Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa
File:                     357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa (raw, json)
Hash identifier:          Eyrv7KHB5p/Lmzr/uU/V0OD5yR/HetyjUSokJ5kuo5o=
Subject key identifier:   4E:64:07:57:D6:B0:D6:74:07:31:51:B4:1E:38:11:34:A6:1D:D5:6D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       61527652B0239C144924B492D1587557282FE26B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa
Signing time:             Mon 26 Oct 2026 05:20:19 +0000
ROA not before:           Mon 26 Oct 2026 05:20:19 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:52:76:52:b0:23:9c:14:49:24:b4:92:d1:58:75:57:28:2f:e2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:20:19 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=6b04f897f995e5d8b64e88cd7a7af1520365136393f80d55637425412a56752c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:00:9d:c0:9e:2d:b8:35:67:eb:19:2b:90:
                    5b:d1:24:11:c7:01:95:73:69:98:71:01:a1:78:3d:
                    27:f7:0e:b2:00:d5:ef:c8:c5:bc:e1:8e:8e:e9:a2:
                    94:9a:51:e3:d6:9d:6c:70:1c:77:e2:73:76:84:e8:
                    5d:4c:42:c5:bf:d6:d3:29:7d:97:f5:ca:f3:fc:6b:
                    14:be:dc:24:06:ab:1f:8a:1a:99:d4:a6:30:a3:c9:
                    49:4d:14:45:ba:66:31:0b:1a:27:71:dd:60:06:8b:
                    88:2c:5f:f0:61:eb:72:2a:3a:7e:79:11:f3:cb:a4:
                    d0:f6:92:e6:63:c3:df:8f:95:97:8a:1a:e3:2e:ac:
                    86:e9:ed:61:a4:e1:a1:e0:86:07:ff:87:a6:ac:c4:
                    a6:36:a3:59:f3:ae:5c:88:a3:2e:44:99:5a:84:df:
                    b9:1c:9e:aa:3a:a2:a9:f3:0a:b2:03:ff:8c:8a:2b:
                    24:fa:30:80:5b:b1:eb:aa:ed:d0:ee:f8:5e:22:3c:
                    8c:e8:f0:c6:28:e0:09:20:29:22:89:e8:57:94:de:
                    da:25:68:11:f3:31:63:8a:50:fb:76:94:7f:d5:cd:
                    a0:db:e6:74:46:83:e6:6a:6f:7c:b2:ca:0e:2d:7d:
                    86:b2:7b:f0:0b:01:29:81:ef:54:40:1d:5c:a5:04:
                    8a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:64:07:57:D6:B0:D6:74:07:31:51:B4:1E:38:11:34:A6:1D:D5:6D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:5c:a6:fe:b5:e3:b4:b0:73:78:4b:d9:a2:75:04:69:1e:43:
         53:fb:e9:f7:f7:83:1c:0c:f2:9a:6b:3f:54:df:3d:74:6a:f5:
         18:ff:2c:19:03:a3:6f:f7:5b:d1:97:b2:80:eb:32:24:ce:81:
         32:2d:66:c4:40:8b:d2:fe:4e:c8:36:82:87:c4:88:04:dd:3f:
         f4:fa:a8:83:18:9c:43:04:8f:99:56:14:85:4d:da:e9:2e:a6:
         1b:5b:3e:b3:14:4b:18:70:0c:73:15:a3:b2:ba:94:ee:94:d9:
         e5:26:c1:47:81:4a:92:71:c1:3d:32:68:79:b8:c9:79:33:2d:
         86:d0:c5:74:fe:20:c2:d0:3e:49:9e:25:73:6e:69:da:44:ba:
         c4:84:ae:54:ad:23:d3:23:ea:44:56:95:04:9b:ba:d0:33:a3:
         c5:1a:0b:e8:c2:c3:0e:16:27:ce:f2:ab:b1:fc:b6:0f:3e:40:
         f7:db:bb:e1:aa:57:1c:26:ba:93:5a:e9:f1:c8:10:7d:2c:3b:
         38:38:51:44:94:36:8a:40:07:9d:76:89:50:c1:42:88:73:5b:
         0a:d1:99:20:0c:0d:ac:2f:23:02:de:d4:ee:d7:21:51:ed:33:
         79:3e:ff:80:2a:26:80:21:1c:16:6d:de:7f:f3:b5:f5:93:2f:
         da:5f:e5:9f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUYVJ2UrAjnBRJJLSS0Vh1Vygv4mswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTIwMTlaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDZiMDRmODk3Zjk5NWU1ZDhiNjRlODhjZDdhN2FmMTUyMDM2NTEzNjM5M2Y4
MGQ1NTYzNzQyNTQxMmE1Njc1MmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL6iAJ3Ani24NWfrGSuQW9EkEccBlXNpmHEBoXg9J/cOsgDV78jFvOGOjumi
lJpR49adbHAcd+JzdoToXUxCxb/W0yl9l/XK8/xrFL7cJAarH4oamdSmMKPJSU0U
RbpmMQsaJ3HdYAaLiCxf8GHrcio6fnkR88uk0PaS5mPD34+Vl4oa4y6shuntYaTh
oeCGB/+HpqzEpjajWfOuXIijLkSZWoTfuRyeqjqiqfMKsgP/jIorJPowgFux66rt
0O74XiI8jOjwxijgCSApIonoV5Te2iVoEfMxY4pQ+3aUf9XNoNvmdEaD5mpvfLLK
Di19hrJ78AsBKYHvVEAdXKUEikkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBROZAdX
1rDWdAcxUbQeOBE0ph3VbTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzU3YzY2MjItOTE2MS00NGQ3LWFiMTMtNmVhNmUwYmVkMmU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HIQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC/XKb+teO0sHN4S9midQRpHkNT++n394McDPKa
az9U3z10avUY/ywZA6Nv91vRl7KA6zIkzoEyLWbEQIvS/k7INoKHxIgE3T/0+qiD
GJxDBI+ZVhSFTdrpLqYbWz6zFEsYcAxzFaOyupTulNnlJsFHgUqSccE9Mmh5uMl5
My2G0MV0/iDC0D5JniVzbmnaRLrEhK5UrSPTI+pEVpUEm7rQM6PFGgvowsMOFifO
8qux/LYPPkD327vhqlccJrqTWunxyBB9LDs4OFFElDaKQAeddolQwUKIc1sK0Zkg
DA2sLyMC3tTu1yFR7TN5Pv+AKiaAIRwWbd5/87X1ky/aX+Wf
-----END CERTIFICATE-----