44:fc:11:58:7a:aa:86:6f:
                    7e:00:67:f1:fc:40:a3:e2:2d:10:c8:17:da:68:76:
                    25:7d:e5:30:00:4b:e4:fb:d0:62:44:8b:08:6f:f9:
                    8e:96:37:c1:80:76:cb:79:a0:f6:44:78:83:2b:3d:
                    f6:9b:69:a1:70:22:e8:cf:7e:42:c3:6e:c9:c7:75:
                    31:88:ba:ab:34:91:c5:56:11:a9:b9:6d:80:fc:0d:
                    d5:6f:a7:ef:2e:d3:19:7c:2f:b6:fc:2a:c4:e4:dd:
                    9d:2c:57:96:5f:77:b5:9d:08:60:67:c1:f0:81:d6:
                    ae:16:e7:06:64:45:26:f5:dc:01:08:a0:9d:da:58:
                    f6:af:49:e5:1e:41:98:6a:78:60:df:0a:66:bf:ea:
                    0c:47:b3:eb:bb:34:e4:0d:1e:3c:3a:23:77:cc:84:
                    ed:a1:5d:bf:db:3f:15:df:2f:62:90:9c:75:a2:97:
                    7c:6b:cf:e8:32:64:0e:ac:b9:c0:52:0a:a0:8b:87:
                    d0:12:71:55:13:fc:71:51:d2:6f:a8:01:7b:61:98:
                    d1:3a:19:d5:16:1c:ee:df:ad:8b:74:57:62:9e:8a:
                    98:d6:05:61:3e:8a:62:ef:9b:54:93:9a:11:eb:c1:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7F:8D:08:B6:E6:90:E1:D8:10:2C:A6:B0:3E:E0:B6:B0:D1:DD:DB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.34.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9e:4a:47:96:00:f0:96:60:10:c8:a9:2d:af:b1:d9:e1:1c:ab:
         f6:cf:42:d1:45:c8:02:ba:3a:68:fd:28:0d:2b:29:19:a9:6a:
         b9:8b:1f:df:e5:a7:b7:01:5d:fa:dc:73:41:19:64:b3:92:14:
         2b:fd:5e:fb:c9:1f:ec:56:fa:ea:18:5b:0b:c0:a0:ac:69:5b:
         a0:f5:e6:9d:c8:14:a6:43:63:3f:16:cd:dc:18:f3:d8:2e:04:
         d8:f8:72:66:25:49:7e:f3:f9:95:5d:fb:d4:0b:89:84:31:72:
         82:83:16:ae:4b:66:f9:d6:fa:8f:a7:32:53:ec:b0:59:d6:24:
         4d:78:d1:bd:4d:fe:a7:2a:13:3c:9c:8a:7d:cc:b9:df:06:41:
         ce:1a:79:5a:9c:ae:fe:34:e7:61:bb:1f:45:0b:75:62:d9:82:
         75:5a:17:9d:b6:25:b0:56:39:e2:be:af:18:ab:08:ae:48:ea:
         ba:7a:b0:98:cc:c6:f2:01:c2:00:8e:e2:57:3d:7b:ff:27:2e:
         ea:dc:06:a6:4d:67:1d:d3:4f:e7:b5:3f:18:1b:c8:67:63:33:
         c5:2d:2a:e8:cd:c8:88:62:9d:c1:9a:f4:35:ca:6c:58:2b:ab:
         94:a8:f4:58:35:72:61:62:96:95:f2:cd:bc:f0:61:7a:3f:5a:
         3f:a5:13:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----