Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa
File:                     2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa (raw, json)
Hash identifier:          1XfGicLMRrszEzfK5lkkeuscI4dZiwWVbaA003GglWE=
Subject key identifier:   3B:ED:C0:37:09:68:F4:3C:E8:D0:BF:06:F8:B5:5A:88:3B:6C:78:E7
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0A37AD7D0B7AE7A0FFCCAC6664B6DBA81DC8B2CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa
Signing time:             Thu 22 Oct 2026 03:50:17 +0000
ROA not before:           Thu 22 Oct 2026 03:50:17 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06c:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:37:ad:7d:0b:7a:e7:a0:ff:cc:ac:66:64:b6:db:a8:1d:c8:b2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 22 03:50:17 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=69227840e16c6c51aefa4062b6ef075523ce6af5b2fb6c99c878071534d9f00b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:38:b4:3f:6d:4d:37:2d:f8:80:f5:4a:e6:
                    46:19:56:17:d6:e3:00:e7:51:30:9d:4c:0f:0a:1e:
                    63:74:6f:45:e8:8f:ae:69:50:fd:53:38:8c:af:99:
                    73:6d:2b:ce:2f:ee:0a:db:7c:d6:50:96:64:b5:ac:
                    1e:42:14:bb:74:de:44:5e:4b:5f:4c:4c:ae:0d:25:
                    84:68:a2:52:6e:c3:bc:0e:70:11:67:b8:70:9c:c5:
                    eb:43:7c:13:73:dd:7a:7a:15:75:2a:c6:37:81:a9:
                    b7:f5:19:62:a0:9f:d2:35:1a:1a:c1:22:db:11:ee:
                    61:01:94:bf:c5:d4:2b:77:f6:5a:06:e8:6f:87:84:
                    eb:68:8b:f2:99:9c:b0:a7:4f:ca:1d:48:ec:fb:08:
                    85:79:9b:97:11:f8:b7:78:1b:e0:6d:39:a4:a2:7d:
                    e0:06:6b:04:4e:9d:74:a4:c5:41:da:02:90:a1:b3:
                    3e:a7:6b:2d:71:6e:1b:ae:05:35:18:41:a3:dc:dc:
                    6e:bd:0a:4e:d8:18:ab:82:5d:4a:11:14:16:82:6d:
                    dd:e5:c2:3d:87:97:29:ae:44:3b:1c:06:d3:25:d8:
                    9e:80:07:5a:d6:73:32:b1:5f:b5:2e:a1:3c:6f:4d:
                    71:af:1f:e3:f9:83:1b:c6:a0:55:a0:b6:f4:4e:5a:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:ED:C0:37:09:68:F4:3C:E8:D0:BF:06:F8:B5:5A:88:3B:6C:78:E7
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06c:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:88:24:83:ef:48:33:b5:90:56:26:2f:c1:83:b4:79:76:a5:
         55:54:87:63:e7:02:9d:bd:23:9e:63:ad:a3:81:79:86:78:1c:
         c2:6f:5c:30:c6:d7:c1:ed:ab:a6:a3:c1:fa:c7:82:77:66:59:
         50:92:59:91:60:75:0b:0d:d7:67:e4:4c:5b:3d:84:7a:c9:d6:
         e4:e0:aa:4a:46:2f:0f:44:85:0e:e8:55:a8:8e:ae:8a:31:71:
         65:d6:d2:43:95:68:04:3e:f4:fe:27:4f:ee:31:83:f9:f1:34:
         bd:31:ab:0b:ae:a0:70:bc:33:31:a1:b1:97:18:db:c2:6e:cc:
         d0:81:40:a3:ca:74:99:c5:4c:8d:da:a9:7f:f9:a0:33:5f:45:
         22:cf:07:d5:79:67:ec:fb:a2:18:13:f6:d7:a7:7d:b6:1e:a1:
         2b:c0:75:41:26:70:d7:91:8c:fa:78:ac:f9:13:29:82:ca:e5:
         5a:fd:e4:a2:bb:ed:88:f8:b1:eb:6c:5e:08:25:43:e0:74:5c:
         f4:12:b6:fb:34:7d:b0:2f:fa:e5:69:d2:36:12:7c:d4:52:1b:
         57:23:9f:64:a0:7d:f3:5f:65:85:8c:21:01:97:7b:2b:ef:fe:
         fb:02:ac:e3:d0:ae:aa:ac:ef:7a:df:5f:e2:a8:48:4d:18:b2:
         d0:42:d5:53
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUCjetfQt656D/zKxmZLbbqB3Iss8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjIwMzUwMTdaFw0yNzAxMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDY5MjI3ODQwZTE2YzZjNTFhZWZhNDA2MmI2ZWYwNzU1MjNjZTZhZjViMmZi
NmM5OWM4NzgwNzE1MzRkOWYwMGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM6iOLQ/bU03LfiA9UrmRhlWF9bjAOdRMJ1MDwoeY3RvReiPrmlQ/VM4jK+Z
c20rzi/uCtt81lCWZLWsHkIUu3TeRF5LX0xMrg0lhGiiUm7DvA5wEWe4cJzF60N8
E3PdenoVdSrGN4Gpt/UZYqCf0jUaGsEi2xHuYQGUv8XUK3f2Wgbob4eE62iL8pmc
sKdPyh1I7PsIhXmblxH4t3gb4G05pKJ94AZrBE6ddKTFQdoCkKGzPqdrLXFuG64F
NRhBo9zcbr0KTtgYq4JdShEUFoJt3eXCPYeXKa5EOxwG0yXYnoAHWtZzMrFftS6h
PG9Nca8f4/mDG8agVaC29E5aVNECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ77cA3
CWj0POjQvwb4tVqIO2x45zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmM1YmI5ZDYtN2Y1MS00MmFiLThhZTItOTc3NmVmMDQ3ZDgxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gyw
ADANBgkqhkiG9w0BAQsFAAOCAQEAsogkg+9IM7WQViYvwYO0eXalVVSHY+cCnb0j
nmOto4F5hngcwm9cMMbXwe2rpqPB+seCd2ZZUJJZkWB1Cw3XZ+RMWz2EesnW5OCq
SkYvD0SFDuhVqI6uijFxZdbSQ5VoBD70/idP7jGD+fE0vTGrC66gcLwzMaGxlxjb
wm7M0IFAo8p0mcVMjdqpf/mgM19FIs8H1Xln7PuiGBP216d9th6hK8B1QSZw15GM
+nis+RMpgsrlWv3korvtiPix62xeCCVD4HRc9BK2+zR9sC/65WnSNhJ81FIbVyOf
ZKB9819lhYwhAZd7K+/++wKs49Cuqqzvet9f4qhITRiy0ELVUw==
-----END CERTIFICATE-----