Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
File:                     4cb86308-98a0-48e5-8825-d398c0ce8099.roa (raw, json)
Hash identifier:          UlkTmPSL0AQnPiLsbk5gTP/3mYXmMwvpILHNATYpGbY=
Subject key identifier:   88:6D:54:B9:7F:43:8D:A2:97:CC:40:A3:55:55:88:ED:D6:81:68:48
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6DEB67FA881E1BA38E2C6E0FF8B56388E428451D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
Signing time:             Mon 26 Oct 2026 05:30:50 +0000
ROA not before:           Mon 26 Oct 2026 05:30:50 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:5080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:eb:67:fa:88:1e:1b:a3:8e:2c:6e:0f:f8:b5:63:88:e4:28:45:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:30:50 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=d416c506837040b576d490cf49f49a147b26a7c0471a412f5d7d76f921aa93cd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:d3:f6:49:d0:5e:a4:f4:d4:91:b1:e0:46:
                    8a:4d:21:6a:c6:18:96:6d:c8:a2:03:d1:63:35:f5:
                    6f:56:b2:6e:62:ff:29:c1:a4:ae:a6:0b:45:5f:d4:
                    6c:ab:a9:84:5d:ec:05:79:05:af:48:6d:34:57:f6:
                    9b:b2:50:c8:ce:4c:72:0a:03:f9:c6:b6:ae:a8:93:
                    a3:ad:9f:2a:26:ed:6f:bb:a5:79:4f:e9:c8:9d:5d:
                    06:1b:a2:c9:d8:fa:73:84:bc:ad:d3:67:ec:59:0c:
                    9f:39:8e:3b:db:f7:6f:c2:0e:da:3e:18:ce:1a:54:
                    4e:5e:6e:20:ae:39:2d:f9:54:7b:ab:ed:83:1a:fd:
                    f7:c0:ac:3c:66:8c:f3:61:8c:11:cb:1e:e1:52:1e:
                    e9:09:ac:5c:73:56:d4:49:0c:ca:cf:1b:4d:27:c1:
                    90:f0:fd:98:68:25:b9:92:a9:e9:1c:dd:5a:81:dc:
                    14:ad:79:4c:46:03:46:bb:fd:61:8e:9a:f2:3c:67:
                    35:fb:f3:bd:15:84:b1:03:82:09:31:6c:f3:0a:65:
                    1a:3c:bb:c2:66:7f:f2:2e:c1:80:a0:ba:f3:13:b7:
                    49:09:39:40:33:fb:a0:ba:64:df:cd:dc:77:f4:a9:
                    af:e8:87:20:b7:5c:5f:cc:73:7c:74:b8:1a:d5:75:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6D:54:B9:7F:43:8D:A2:97:CC:40:A3:55:55:88:ED:D6:81:68:48
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:5080::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:6b:e8:19:ad:f2:0f:62:c2:af:0b:e0:64:60:66:78:fe:8f:
         72:4b:1d:ee:3b:03:a8:8e:c4:9f:2e:03:71:4e:b1:bc:3c:fc:
         e5:1b:c4:aa:1b:aa:73:64:60:64:43:e6:f3:69:7f:81:c0:2b:
         98:4f:59:c0:f4:9f:7d:4a:8b:21:18:9c:b2:1d:ee:81:e7:c1:
         0d:4c:7b:5d:bc:a8:4c:82:3e:4f:6e:c6:91:1c:27:8a:82:91:
         33:7a:6e:2a:f5:4a:b4:3f:ee:eb:58:08:76:2b:55:82:c2:e0:
         ab:a7:1a:dd:c1:a9:ae:ea:ab:96:09:b8:e0:f3:b2:7d:19:8c:
         c7:21:51:07:dc:84:a5:0b:f5:c7:1e:dc:5b:a3:88:b8:a1:c7:
         49:ff:f7:7a:ec:cf:af:13:ba:ef:47:8e:2f:00:91:26:e4:f1:
         e5:47:c7:85:15:f2:1e:67:fd:46:e7:12:37:c4:1a:a7:51:57:
         ef:4f:fc:4d:c2:bd:f1:a7:e1:d9:7d:ff:a2:7e:5f:d2:e0:fc:
         2b:7a:79:f6:0b:b5:6a:51:9e:33:2d:bf:e8:fb:d7:28:fd:39:
         2c:95:14:f3:a1:66:1b:e6:98:5d:dd:3a:22:d4:3a:ef:e6:e9:
         e3:f6:b5:c4:22:b9:ab:f2:c8:48:22:64:07:24:03:3e:41:6b:
         01:35:e1:5b
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUbetn+ogeG6OOLG4P+LVjiOQoRR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTMwNTBaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ0MTZjNTA2ODM3MDQwYjU3NmQ0OTBjZjQ5ZjQ5YTE0N2IyNmE3YzA0NzFh
NDEyZjVkN2Q3NmY5MjFhYTkzY2QxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMGH0/ZJ0F6k9NSRseBGik0hasYYlm3IogPRYzX1b1aybmL/KcGkrqYLRV/U
bKuphF3sBXkFr0htNFf2m7JQyM5McgoD+ca2rqiTo62fKibtb7uleU/pyJ1dBhui
ydj6c4S8rdNn7FkMnzmOO9v3b8IO2j4YzhpUTl5uIK45LflUe6vtgxr998CsPGaM
82GMEcse4VIe6QmsXHNW1EkMys8bTSfBkPD9mGgluZKp6RzdWoHcFK15TEYDRrv9
YY6a8jxnNfvzvRWEsQOCCTFs8wplGjy7wmZ/8i7BgKC68xO3SQk5QDP7oLpk383c
d/Spr+iHILdcX8xzfHS4GtV1Z3MCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSIbVS5
f0ONopfMQKNVVYjt1oFoSDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGNiODYzMDgtOThhMC00OGU1LTg4MjUtZDM5OGMwY2U4MDk5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAfGvoGa3yD2LCrwvgZGBmeP6Pcksd7jsDqI7E
ny4DcU6xvDz85RvEqhuqc2RgZEPm82l/gcArmE9ZwPSffUqLIRicsh3ugefBDUx7
XbyoTII+T27GkRwnioKRM3puKvVKtD/u61gIditVgsLgq6ca3cGpruqrlgm44POy
fRmMxyFRB9yEpQv1xx7cW6OIuKHHSf/3euzPrxO670eOLwCRJuTx5UfHhRXyHmf9
RucSN8Qap1FX70/8TcK98afh2X3/on5f0uD8K3p59gu1alGeMy2/6PvXKP05LJUU
86FmG+aYXd06ItQ67+bp4/a1xCK5q/LISCJkByQDPkFrATXhWw==
-----END CERTIFICATE-----