Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/278dd4fa-de02-446c-a4ac-184c5f35a577.roa
File:                     278dd4fa-de02-446c-a4ac-184c5f35a577.roa (raw, json)
Hash identifier:          Q5Ok0na9A3WBkxGHKHi+Q+hCQapT7epRonKzfAwzHvY=
Subject key identifier:   56:E0:E1:23:6C:1B:E9:4F:EA:E9:AF:01:15:57:B8:30:58:88:01:A2
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0D70BF23B9ADE5FE82E658F50DAF389EBB6ECFED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/278dd4fa-de02-446c-a4ac-184c5f35a577.roa
Signing time:             Mon 26 Oct 2026 05:30:11 +0000
ROA not before:           Mon 26 Oct 2026 05:30:11 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:70:bf:23:b9:ad:e5:fe:82:e6:58:f5:0d:af:38:9e:bb:6e:cf:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:30:11 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=fa2f14523bf2b77a1f5906cfae46274f383f3fb00416edf50d3952d25c61918e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:d7:0d:e5:85:81:c5:82:5d:0c:04:96:06:
                    7c:c3:42:53:7c:99:4e:c9:a7:ad:b8:f2:de:a0:5d:
                    08:b7:26:20:8f:34:0f:2b:bb:b1:dc:d0:99:f3:30:
                    f6:4e:b3:ec:45:07:ae:e7:30:f4:79:ea:2b:95:5c:
                    8b:2f:d2:e9:54:94:99:2c:0e:8b:c4:65:b9:1b:0e:
                    69:64:e0:f5:4e:90:56:1a:7c:ca:c2:3c:39:4d:6a:
                    7a:10:4b:08:82:5a:e5:cd:62:e9:05:12:da:23:a0:
                    ad:bd:a2:43:55:14:c3:bb:91:72:9a:26:f9:e9:a0:
                    4d:f9:86:9d:b4:48:06:96:bb:12:a5:c9:b2:47:45:
                    b1:7f:dd:da:b9:ec:a5:3e:21:f5:75:d7:9e:cf:9b:
                    63:af:d3:05:c9:64:8f:7b:a6:ac:ee:b5:76:1c:fb:
                    45:bc:ea:61:95:e3:fa:ae:80:22:ab:eb:4a:8e:7a:
                    c2:d8:b6:d7:2f:36:a2:44:80:f3:96:4a:37:65:9d:
                    c8:3b:c8:21:e1:ce:2c:cd:37:b5:80:db:9e:a1:fb:
                    eb:af:b9:5e:43:ed:40:c8:ec:3a:e7:14:0b:2b:b0:
                    5d:ca:a6:0d:64:ea:17:67:c1:22:d9:fa:82:96:05:
                    8f:3e:5a:d9:6d:70:5a:89:ee:e7:2a:d9:d4:6a:8e:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E0:E1:23:6C:1B:E9:4F:EA:E9:AF:01:15:57:B8:30:58:88:01:A2
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/278dd4fa-de02-446c-a4ac-184c5f35a577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:8c:e6:3f:3b:7e:cb:62:6d:22:3e:73:f7:34:50:ca:c6:64:
         26:e8:72:74:39:fc:70:b5:d0:91:02:23:a6:80:6a:bd:39:75:
         7a:70:4f:15:ff:c3:23:f4:7b:93:6a:76:26:a3:cb:81:c4:2b:
         4f:36:c8:9d:fa:39:dd:71:59:9c:3f:63:2f:80:cc:cb:2e:94:
         d1:79:a5:ec:98:19:17:64:51:22:69:0d:45:c3:ca:25:d0:0e:
         9b:f7:37:9e:6b:67:81:eb:c0:54:ed:68:58:74:33:40:9b:31:
         f9:c0:86:2a:dd:83:98:7b:4b:a2:11:8a:0f:ff:fc:6e:7c:57:
         cf:e3:88:23:de:10:18:54:29:fc:1d:40:cd:42:f3:21:35:aa:
         f8:44:c1:a8:4b:cd:04:e9:fd:3c:5c:e5:ed:ae:62:1a:24:a5:
         d5:2c:7d:77:35:53:ff:d2:09:c1:cc:32:b4:f6:c8:f0:1b:da:
         c7:e9:4f:68:96:88:3e:86:3a:c8:95:fd:50:e0:b2:9c:3e:84:
         7a:87:34:cf:72:9a:5b:08:b1:0b:54:d5:c7:df:73:9a:5d:58:
         7f:e0:f2:41:4c:14:52:96:0d:81:17:e4:90:b0:dd:48:e0:66:
         ea:f2:a1:b5:36:1d:c0:a8:50:01:e1:03:0e:61:a1:9c:fb:8b:
         b1:7c:52:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----