Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/289a89af-fcc7-4668-a99a-c396661bbb4b.roa
File:                     289a89af-fcc7-4668-a99a-c396661bbb4b.roa (raw, json)
Hash identifier:          XuKDWBQDYze26wxF4A9I7gU9fBsAn1+RtSnMV0dXU1o=
Subject key identifier:   04:C2:F6:69:7E:03:8B:A1:60:7D:71:9A:EE:61:61:D6:4A:72:39:E6
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6DEE3133B4FA6041B1748B2E3BEDB8B5CA2C2BBC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/289a89af-fcc7-4668-a99a-c396661bbb4b.roa
Signing time:             Thu 12 Mar 2026 15:38:25 +0000
ROA not before:           Thu 12 Mar 2026 15:38:25 +0000
ROA not after:            Wed 10 Jun 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d05a:e080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ee:31:33:b4:fa:60:41:b1:74:8b:2e:3b:ed:b8:b5:ca:2c:2b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 12 15:38:25 2026 GMT
            Not After : Jun 10 23:59:59 2026 GMT
        Subject: serialNumber=3d67fbaf0bf80b84686184d1d8c5c8ffe8285facedef6d6ee01ef6f421138317, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:e1:db:87:9b:24:22:ed:85:79:71:71:8b:
                    97:e7:4f:9e:b7:4a:55:92:7c:a2:10:91:80:b2:6a:
                    3d:73:75:81:31:00:7f:3a:db:ee:ee:3f:13:0e:5c:
                    81:83:35:6b:95:3f:5c:b7:23:0d:02:6c:8d:f8:f8:
                    07:fa:6a:5b:f6:5b:72:02:37:86:9a:29:71:56:08:
                    69:6c:ba:c5:5c:39:fa:c8:e6:6a:ce:01:89:fa:c8:
                    c5:10:27:00:52:66:53:f6:45:3b:82:bf:61:9e:a4:
                    e8:e7:cf:08:6f:de:9e:58:62:79:69:3c:d0:8a:02:
                    69:8b:16:8a:cb:24:90:f8:ce:75:89:21:57:88:9c:
                    71:5d:f1:26:6b:33:26:e9:c0:5f:d5:f7:02:57:0a:
                    2a:4b:8d:e6:ee:a2:32:ff:8e:6b:56:63:33:56:5b:
                    f7:e4:42:2d:0a:1b:d3:ad:7d:20:54:a8:2e:60:9f:
                    86:e4:84:84:6b:4b:6c:fb:f3:d1:95:7d:42:51:bc:
                    fe:69:43:40:55:53:57:04:68:21:2e:f9:db:2d:95:
                    62:9e:74:96:59:00:df:39:d5:df:23:62:5a:f5:55:
                    42:f7:2f:eb:d5:c9:6e:35:51:64:93:5c:70:0a:b5:
                    d5:bd:f0:24:9b:0b:fa:60:1b:25:1e:67:87:22:8f:
                    c9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C2:F6:69:7E:03:8B:A1:60:7D:71:9A:EE:61:61:D6:4A:72:39:E6
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/289a89af-fcc7-4668-a99a-c396661bbb4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d05a:e080::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:df:7a:05:76:5f:d2:cd:4e:12:94:00:0d:f7:9e:ce:f8:68:
         0f:60:90:d6:63:c1:1a:69:c2:00:72:dd:89:56:5c:37:e9:7d:
         f5:76:e0:59:4d:cc:fa:7f:79:e3:f4:69:c3:9d:fe:0d:83:90:
         ac:34:19:73:b6:a3:62:c3:73:3e:35:fb:1e:b5:d1:20:f3:74:
         2d:ec:4d:75:f0:d6:dd:24:21:be:5e:70:2a:42:11:95:ac:46:
         17:ad:51:81:2b:01:35:60:86:4b:23:3f:39:1f:b3:ba:06:48:
         f6:06:32:d6:c3:dd:35:05:26:14:fd:96:9d:18:1e:8c:0d:05:
         ac:57:6c:b0:b7:30:a3:20:0c:ce:fc:7a:63:b1:79:29:c3:d4:
         d1:bb:b8:7f:af:43:fa:ef:9d:58:fe:bf:8d:bf:25:c9:6c:81:
         3e:01:5a:4e:b3:a1:62:b7:d9:66:99:01:8e:5f:b7:d5:e7:6e:
         d0:b4:3b:05:c1:43:f8:5d:12:ff:ad:c0:a4:9e:4e:5e:34:2e:
         d8:85:93:7e:4d:9e:72:b8:a1:34:82:3b:fd:73:d0:a6:5f:12:
         ca:de:1a:b5:22:30:f1:2a:02:2a:29:c5:62:59:e5:9a:84:95:
         3b:cc:da:27:6d:03:0c:92:38:ac:8f:f0:75:0b:4d:b7:b5:46:
         22:ea:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----