Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cf2d254-ab7b-4496-b552-7f078de84e21.roa
File:                     5cf2d254-ab7b-4496-b552-7f078de84e21.roa (raw, json)
Hash identifier:          sHbpks1VzH0GbKyK1jcBzXUAZQn+TOOtXu62zEX5yjg=
Subject key identifier:   F6:8B:2F:73:C7:EC:BE:E9:3A:5E:56:F9:AD:5C:14:89:22:B6:85:C5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       205EB017ED4C6BCAD72459717E1EFF6D6B7B1C25
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cf2d254-ab7b-4496-b552-7f078de84e21.roa
Signing time:             Wed 19 Aug 2026 01:10:08 +0000
ROA not before:           Wed 19 Aug 2026 01:10:08 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5e:b0:17:ed:4c:6b:ca:d7:24:59:71:7e:1e:ff:6d:6b:7b:1c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 01:10:08 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=b0db95a70ed177514889eaca9095429bbc3298a5b30de58382d1da332566adee, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:a7:2a:e0:3d:6b:60:fa:ca:86:3e:3c:7f:
                    bc:96:73:3a:21:f0:f1:7b:b5:4b:b9:aa:4e:d4:d6:
                    ae:39:60:65:5f:8b:dd:0a:ca:4c:3e:f2:a9:41:24:
                    0c:c4:21:27:f7:88:cf:33:df:1b:2f:04:e3:f0:b1:
                    65:2a:aa:e8:f2:47:ce:d4:77:3d:b1:3f:73:0b:e6:
                    d9:85:d6:6c:dd:03:16:4d:fc:5f:af:0d:01:b6:8f:
                    50:a9:09:65:77:22:1d:f3:cc:37:83:1b:dc:ab:fe:
                    79:a0:81:9d:7f:7d:81:50:4f:64:e8:c3:56:20:5f:
                    c8:8b:a4:c2:e8:cd:76:0d:25:ec:f5:db:06:27:d4:
                    12:72:28:84:a6:f5:57:81:95:61:92:6b:eb:6b:af:
                    ac:9a:20:8b:bb:0e:63:a9:7a:46:b6:b6:b4:67:b5:
                    9b:64:e1:a5:85:4a:4b:de:6b:12:70:55:7a:91:df:
                    28:83:a4:84:1b:ad:ef:4e:59:c8:b6:8b:38:c6:77:
                    9b:72:a3:50:c9:69:20:4f:ac:9e:25:50:e8:10:08:
                    63:2f:c9:9f:40:70:e5:5e:c1:ff:01:24:42:5e:5d:
                    9a:58:f5:89:93:10:68:6c:69:62:dc:fd:62:b5:05:
                    7f:25:37:ca:54:d3:d8:62:13:0e:84:df:b7:a6:b7:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8B:2F:73:C7:EC:BE:E9:3A:5E:56:F9:AD:5C:14:89:22:B6:85:C5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cf2d254-ab7b-4496-b552-7f078de84e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:18:ba:5b:66:01:b3:b1:86:9b:e0:bb:e7:07:7a:c2:a9:02:
         8b:57:e2:2c:b7:fc:d3:a0:1e:55:da:ca:67:b7:7d:12:a9:78:
         7b:97:ff:cb:b0:66:16:70:07:f3:be:00:28:c6:18:82:56:de:
         ed:65:4e:1d:de:22:43:9b:b1:fd:07:1e:8e:f0:14:16:18:22:
         94:f6:cb:3d:1e:73:96:ce:f8:b4:4b:09:ad:18:88:cf:2d:39:
         09:a3:08:07:28:cc:bb:ec:90:bb:01:e5:b0:88:6d:e3:bf:50:
         3b:77:ed:e4:3a:16:1b:91:a8:af:23:4a:e0:d3:36:ee:ad:60:
         ee:15:a0:ad:4e:5e:58:0f:8f:0f:76:f4:8a:4f:98:36:9c:cb:
         2f:3a:50:94:8c:80:2d:e1:b0:10:92:2c:62:49:df:01:05:3c:
         7b:fe:4b:3d:b4:71:2e:ae:ca:d1:9e:36:c7:c9:f1:25:39:cd:
         de:b8:6a:dc:0c:66:2e:0d:ad:dd:17:fa:7a:d1:8e:72:37:12:
         28:30:bb:6c:89:53:38:c2:4a:15:4e:63:5d:65:db:40:b4:ed:
         bd:4e:61:5a:d1:91:39:80:3a:ab:3c:c8:2b:5b:62:02:78:1d:
         c9:7f:26:c2:d7:26:b6:46:6c:71:5d:dd:ad:d0:ad:c1:0f:a7:
         05:5a:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----