Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/669652b6-0b22-49a0-b29f-dfb51835c988.roa
File:                     669652b6-0b22-49a0-b29f-dfb51835c988.roa (raw, json)
Hash identifier:          nutoggd+zhUsp9NAXwIhaH0/r/zUegs3N8esK+ipJcA=
Subject key identifier:   22:BD:C5:F0:E1:11:D4:83:40:D1:61:3B:32:66:63:75:34:2D:24:71
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1F5361DC8CFF12908697B831EDE0757CB8B67CE8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/669652b6-0b22-49a0-b29f-dfb51835c988.roa
Signing time:             Mon 26 Oct 2026 05:31:02 +0000
ROA not before:           Mon 26 Oct 2026 05:31:02 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01c::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:53:61:dc:8c:ff:12:90:86:97:b8:31:ed:e0:75:7c:b8:b6:7c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:31:02 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=2424c00efe62583526502d52fc0f1babee926e232a2b5a2c299c71934216f5e8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:34:b8:48:e8:6f:2c:40:a3:9e:ce:18:08:1f:
                    67:a9:2b:5e:8e:9e:6a:50:07:a1:a2:b4:7c:6a:94:
                    7e:28:88:e7:e9:a6:61:d4:ee:9e:0b:99:26:87:6a:
                    2b:7b:90:3b:4c:8e:52:b7:c5:9e:6b:b6:fb:ee:b9:
                    bc:da:66:36:82:3d:7c:02:d2:2a:2b:fe:21:52:42:
                    2a:1e:ff:89:06:a3:bf:70:f1:d1:06:72:28:a3:0e:
                    8d:1c:d7:74:18:ac:fd:83:20:15:6d:0a:ae:5d:8f:
                    a0:2f:f3:91:25:9d:86:9c:ce:46:0a:ca:e5:13:3e:
                    63:f1:77:e0:2d:55:e5:a9:fb:f3:57:f5:ff:7d:8a:
                    9f:24:b2:45:df:81:ca:07:c5:7d:c0:85:e9:b9:b9:
                    c4:d7:c3:f1:25:8d:fc:e2:2c:d1:07:8a:b4:e7:f2:
                    d1:a7:b6:ce:c7:c6:5f:2c:74:f8:29:29:eb:55:40:
                    d0:d9:04:4e:be:f2:f1:82:53:87:0a:4b:18:e0:aa:
                    01:39:26:74:66:47:06:5e:7e:be:f9:f9:8e:a8:fa:
                    dc:ca:7c:47:90:bc:af:07:15:ea:f9:54:7e:c4:85:
                    9b:31:96:aa:68:99:6c:3c:12:32:82:0f:bd:4f:b8:
                    a6:29:94:60:5d:15:b5:8d:5c:1d:59:53:7e:e7:e1:
                    d1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BD:C5:F0:E1:11:D4:83:40:D1:61:3B:32:66:63:75:34:2D:24:71
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/669652b6-0b22-49a0-b29f-dfb51835c988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01c::/38

    Signature Algorithm: sha256WithRSAEncryption
         c5:8e:ae:bc:7f:a2:1d:72:81:89:60:65:73:79:ca:dd:61:80:
         12:5d:a0:be:e2:54:9c:2e:fb:9a:1f:ec:76:10:2f:02:85:22:
         c0:61:77:ac:d0:2d:07:4c:ec:0e:46:80:ef:94:5b:bd:77:94:
         ba:fc:53:48:34:c2:cc:df:e0:95:2d:17:5f:ee:e6:bf:fa:f8:
         83:5e:62:47:bc:5d:6f:e5:50:7a:c0:6a:0a:13:c7:a0:64:7c:
         45:1f:01:b0:15:6b:21:c4:e0:3c:66:5f:d4:94:e7:c9:e2:53:
         51:46:db:b0:ce:0e:06:5d:32:5f:f2:60:24:fa:25:6f:3a:86:
         13:37:0d:4a:ea:f4:e1:78:0a:ab:84:70:20:60:e6:76:0f:62:
         90:7b:15:16:11:21:ac:79:5a:03:9a:c7:99:01:92:2b:e2:fd:
         48:54:92:3d:84:88:59:cf:47:35:7a:65:8e:93:b1:43:01:6e:
         b7:0a:81:12:be:9c:d2:39:11:9d:de:c6:80:ed:a2:98:b1:92:
         a9:9e:d1:98:e9:d5:4e:d4:e0:30:bf:cc:e1:8f:10:ec:7d:86:
         41:cb:37:c0:ca:91:4c:03:6b:78:19:3f:49:c1:09:6f:2a:2a:
         e8:ff:70:70:f3:8e:64:ba:e4:4d:d4:a5:11:6b:8f:d3:83:06:
         33:1d:1a:b3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUH1Nh3Iz/EpCGl7gx7eB1fLi2fOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTMxMDJaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDI0MjRjMDBlZmU2MjU4MzUyNjUwMmQ1MmZjMGYxYmFiZWU5MjZlMjMyYTJi
NWEyYzI5OWM3MTkzNDIxNmY1ZTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO40uEjobyxAo57OGAgfZ6krXo6ealAHoaK0fGqUfiiI5+mmYdTunguZJodq
K3uQO0yOUrfFnmu2++65vNpmNoI9fALSKiv+IVJCKh7/iQajv3Dx0QZyKKMOjRzX
dBis/YMgFW0Krl2PoC/zkSWdhpzORgrK5RM+Y/F34C1V5an781f1/32KnySyRd+B
ygfFfcCF6bm5xNfD8SWN/OIs0QeKtOfy0ae2zsfGXyx0+Ckp61VA0NkETr7y8YJT
hwpLGOCqATkmdGZHBl5+vvn5jqj63Mp8R5C8rwcV6vlUfsSFmzGWqmiZbDwSMoIP
vU+4pimUYF0VtY1cHVlTfufh0dECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQivcXw
4RHUg0DRYTsyZmN1NC0kcTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjY5NjUyYjYtMGIyMi00OWEwLWIyOWYtZGZiNTE4MzVjOTg4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BwA
MA0GCSqGSIb3DQEBCwUAA4IBAQDFjq68f6IdcoGJYGVzecrdYYASXaC+4lScLvua
H+x2EC8ChSLAYXes0C0HTOwORoDvlFu9d5S6/FNINMLM3+CVLRdf7ua/+viDXmJH
vF1v5VB6wGoKE8egZHxFHwGwFWshxOA8Zl/UlOfJ4lNRRtuwzg4GXTJf8mAk+iVv
OoYTNw1K6vTheAqrhHAgYOZ2D2KQexUWESGseVoDmseZAZIr4v1IVJI9hIhZz0c1
emWOk7FDAW63CoESvpzSORGd3saA7aKYsZKpntGY6dVO1OAwv8zhjxDsfYZByzfA
ypFMA2t4GT9JwQlvKiro/3Bw845kuuRN1KURa4/TgwYzHRqz
-----END CERTIFICATE-----