Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/66a53b3f-eb55-4869-ac1a-f83569ee728f.roa
File:                     66a53b3f-eb55-4869-ac1a-f83569ee728f.roa (raw, json)
Hash identifier:          vtaC37RZNSmys9Yl5cl2+ld0Rphl/iv76oXx7++8QD8=
Subject key identifier:   F1:02:D7:EB:1C:82:C8:29:BA:43:2E:28:5D:BE:28:A9:E9:82:08:AB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       784E6B88D950A10DC6FE1F3E44303A069741A6E6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/66a53b3f-eb55-4869-ac1a-f83569ee728f.roa
Signing time:             Thu 30 Jul 2026 01:30:16 +0000
ROA not before:           Thu 30 Jul 2026 01:30:16 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d074:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4e:6b:88:d9:50:a1:0d:c6:fe:1f:3e:44:30:3a:06:97:41:a6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 30 01:30:16 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=8c2d3765d6d11160f26120b33a7e78c8ed871ed7e70a6f978cbd02e2ba4e0e92, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:8a:18:b9:dd:ba:16:c9:06:31:91:a5:71:
                    2a:c0:d4:2e:ad:8d:58:8d:ec:96:e7:90:94:fe:c0:
                    27:e0:95:c0:18:fe:ef:80:79:3f:9f:a1:ac:6d:c1:
                    7c:7b:31:fe:fe:2d:85:f8:68:f7:41:62:5c:07:bf:
                    55:e0:13:aa:ab:32:84:5f:eb:76:4e:3d:6a:70:25:
                    d4:51:62:92:22:84:4b:23:f3:9f:2f:72:a9:f4:a8:
                    8e:4c:f4:91:46:31:61:b4:9f:2e:59:6b:d8:23:7a:
                    c8:41:5a:69:cd:1d:d5:c2:41:12:1a:9c:6e:a6:e9:
                    49:24:8b:44:75:cf:44:f9:22:ed:ce:a3:75:56:6c:
                    c1:3a:9b:54:c6:90:05:1b:54:3e:ef:c6:5f:82:df:
                    c2:bf:39:bd:13:77:79:fb:6e:5e:55:97:22:b6:88:
                    21:af:88:05:bf:ff:46:83:b6:97:18:f9:b3:ae:e9:
                    65:36:2a:b9:c1:8d:da:7b:e8:a4:81:d2:1c:73:41:
                    54:47:9d:01:bc:25:86:e5:e4:bf:6a:3b:c8:6f:44:
                    70:78:a7:6c:b7:63:fc:a8:a9:fa:3d:d3:b8:b6:f3:
                    84:04:a9:23:07:d6:a4:26:ad:24:9c:0f:c9:3f:16:
                    d6:2a:da:75:c8:06:83:9f:98:22:3c:4e:f4:cc:1f:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:02:D7:EB:1C:82:C8:29:BA:43:2E:28:5D:BE:28:A9:E9:82:08:AB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/66a53b3f-eb55-4869-ac1a-f83569ee728f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:20:ef:51:44:23:c1:8f:48:ef:41:f7:d0:2e:28:66:2a:74:
         dd:6a:86:cb:4c:3d:49:28:48:58:1f:fc:d6:a5:09:2a:4b:0d:
         6c:50:11:54:0f:6e:25:d5:99:b5:8d:79:72:e3:43:43:0c:1d:
         bf:ed:4c:81:ed:af:3e:bc:ec:8f:ce:69:8a:e5:df:c0:4a:03:
         ea:59:e6:90:d0:d2:03:0b:d6:7f:9c:2d:1a:ee:4a:db:74:8a:
         62:b9:0b:57:b7:ed:3f:7a:e8:4c:67:ec:b9:88:f0:8c:4d:31:
         3e:09:1b:52:28:45:52:66:b5:2d:8f:ef:f5:0f:3b:8e:db:c5:
         68:d2:78:d4:a2:61:3e:75:22:bc:e9:45:cd:1d:9f:8c:5e:8b:
         cf:73:69:4a:11:08:e6:87:4f:4d:c5:77:d8:77:b8:f8:fb:f0:
         fe:25:8e:0a:84:38:76:2e:c2:d5:8d:d4:3e:1a:33:fd:17:4b:
         59:89:c4:fb:07:82:d8:61:b0:d3:2f:10:d3:cb:ab:a7:79:2a:
         08:d1:66:b2:ae:71:f4:34:77:32:e9:48:cd:58:6c:cc:4f:8a:
         57:dc:5f:3a:7b:5d:02:62:df:98:0c:66:e8:6f:de:80:ba:8e:
         ad:6b:b8:66:a3:e6:28:8d:1d:d2:1a:cc:be:9f:4f:54:58:3d:
         52:ac:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----