Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/541034be-1844-4bf7-9c43-91bf5b83fa3d.roa
File:                     541034be-1844-4bf7-9c43-91bf5b83fa3d.roa (raw, json)
Hash identifier:          paNkNZssb6FRiKBx/cXN+V7CBTp8AtPV4TUhYX3H5kg=
Subject key identifier:   CB:2B:42:EB:42:55:43:3D:6D:11:BF:74:B7:AC:CC:A9:8A:37:37:BC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       538B9921BB0A2A96D86CE41A616F935D968A9257
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/541034be-1844-4bf7-9c43-91bf5b83fa3d.roa
Signing time:             Thu 30 Jul 2026 01:40:49 +0000
ROA not before:           Thu 30 Jul 2026 01:40:49 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d076:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8b:99:21:bb:0a:2a:96:d8:6c:e4:1a:61:6f:93:5d:96:8a:92:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 30 01:40:49 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=87a389722c52058b5a91f6e7e9d21c19f636917fe8c7b6b35ed439bb858e6716, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:d6:3d:8d:77:77:04:25:aa:97:b2:6c:ea:
                    f8:20:a0:d1:c6:cc:ab:1b:f5:a9:d9:b4:a9:f9:7f:
                    3a:fe:8b:93:57:5c:a9:b8:f4:11:3c:55:77:6e:93:
                    29:5d:78:fc:d2:69:1e:00:cb:43:fc:e2:4a:9a:fd:
                    a0:e5:05:f4:89:8f:4d:17:0f:f6:fe:d9:c8:ae:57:
                    21:ce:f3:73:59:df:0b:0c:57:f5:b5:83:7b:7b:be:
                    2c:fa:13:8a:60:e2:e2:2f:40:f1:72:e1:ec:c8:e1:
                    14:c2:4c:4a:92:31:a8:e8:e4:3a:1c:41:61:33:9b:
                    02:f8:15:24:f4:39:c9:99:d7:ba:8c:30:46:f0:15:
                    9b:66:9c:b3:62:35:bb:17:e3:31:08:cd:98:11:33:
                    21:fa:19:e1:88:a2:22:aa:a9:74:db:2e:35:76:ad:
                    b9:48:b8:a2:c4:b1:ab:32:17:bb:65:e7:87:d7:23:
                    f7:b2:ee:dd:2c:de:64:72:85:91:76:4b:63:6a:b5:
                    06:0d:0f:e9:37:f8:4f:0f:e3:c4:3a:e2:d7:c6:cb:
                    7d:83:85:3f:56:19:6e:f0:a0:51:e4:9b:6e:8b:f5:
                    d3:67:4a:85:33:86:4e:31:0a:46:b2:ad:3b:f4:5e:
                    ac:9f:b6:7e:55:51:d1:69:14:8e:34:57:f0:f6:6b:
                    91:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2B:42:EB:42:55:43:3D:6D:11:BF:74:B7:AC:CC:A9:8A:37:37:BC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/541034be-1844-4bf7-9c43-91bf5b83fa3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d076:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:a9:5d:fe:bf:17:b9:f9:84:72:24:16:35:e4:b2:20:29:b7:
         c6:ce:6f:78:7b:ac:04:1b:d2:cd:1c:ec:59:fe:a5:79:f1:07:
         4d:33:f9:9a:08:e4:64:10:c6:61:f5:7b:c1:e7:b9:ec:f9:9d:
         6f:ad:71:dc:45:62:46:f9:e9:91:7b:ec:73:32:3e:fb:99:8c:
         41:54:7a:f9:32:05:e4:65:fd:dc:ce:cb:61:00:b0:c6:7e:02:
         4c:a7:db:77:f1:28:c3:df:54:b2:11:c8:bf:cb:96:54:ee:b7:
         e6:3d:bb:b7:8c:2d:76:51:b2:5b:5f:b8:c9:21:43:7e:f1:2c:
         63:cc:e5:81:3c:84:d1:31:a9:97:1a:1e:be:ba:ef:0f:be:68:
         52:55:2e:2e:f9:53:d6:42:2c:c4:86:ae:56:37:5b:0e:11:04:
         a8:b4:d3:25:14:99:3e:23:34:b9:51:fa:d0:5c:07:91:eb:a7:
         04:09:8c:05:08:66:21:f6:70:19:e8:dc:7c:81:4f:74:ba:4c:
         10:d3:52:69:90:e5:a0:6a:fe:c9:d2:a2:97:c1:13:5f:6b:99:
         1a:7e:b3:6b:be:8e:a4:8f:4c:4d:36:d2:a5:59:6e:1a:e6:18:
         88:8f:e0:3a:06:28:90:c7:9f:e3:4d:f2:4d:6f:3c:a4:52:ce:
         e2:bf:b1:65
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUU4uZIbsKKpbYbOQaYW+TXZaKklcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MzAwMTQwNDlaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQDg3YTM4OTcyMmM1MjA1OGI1YTkxZjZlN2U5ZDIxYzE5ZjYzNjkxN2ZlOGM3
YjZiMzVlZDQzOWJiODU4ZTY3MTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALhZ1j2Nd3cEJaqXsmzq+CCg0cbMqxv1qdm0qfl/Ov6Lk1dcqbj0ETxVd26T
KV14/NJpHgDLQ/ziSpr9oOUF9ImPTRcP9v7ZyK5XIc7zc1nfCwxX9bWDe3u+LPoT
imDi4i9A8XLh7MjhFMJMSpIxqOjkOhxBYTObAvgVJPQ5yZnXuowwRvAVm2acs2I1
uxfjMQjNmBEzIfoZ4YiiIqqpdNsuNXatuUi4osSxqzIXu2Xnh9cj97Lu3SzeZHKF
kXZLY2q1Bg0P6Tf4Tw/jxDri18bLfYOFP1YZbvCgUeSbbov102dKhTOGTjEKRrKt
O/RerJ+2flVR0WkUjjRX8PZrkQcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTLK0Lr
QlVDPW0Rv3S3rMypijc3vDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTQxMDM0YmUtMTg0NC00YmY3LTljNDMtOTFiZjViODNmYTNkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HaA
MA0GCSqGSIb3DQEBCwUAA4IBAQDDqV3+vxe5+YRyJBY15LIgKbfGzm94e6wEG9LN
HOxZ/qV58QdNM/maCORkEMZh9XvB57ns+Z1vrXHcRWJG+emRe+xzMj77mYxBVHr5
MgXkZf3czsthALDGfgJMp9t38SjD31SyEci/y5ZU7rfmPbu3jC12UbJbX7jJIUN+
8SxjzOWBPITRMamXGh6+uu8PvmhSVS4u+VPWQizEhq5WN1sOEQSotNMlFJk+IzS5
UfrQXAeR66cECYwFCGYh9nAZ6Nx8gU90ukwQ01JpkOWgav7J0qKXwRNfa5kafrNr
vo6kj0xNNtKlWW4a5hiIj+A6BiiQx5/jTfJNbzykUs7iv7Fl
-----END CERTIFICATE-----