Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
File:                     216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa (raw, json)
Hash identifier:          8R/bgbNnr9u7ltFkZhWF3OLt0DcR+QZaH9hUoG4JlFs=
Subject key identifier:   43:00:1B:C8:4A:81:80:C3:44:CF:0A:55:39:0F:11:43:C6:15:BB:51
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       61411131C623AEED7EB1EB548E318A00C7F3185B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
Signing time:             Mon 26 Oct 2026 04:40:42 +0000
ROA not before:           Mon 26 Oct 2026 04:40:42 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:40c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:41:11:31:c6:23:ae:ed:7e:b1:eb:54:8e:31:8a:00:c7:f3:18:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:42 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=8611a4d5cd4941ea7816ca61c8f0258d41c5fda070182a7301e7aeb98027b6ce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:e8:fb:4a:ed:c9:a9:93:b1:9c:b1:76:49:
                    df:2e:52:e8:63:df:87:be:e6:da:51:d3:28:29:3e:
                    a7:a8:ae:8e:16:54:70:ec:9c:b4:b2:91:8b:84:d6:
                    e4:8a:95:39:58:84:b3:e3:da:ed:6e:88:a6:4e:ea:
                    e4:ae:94:75:e0:af:12:e9:ea:a0:41:38:51:0b:92:
                    49:57:01:85:72:2e:34:d4:b6:08:f7:31:d0:44:83:
                    64:d6:cf:91:88:c1:93:c2:d9:bc:0a:e3:18:31:fa:
                    b0:bd:36:8b:7d:1e:d9:1b:cd:d6:68:2c:cc:a8:39:
                    44:80:02:97:6c:eb:02:91:82:43:54:2e:57:98:a5:
                    3d:97:d2:58:07:d3:8a:ca:ee:d9:70:5a:ad:92:ff:
                    59:27:07:8f:98:d7:d0:cc:c1:eb:0b:51:fd:68:ec:
                    e1:0d:3d:ec:33:32:ef:7e:2f:1a:e9:9c:17:4e:c0:
                    80:9b:51:ac:86:ad:4e:dc:01:81:f9:99:73:83:0a:
                    42:64:c2:59:bc:81:ec:23:36:2e:65:bf:aa:66:e8:
                    fc:47:af:ee:7d:97:2f:43:59:e3:8f:49:64:32:a2:
                    f8:37:4e:15:45:08:7d:4f:db:08:08:47:bd:f7:30:
                    06:26:d6:8a:d3:b9:a7:cb:e1:21:a8:65:84:6e:51:
                    47:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:00:1B:C8:4A:81:80:C3:44:CF:0A:55:39:0F:11:43:C6:15:BB:51
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:75:83:1f:84:3d:df:7d:2b:f6:c3:af:61:f8:fa:ab:6b:6d:
         8b:de:f8:5e:4b:d3:b3:a3:6d:cb:80:61:5d:a9:7f:d4:dc:10:
         70:a5:bd:fc:5b:b7:8a:39:de:09:70:cd:66:c1:43:6d:a1:3b:
         f8:e6:5b:cf:c7:e1:99:fe:72:7c:7c:37:69:97:07:ae:77:73:
         ba:70:3e:fd:7f:db:80:60:e3:51:d7:b9:fe:42:78:63:ea:f5:
         8d:f2:2f:ba:13:4d:dd:36:b8:bd:c6:19:1e:de:28:8d:a1:07:
         3a:5b:b6:a7:fa:0d:19:03:01:28:50:39:30:78:2a:26:b1:4f:
         10:f2:be:72:af:d3:4a:d8:f4:34:dd:13:80:24:25:e1:6f:4f:
         f1:26:35:c2:67:a7:88:3a:51:7c:39:7d:3b:ab:e1:cc:3e:36:
         3a:02:c7:e6:cf:bf:2b:b7:09:3a:4c:1c:82:bf:20:b7:ea:6f:
         eb:df:0d:62:69:11:41:80:95:21:2a:57:b1:88:81:17:72:46:
         e9:dc:b8:08:e0:bb:29:50:43:92:84:ad:36:7b:e2:b3:d6:7f:
         00:d5:78:61:9d:02:39:25:4e:63:c2:a0:23:af:4a:79:9e:40:
         d2:ca:d8:b8:8d:f1:42:b8:2e:12:c8:9a:b7:93:3b:83:0f:b0:
         db:35:f2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----