Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
File:                     2ab74891-6199-47fc-bcde-b8022379067c.roa (raw, json)
Hash identifier:          3wLRF3lXzgnro6udLi327tsOzwchqYRSuVI1x0UsKow=
Subject key identifier:   3D:01:57:E5:78:C9:CB:5B:D8:7A:77:75:77:6E:B7:68:5D:04:5F:1D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0BA7EE9DEB3354D0D14A672632038A43CFEEA6D1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
Signing time:             Mon 26 Oct 2026 05:10:52 +0000
ROA not before:           Mon 26 Oct 2026 05:10:52 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d038:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a7:ee:9d:eb:33:54:d0:d1:4a:67:26:32:03:8a:43:cf:ee:a6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:10:52 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=f879380e3e47c0fb4683ed2f54230933d73bdb50665698d85d003d4dba18063f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:8b:78:d7:71:21:02:23:3b:02:9a:a3:9f:
                    f5:64:2d:9b:c0:e6:2d:4e:df:72:61:66:e6:14:67:
                    3f:3d:54:15:b4:7b:0d:ce:f5:80:af:81:0a:ab:0f:
                    b1:85:cc:61:0c:87:56:4f:71:d3:fd:72:50:d5:49:
                    5c:ae:b0:6b:37:68:e4:4c:c9:bb:3a:11:75:1e:33:
                    b8:f6:6b:98:e2:59:3c:22:d9:e1:e2:95:ce:50:df:
                    b1:60:4f:7e:6f:4b:a6:f5:79:60:39:fd:a8:40:40:
                    07:a5:74:89:2f:9c:22:77:8d:40:96:48:ac:57:7b:
                    98:68:fd:fa:20:ee:e3:7b:ab:90:47:f5:2e:f1:2f:
                    3d:01:35:b7:7c:ee:ec:ad:b5:bd:b7:c6:5a:dc:47:
                    f8:0b:6a:ec:f2:e0:0f:77:47:8c:a6:9f:a3:aa:01:
                    9b:ea:d2:d7:dc:40:e6:7e:5d:f4:40:61:90:85:26:
                    ce:e3:d6:e4:70:6f:13:3d:57:bf:76:db:65:05:52:
                    30:bd:88:c3:5b:25:35:1b:35:0f:93:73:1d:42:63:
                    1a:80:04:09:b4:09:49:e8:29:4a:a6:6f:a0:88:d0:
                    a7:91:aa:cc:76:09:76:24:99:b5:52:fc:74:6f:51:
                    15:78:b1:33:a9:ea:6a:7a:39:67:f8:5a:d3:3b:e8:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:01:57:E5:78:C9:CB:5B:D8:7A:77:75:77:6E:B7:68:5D:04:5F:1D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d038:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:4b:e2:c7:aa:8c:0b:57:4d:c0:9c:81:a8:14:b2:91:02:45:
         cc:16:fc:75:eb:2f:5d:04:4a:8c:21:c9:d0:70:7c:fa:6a:32:
         ff:8c:77:42:74:ce:a8:60:2f:72:bc:9c:91:0e:63:02:08:d3:
         c0:ef:88:f6:2e:16:85:d6:bc:6f:64:6f:d8:8c:13:54:52:e2:
         64:96:db:7b:6f:06:7e:6f:b0:39:52:43:c9:8a:76:9b:fb:34:
         fc:c1:56:be:90:40:e1:84:f6:c4:5e:40:be:a5:ed:21:9b:6f:
         24:27:0c:f8:c0:13:01:29:b1:7f:f9:7b:c1:e9:e5:57:17:73:
         f1:29:bd:e9:0e:94:d5:55:f2:3a:2a:1d:10:3c:9c:8b:62:bb:
         c4:25:c2:df:63:e8:df:80:76:44:24:27:41:7a:3f:7a:67:48:
         25:1e:56:57:a9:fc:35:b5:1b:52:6f:51:63:12:e6:19:e3:23:
         da:4f:d7:ae:45:8c:64:69:03:f8:3b:07:83:c5:05:8e:ef:46:
         80:bd:0e:92:4e:22:c2:59:8a:e0:48:c4:a1:cb:51:05:49:c4:
         7f:32:c2:2f:1c:b0:47:30:61:70:33:69:a0:06:6b:4a:95:13:
         d8:83:b3:8d:8e:f6:a7:75:5e:7f:b5:7d:b5:21:36:aa:b7:ed:
         75:26:dd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----