Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ba54e4f-0294-4e83-8037-7d266c37f0c9.roa
File:                     4ba54e4f-0294-4e83-8037-7d266c37f0c9.roa (raw, json)
Hash identifier:          bj5/8tZqr0J1x2RPAKbsOsWLRVYQLOHKNuEpO9HHsKY=
Subject key identifier:   D8:DE:32:CE:04:52:AC:BB:F9:8A:3E:6E:93:C7:07:43:6B:B5:6F:A3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4E1922E4446C2045E2E37E0E5589538334B485A9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ba54e4f-0294-4e83-8037-7d266c37f0c9.roa
Signing time:             Sun 18 Oct 2026 01:30:23 +0000
ROA not before:           Sun 18 Oct 2026 01:30:23 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d030:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:19:22:e4:44:6c:20:45:e2:e3:7e:0e:55:89:53:83:34:b4:85:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 18 01:30:23 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=1fa072788a8ef320a81a801861f4b1fb04b4655e2b46a07fee461027c4bf5d97, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:30:06:18:b3:bf:0f:b3:80:c4:75:53:10:
                    33:a5:68:69:dd:1c:ef:6f:f7:86:2f:6d:99:0c:c2:
                    15:7b:84:07:c1:95:a4:f4:ba:ba:c0:83:80:aa:8a:
                    97:0e:c6:1e:58:38:52:40:f8:cd:30:6a:77:59:a2:
                    6e:fa:a0:b0:a9:8d:2c:a8:5a:28:37:a4:f2:a6:cf:
                    e4:4c:eb:2c:65:3d:42:55:ea:f2:2f:e1:e8:65:0f:
                    5a:95:1a:8a:84:e5:f4:0f:7e:21:85:37:0b:b3:66:
                    3a:b2:af:3e:08:05:2b:2e:56:4a:73:df:f2:32:c0:
                    11:67:4b:65:e0:78:6f:6a:67:c4:2c:b3:0b:41:7b:
                    59:df:a3:6c:1a:f5:42:ce:b8:63:28:2b:55:a8:f0:
                    2b:bd:56:e1:0d:f0:a4:75:fb:b7:11:6f:21:11:e9:
                    f1:fc:cf:f2:87:c2:47:2c:ab:59:08:a9:f7:4b:c5:
                    89:21:10:50:bb:2f:0b:e6:63:97:1b:41:8d:c4:49:
                    10:dc:b1:d9:f4:ac:62:f2:71:4f:d8:fa:66:31:bb:
                    0c:41:cb:f8:3f:2e:18:fd:fc:09:71:88:f2:5c:38:
                    0b:b0:a8:63:b6:9f:d3:59:6b:ca:3d:6e:68:33:d1:
                    74:83:e8:d9:1b:5a:9e:6f:df:c5:df:f3:4a:b2:d3:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DE:32:CE:04:52:AC:BB:F9:8A:3E:6E:93:C7:07:43:6B:B5:6F:A3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ba54e4f-0294-4e83-8037-7d266c37f0c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d030:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:de:4b:dd:49:f1:1d:42:7f:f2:ea:b7:42:ce:8a:14:f2:cc:
         1f:05:16:8c:ce:49:bf:2b:46:ca:f9:67:e9:1a:25:5d:f4:ea:
         b0:34:6d:4d:93:8b:01:8f:cf:78:46:5c:37:3d:a2:2e:d1:66:
         20:12:d8:57:17:f2:38:5d:02:1f:a9:f1:f1:8a:c9:05:db:88:
         b2:d3:7b:28:7c:16:47:de:59:63:28:e8:ac:4e:ee:df:ba:31:
         39:51:8a:30:c2:98:62:da:b3:42:ed:e4:52:4d:cc:6b:c2:4a:
         c6:27:8c:0c:da:a5:24:4d:dc:54:19:34:db:e3:ef:c1:86:d4:
         0f:a2:7d:b1:3c:6f:52:41:dd:f0:95:9c:f6:f1:a5:ae:35:22:
         6b:3e:30:9e:0a:df:fe:34:00:30:d5:25:29:e9:52:68:a4:49:
         cf:9d:a6:06:05:ce:36:54:24:8d:d6:c4:38:dc:08:82:05:12:
         0b:61:b9:c7:3e:81:3c:c0:c9:c9:e1:bc:b8:e4:9c:ee:a4:b6:
         8a:33:e6:7c:d6:0e:d1:bd:44:8c:07:15:48:36:8b:c9:e4:d6:
         1b:26:03:2f:53:79:08:1e:6c:61:2b:d5:c0:59:1c:60:23:d5:
         20:bc:10:91:00:6e:c9:74:db:eb:32:c2:af:e5:3f:8b:c5:34:
         8e:f7:9f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----