Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6092a152-053c-4071-b5f8-66fb66717151.roa
File:                     6092a152-053c-4071-b5f8-66fb66717151.roa (raw, json)
Hash identifier:          /n1galGZBp+pDod/3yYyfssl8nqvxCOHLc9JTNYZing=
Subject key identifier:   97:48:7E:E7:5B:74:19:02:73:6D:E8:D3:9D:88:D7:CF:09:D1:15:EA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       68C3E3EB856D9440063F6E7FF6F8DC08D0384FFE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6092a152-053c-4071-b5f8-66fb66717151.roa
Signing time:             Wed 19 Aug 2026 01:10:20 +0000
ROA not before:           Wed 19 Aug 2026 01:10:20 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d05a:8040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c3:e3:eb:85:6d:94:40:06:3f:6e:7f:f6:f8:dc:08:d0:38:4f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 01:10:20 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=74f3c06e1c763730f187fc560908ad10b77001eb5fa1deba7c24284ae78b42bd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:c7:f5:2d:fe:69:b5:25:07:95:b2:ff:95:
                    dd:ec:84:d5:6e:e1:58:66:13:62:24:b7:06:77:30:
                    54:76:05:66:0a:46:14:21:0b:fb:ed:1e:6f:08:bf:
                    09:9d:d3:62:4a:5c:65:b4:62:46:b3:92:b8:a8:ee:
                    bb:c4:12:16:34:4c:fa:8a:a7:77:01:ce:ff:68:eb:
                    19:fc:41:b9:32:f8:e5:99:94:a7:12:1a:4d:8f:c8:
                    48:ce:38:df:5e:c9:94:e9:d7:12:45:c7:99:d4:ab:
                    75:f9:d4:d5:36:b9:27:b5:2c:d9:36:62:b1:7f:31:
                    44:d0:3a:2f:fa:bd:13:8e:c7:09:b9:ff:09:6a:c2:
                    ff:e2:cf:0a:f4:bf:d0:d9:dd:47:45:72:6e:a8:1c:
                    3d:91:0f:fb:a1:ac:e2:c3:52:fa:32:e3:f0:96:c4:
                    ff:13:b3:9a:02:70:67:89:f6:e9:93:98:49:ee:65:
                    98:ae:a8:ab:62:a2:17:09:1b:14:c2:b3:2b:bf:69:
                    15:14:71:0d:f9:e5:51:23:9a:59:42:bc:fc:58:ae:
                    46:00:09:c0:8c:ce:21:98:4c:16:07:e6:11:68:59:
                    02:23:6d:fd:c1:c1:4f:6e:39:ab:11:d6:bb:cd:f1:
                    89:47:4c:42:f0:7f:a3:54:ff:46:75:dd:42:ab:ad:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:48:7E:E7:5B:74:19:02:73:6D:E8:D3:9D:88:D7:CF:09:D1:15:EA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6092a152-053c-4071-b5f8-66fb66717151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d05a:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:a6:dd:93:24:9e:b8:7b:95:93:df:f1:71:71:c8:14:3f:30:
         a1:f9:b0:18:80:31:37:14:d5:99:65:ab:be:e3:1b:ca:40:19:
         e8:9b:1f:88:a1:f5:3a:26:b6:a6:bd:ca:fe:8d:57:fd:26:c3:
         62:4b:88:c5:17:c2:74:35:51:77:fa:d4:6e:c4:3d:55:3c:ed:
         7b:7c:e7:f8:87:91:8d:d2:f8:4b:e0:54:0e:ac:ad:c7:14:be:
         13:d3:45:d3:d4:dc:d7:0d:fc:47:92:b6:cb:9a:06:9c:90:38:
         00:55:40:f1:9d:98:14:9b:45:f3:78:03:77:0d:08:9e:13:aa:
         fd:3a:a2:1a:1b:06:42:f3:03:77:87:e6:20:89:76:42:2e:db:
         a9:23:85:03:95:f3:d9:a8:fc:b6:ad:51:63:67:97:9b:60:8b:
         43:dc:3a:9c:56:f8:3e:b5:e2:5e:b2:f4:7a:bf:c2:20:22:6f:
         26:49:c9:1a:ac:77:af:ac:ae:e6:02:0d:a7:e0:dd:ab:62:d9:
         1a:7c:e2:ff:96:1d:b8:ce:7b:2c:db:2c:da:9f:1d:3e:0a:5d:
         7f:6b:01:07:64:02:3b:39:9b:1c:fa:51:af:a6:6b:57:24:58:
         39:57:be:e6:1f:94:e7:00:17:f2:36:58:28:2b:77:0e:62:bc:
         7b:a7:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----