Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa
File:                     581266ac-af97-4864-a566-36693b593269.roa (raw, json)
Hash identifier:          UBrxNy70iG8wHJPzScU8LRKsYCVViCcOIF9fiEW4mjU=
Subject key identifier:   B3:5F:F1:AE:39:C4:2D:5A:70:E7:F5:B1:9E:7A:37:10:D4:FD:3D:2B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4F9499BFED19167D639405A37A3AC2C18C620286
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa
Signing time:             Mon 26 Oct 2026 04:40:56 +0000
ROA not before:           Mon 26 Oct 2026 04:40:56 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:94:99:bf:ed:19:16:7d:63:94:05:a3:7a:3a:c2:c1:8c:62:02:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:56 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=e9a3341d22176f499b2454a6921d6bcc619e39089219568855ba23f7126b1d00, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:3d:45:9f:ae:b8:0e:a6:2c:2b:ff:cb:de:
                    5a:a5:cf:06:da:f7:e5:73:0c:56:5e:a1:f7:62:01:
                    34:f5:09:85:31:a9:b6:2b:fe:8a:20:37:e1:cc:34:
                    9c:8e:2d:24:1b:53:5e:5e:7e:01:e6:77:f3:d4:b5:
                    1e:26:ea:4c:24:ba:53:48:2d:8a:f4:6f:df:ab:98:
                    f3:16:6d:57:9a:69:42:a0:a6:df:4a:d4:24:4a:25:
                    a5:0b:1f:91:f4:20:7c:da:6c:be:56:a9:1e:50:0d:
                    46:b1:52:38:fe:43:f6:f8:94:ed:e1:39:9a:dc:b4:
                    5c:07:1f:50:ee:ea:28:36:ef:01:4a:7d:e4:5c:7f:
                    e4:18:3a:e9:4d:86:b2:8a:6b:e3:1d:65:4f:0c:f0:
                    f0:f3:02:1d:de:d0:5a:88:94:57:56:66:68:dd:f9:
                    c7:2d:b4:3a:03:ee:91:7f:92:c8:36:d7:b2:6a:83:
                    42:0d:ef:65:fe:4d:d8:98:6c:df:90:2d:eb:c3:47:
                    f8:71:d9:d1:7c:38:39:9e:04:8c:c0:22:8a:66:ee:
                    18:c4:2f:3a:d5:2b:08:62:84:7b:1f:0b:2d:15:50:
                    f4:83:dd:2b:d5:7b:8a:6a:a9:e9:f6:24:24:83:f4:
                    27:a0:d7:32:5d:3a:00:c7:8a:cc:ab:52:43:2b:1a:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5F:F1:AE:39:C4:2D:5A:70:E7:F5:B1:9E:7A:37:10:D4:FD:3D:2B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:0e:4d:35:70:20:fb:d4:5a:d9:83:71:43:a5:6f:47:2f:c8:
         b9:43:81:9a:e3:48:7b:70:55:cd:3f:43:e2:4a:2b:5e:d6:fe:
         aa:b4:c4:7b:08:33:72:25:a2:85:77:59:5f:97:e4:0e:ab:ad:
         36:ef:76:20:93:8d:b1:93:26:48:1a:a9:e9:97:ee:63:5e:f4:
         b2:31:45:79:03:c8:7a:af:d2:ae:ce:63:48:aa:20:13:5f:3c:
         a2:e4:91:de:32:a3:f7:4a:fe:a4:15:55:a2:f7:a2:a3:61:e0:
         0e:c2:67:7d:c5:fd:da:45:2f:68:94:24:ac:86:de:ea:b4:f5:
         10:25:4e:63:7a:58:7b:89:9d:1c:13:25:03:2d:59:36:67:fe:
         3e:26:c6:f9:63:ff:1f:51:c8:de:ff:a7:df:26:9b:26:5e:3b:
         f0:65:07:0c:5e:cc:00:51:bb:ee:61:02:c6:8c:22:9c:69:0a:
         4f:d6:73:31:ef:11:ae:86:ca:75:5c:fe:29:44:d0:90:6b:30:
         ae:e3:91:f7:55:de:59:12:9f:cb:59:53:10:ba:f4:f4:b5:c3:
         c6:8f:84:fc:57:7a:43:7a:48:30:7b:0c:61:77:68:ec:4c:22:
         ff:48:be:d8:f4:58:3f:9a:c9:a7:b4:ed:3d:ec:d8:10:a3:82:
         63:0d:57:b9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUT5SZv+0ZFn1jlAWjejrCwYxiAoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDQwNTZaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGU5YTMzNDFkMjIxNzZmNDk5YjI0NTRhNjkyMWQ2YmNjNjE5ZTM5MDg5MjE5
NTY4ODU1YmEyM2Y3MTI2YjFkMDAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMF6PUWfrrgOpiwr/8veWqXPBtr35XMMVl6h92IBNPUJhTGptiv+iiA34cw0
nI4tJBtTXl5+AeZ389S1HibqTCS6U0gtivRv36uY8xZtV5ppQqCm30rUJEolpQsf
kfQgfNpsvlapHlANRrFSOP5D9viU7eE5mty0XAcfUO7qKDbvAUp95Fx/5Bg66U2G
sopr4x1lTwzw8PMCHd7QWoiUV1ZmaN35xy20OgPukX+SyDbXsmqDQg3vZf5N2Jhs
35At68NH+HHZ0Xw4OZ4EjMAiimbuGMQvOtUrCGKEex8LLRVQ9IPdK9V7imqp6fYk
JIP0J6DXMl06AMeKzKtSQysaWdcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSzX/Gu
OcQtWnDn9bGeejcQ1P09KzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTgxMjY2YWMtYWY5Ny00ODY0LWE1NjYtMzY2OTNiNTkzMjY5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H+A
MA0GCSqGSIb3DQEBCwUAA4IBAQCzDk01cCD71FrZg3FDpW9HL8i5Q4Ga40h7cFXN
P0PiSite1v6qtMR7CDNyJaKFd1lfl+QOq60273Ygk42xkyZIGqnpl+5jXvSyMUV5
A8h6r9KuzmNIqiATXzyi5JHeMqP3Sv6kFVWi96KjYeAOwmd9xf3aRS9olCSsht7q
tPUQJU5jelh7iZ0cEyUDLVk2Z/4+Jsb5Y/8fUcje/6ffJpsmXjvwZQcMXswAUbvu
YQLGjCKcaQpP1nMx7xGuhsp1XP4pRNCQazCu45H3Vd5ZEp/LWVMQuvT0tcPGj4T8
V3pDekgwewxhd2jsTCL/SL7Y9Fg/msmntO097NgQo4JjDVe5
-----END CERTIFICATE-----