Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ba54e4f-0294-4e83-8037-7d266c37f0c9.roa
File:                     4ba54e4f-0294-4e83-8037-7d266c37f0c9.roa (raw, json)
Hash identifier:          nj5/9PReLvK6C5NSjqr7CsYy5gmQKk5cr9P4Rri7Mag=
Subject key identifier:   C5:D9:2A:99:60:0E:57:84:0C:56:C1:B9:4A:F2:86:48:79:07:BD:3B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2221917C7716F4FDE01F7318F50438A5175721B4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ba54e4f-0294-4e83-8037-7d266c37f0c9.roa
Signing time:             Thu 30 Jul 2026 01:40:34 +0000
ROA not before:           Thu 30 Jul 2026 01:40:34 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d030:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:21:91:7c:77:16:f4:fd:e0:1f:73:18:f5:04:38:a5:17:57:21:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 30 01:40:34 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=05bf0674069cf83cef2660dc02aab5a1f839a2aa3890cc852552e57629818b84, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:87:9e:08:2a:85:40:0d:a6:0a:b9:2e:d9:
                    76:0a:5a:47:ac:43:b5:e7:24:00:73:0d:f4:f9:0a:
                    f2:48:27:58:0a:03:e6:9d:c3:7c:a8:67:28:59:82:
                    7a:a3:cc:e9:cf:a6:d6:8c:63:4a:f8:76:90:f9:ff:
                    e0:c9:a6:73:af:b5:4c:c7:1a:23:f6:05:de:ce:74:
                    ff:08:49:e9:6f:ae:f3:8d:e6:e5:86:04:af:cf:e1:
                    f9:0a:7b:09:8e:c2:31:e1:fd:0f:0d:11:42:3e:04:
                    f8:5c:bf:3d:92:2a:7b:13:6b:d4:8a:ae:ee:e0:32:
                    6f:df:d8:b6:3f:58:ac:08:78:41:d9:48:f4:74:ee:
                    dc:11:c4:2c:d4:13:d4:0f:80:0c:89:62:02:05:af:
                    f2:f2:2b:a7:48:50:bb:6a:53:f8:43:4f:b4:5a:a4:
                    b4:5d:0e:3a:26:f6:25:d7:12:8d:26:a3:f5:65:a9:
                    9c:1e:95:10:05:80:22:4c:f6:b6:bd:49:7c:d6:40:
                    bb:75:e3:46:77:51:e8:29:1f:a8:ae:8d:44:51:65:
                    d6:85:90:05:d5:12:b1:d8:c7:93:c1:85:8a:a4:2d:
                    10:aa:03:5c:a7:39:23:b6:a8:cd:52:89:1b:9e:55:
                    09:3b:61:48:44:55:a2:dd:95:5b:e4:cf:4c:24:97:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D9:2A:99:60:0E:57:84:0C:56:C1:B9:4A:F2:86:48:79:07:BD:3B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ba54e4f-0294-4e83-8037-7d266c37f0c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d030:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:73:2e:db:d7:94:16:c0:43:de:27:66:20:e9:fb:c6:58:cd:
         18:4e:c1:6a:95:25:5f:8e:a1:dd:3a:cf:59:e6:7b:5f:35:ee:
         3e:0c:3c:35:bb:65:fe:a3:e5:78:43:c4:82:5b:aa:da:84:81:
         67:9b:64:bf:83:45:22:b8:0e:38:d5:d6:46:52:5a:08:f4:e4:
         3d:e5:36:5d:25:18:72:83:06:8b:6f:e2:aa:c9:bb:cf:02:29:
         43:7b:7f:11:f9:1b:fa:fc:0b:11:75:73:90:3b:b0:d7:bb:29:
         88:27:32:1a:5e:d4:a7:10:78:41:e3:f7:06:f8:2b:de:dd:51:
         f5:80:b9:fe:04:55:26:01:10:e0:39:ec:d2:0a:48:15:76:40:
         d1:16:ba:ed:22:75:e6:46:b7:e1:07:91:3f:92:df:44:ab:cd:
         c2:8a:36:01:62:60:85:26:15:90:14:76:0d:f2:57:b4:a8:2c:
         ce:3c:f3:0e:12:70:c4:61:69:14:f8:ed:8c:49:16:00:b8:57:
         fb:17:b9:59:c0:c7:c1:47:a9:3e:62:a9:8e:e1:bc:7f:6b:7d:
         ad:25:8d:73:8d:d4:f4:24:3e:db:a8:ba:88:bf:38:4b:c3:ae:
         62:b7:3e:ea:ce:40:d5:b4:8f:71:7b:7a:7e:85:a8:b5:06:2f:
         75:2c:37:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----