Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62c4c5c9-e619-4b67-8240-2be03979352e.roa
File:                     62c4c5c9-e619-4b67-8240-2be03979352e.roa (raw, json)
Hash identifier:          JzhI8PUx38rXX7EIbgWZ4NjXr+5dn8DmICoSazXTTZ4=
Subject key identifier:   E9:56:1C:D5:B7:25:A5:37:B1:16:A6:F8:02:68:C2:5D:05:85:BD:ED
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       11CC183271308E7AAE9BD6569DBB7066F5E1E3FF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62c4c5c9-e619-4b67-8240-2be03979352e.roa
Signing time:             Tue 18 Aug 2026 18:12:58 +0000
ROA not before:           Tue 18 Aug 2026 18:12:58 +0000
ROA not after:            Mon 16 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d033:9000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cc:18:32:71:30:8e:7a:ae:9b:d6:56:9d:bb:70:66:f5:e1:e3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 18 18:12:58 2026 GMT
            Not After : Nov 16 23:59:59 2026 GMT
        Subject: serialNumber=316beecdb976367e4c4347681dff2ff80a067d4bdb3fd587ddcfe7134d983edd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6a:6b:a6:df:0e:48:7e:63:fd:8f:fe:8e:a8:
                    e1:52:26:c7:c0:11:67:2f:ef:c4:fb:7e:d1:81:6c:
                    c7:6b:e1:ee:75:ba:a0:79:1b:de:7a:dc:b3:59:b4:
                    af:2a:9f:be:67:9d:f4:d1:76:ef:7d:a6:f2:c0:82:
                    b1:6f:d1:a7:9f:a4:c6:ca:03:a2:93:2e:d9:40:09:
                    f5:d3:17:2a:59:39:02:bf:aa:46:06:15:45:6a:e7:
                    27:31:27:b9:c7:66:e2:79:0f:52:88:b5:4e:6e:a9:
                    8d:e9:15:61:f0:49:6c:3b:c7:da:d2:3c:9b:41:d1:
                    ea:1b:2d:26:63:da:d9:2a:73:22:15:27:e8:14:bd:
                    a1:a9:7f:b6:a5:be:b9:31:a5:2f:b3:84:2d:c5:80:
                    76:b1:b4:d7:ae:0f:47:e5:93:52:40:d1:96:af:69:
                    4a:d6:12:62:21:68:40:34:8a:6b:e2:5c:94:e8:b2:
                    65:9f:91:8e:7a:38:03:c0:0e:3d:3c:f3:33:68:6d:
                    ef:dd:04:41:4c:5d:96:2f:29:56:e0:88:84:a4:7f:
                    3e:c6:80:1f:3e:9d:a5:d2:7a:44:01:eb:8a:b2:c9:
                    f7:c9:df:40:68:00:52:6a:5f:05:9c:f7:96:e8:0f:
                    18:22:b6:67:c9:5d:a0:31:9e:8f:6d:a4:d2:f6:8a:
                    9a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:56:1C:D5:B7:25:A5:37:B1:16:A6:F8:02:68:C2:5D:05:85:BD:ED
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62c4c5c9-e619-4b67-8240-2be03979352e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d033:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:4c:4f:d6:fb:43:ce:77:10:1b:db:95:3b:f9:41:52:c0:14:
         94:43:8d:07:28:ed:2c:a9:0f:0f:71:a4:a5:7d:91:82:ff:d4:
         fd:b4:a7:c7:f2:a4:d5:b3:76:e9:7a:f7:c2:b2:dc:0a:ce:d5:
         34:53:b9:82:07:49:34:01:d7:d7:6b:00:89:c5:df:df:99:90:
         c4:fe:01:99:06:99:5f:f0:6a:c1:9c:e2:6c:90:5d:07:14:2b:
         70:f1:46:06:67:fa:b9:ff:eb:cc:02:62:33:58:91:70:9c:0f:
         c8:5a:07:67:2e:f8:5f:22:76:ec:35:a0:66:fc:2d:e5:13:99:
         99:13:d4:ce:a7:a2:16:79:4b:63:29:04:bd:34:c0:17:e5:1d:
         e5:cb:61:db:c9:2c:c3:66:76:8c:4a:55:90:03:9a:ea:31:ec:
         10:07:ac:f7:ea:fb:a7:48:4c:30:66:bb:f9:71:dc:49:44:81:
         69:91:6e:ba:79:e7:85:13:94:1e:c7:af:a9:59:2b:ba:11:22:
         e9:49:de:d9:ef:cc:c0:bf:1c:39:3e:5d:17:cd:a0:1c:ec:c3:
         6b:7a:c0:83:a7:fa:00:28:2f:8c:48:b5:89:9f:36:f4:3c:ff:
         1f:6f:ec:14:72:dd:a8:44:a2:7f:2e:fe:d1:6f:69:ed:c3:db:
         e1:e0:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----