Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/505b5380-4fa1-409a-8880-8291d1b8b936.roa
File:                     505b5380-4fa1-409a-8880-8291d1b8b936.roa (raw, json)
Hash identifier:          FihM0BV+VRXkufu7/wVdIj/1Xd+lhqbhS+PqUJ1z0jw=
Subject key identifier:   94:39:F6:E9:C7:53:30:EC:A8:DB:BD:54:4A:B4:FC:4D:EF:C6:00:F5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       113E77AF0D167423D1B1BB673553C9D746882AE0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/505b5380-4fa1-409a-8880-8291d1b8b936.roa
Signing time:             Thu 12 Mar 2026 15:36:51 +0000
ROA not before:           Thu 12 Mar 2026 15:36:51 +0000
ROA not after:            Wed 10 Jun 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d05a:a0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3e:77:af:0d:16:74:23:d1:b1:bb:67:35:53:c9:d7:46:88:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 12 15:36:51 2026 GMT
            Not After : Jun 10 23:59:59 2026 GMT
        Subject: serialNumber=da252a59a26c8405b83e746bc1ca0f026a5a3d5fa17f577b747dfc9f341f26da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:cb:67:62:6b:11:33:ea:d5:2b:fa:97:45:
                    b7:01:e2:a3:3e:22:15:18:c6:49:fd:e1:d4:23:a3:
                    f9:79:7c:2e:e2:ad:d7:74:8c:2c:f6:d9:04:f0:6f:
                    1a:2c:8c:5d:0d:5c:55:4d:2f:b1:f8:9c:83:df:c3:
                    e5:8c:da:69:18:41:1f:49:03:3f:66:51:59:31:2f:
                    1d:2c:f3:64:40:17:19:a4:4e:a9:97:ce:90:73:26:
                    e6:6a:3f:8c:d2:9e:cd:1a:a2:aa:50:91:93:5e:c1:
                    a9:a3:29:2e:af:15:74:21:02:f9:4e:18:24:dc:e8:
                    17:2f:ab:3b:32:e9:73:7f:ab:fb:c6:21:12:0f:fd:
                    2d:b5:3b:34:a8:fc:79:7f:ea:33:f8:e0:b6:c9:9a:
                    ab:ad:c9:73:9a:85:b8:8d:9d:4f:90:9b:98:bf:86:
                    5f:5b:58:b1:76:c5:c3:2b:fd:64:24:83:7d:72:ba:
                    1c:16:be:bf:fd:9a:42:0f:dc:b7:86:ef:37:9b:42:
                    92:45:77:b1:52:19:69:b7:c1:3e:52:f7:74:70:28:
                    1f:ee:1c:14:d7:14:e5:a5:df:d5:08:ae:1c:5c:0f:
                    92:07:f2:34:6f:f1:5d:b0:c8:fe:e6:4a:37:9a:92:
                    ab:fd:ff:7a:19:b5:92:5e:46:4c:7c:c4:75:e2:cc:
                    7d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:39:F6:E9:C7:53:30:EC:A8:DB:BD:54:4A:B4:FC:4D:EF:C6:00:F5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/505b5380-4fa1-409a-8880-8291d1b8b936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d05a:a0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:12:42:4c:08:88:83:81:0b:8c:44:54:f9:51:09:97:70:14:
         04:36:6b:0c:df:98:f5:c0:04:ef:40:eb:0c:ff:b2:fb:eb:20:
         f5:3a:c1:56:7d:22:a9:bc:a9:a5:1a:7c:e2:cf:cd:ff:e0:87:
         f1:55:6e:9e:bc:51:6e:4c:55:c4:67:e6:14:de:09:af:b3:a2:
         09:09:00:2e:77:c0:92:6f:e7:f9:a7:0a:26:d7:74:8a:e0:4f:
         f9:f8:6b:5e:fb:81:1f:66:1a:dd:45:7e:cc:06:04:70:64:17:
         90:8f:db:17:7e:87:b5:f1:bb:a3:af:1e:2b:46:10:66:8e:5f:
         7a:96:a0:b4:f1:9e:be:d0:b7:40:95:4d:34:3b:81:fa:18:dc:
         f0:a8:3d:6c:3e:f4:81:1e:ce:c3:f0:b8:1f:0f:e7:aa:e0:e3:
         5d:91:05:9c:ac:78:03:88:ce:96:0e:a8:7b:73:45:f7:c9:7b:
         d9:52:a4:2f:13:6e:80:09:90:31:9f:2f:99:18:1a:e6:4f:8e:
         0c:6b:f2:dc:7c:f1:25:a8:50:7a:c4:33:a8:52:8d:02:98:62:
         09:cf:50:8a:78:1f:16:9d:fb:f8:1e:27:6d:ab:2f:1f:eb:48:
         c6:6d:53:62:5e:84:4d:3a:68:e3:0a:f3:6d:ec:7b:1d:9f:43:
         34:1d:4e:1c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUET53rw0WdCPRsbtnNVPJ10aIKuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAzMTIxNTM2NTFaFw0yNjA2MTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGRhMjUyYTU5YTI2Yzg0MDViODNlNzQ2YmMxY2EwZjAyNmE1YTNkNWZhMTdm
NTc3Yjc0N2RmYzlmMzQxZjI2ZGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANZey2diaxEz6tUr+pdFtwHioz4iFRjGSf3h1COj+Xl8LuKt13SMLPbZBPBv
GiyMXQ1cVU0vsficg9/D5YzaaRhBH0kDP2ZRWTEvHSzzZEAXGaROqZfOkHMm5mo/
jNKezRqiqlCRk17BqaMpLq8VdCEC+U4YJNzoFy+rOzLpc3+r+8YhEg/9LbU7NKj8
eX/qM/jgtsmaq63Jc5qFuI2dT5CbmL+GX1tYsXbFwyv9ZCSDfXK6HBa+v/2aQg/c
t4bvN5tCkkV3sVIZabfBPlL3dHAoH+4cFNcU5aXf1QiuHFwPkgfyNG/xXbDI/uZK
N5qSq/3/ehm1kl5GTHzEdeLMfbcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSUOfbp
x1Mw7KjbvVRKtPxN78YA9TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTA1YjUzODAtNGZhMS00MDlhLTg4ODAtODI5MWQxYjhiOTM2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Fqg
wDANBgkqhkiG9w0BAQsFAAOCAQEAJhJCTAiIg4ELjERU+VEJl3AUBDZrDN+Y9cAE
70DrDP+y++sg9TrBVn0iqbyppRp84s/N/+CH8VVunrxRbkxVxGfmFN4Jr7OiCQkA
LnfAkm/n+acKJtd0iuBP+fhrXvuBH2Ya3UV+zAYEcGQXkI/bF36HtfG7o68eK0YQ
Zo5fepagtPGevtC3QJVNNDuB+hjc8Kg9bD70gR7Ow/C4Hw/nquDjXZEFnKx4A4jO
lg6oe3NF98l72VKkLxNugAmQMZ8vmRga5k+ODGvy3HzxJahQesQzqFKNAphiCc9Q
ingfFp37+B4nbasvH+tIxm1TYl6ETTpo4wrzbex7HZ9DNB1OHA==
-----END CERTIFICATE-----