Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e4d9890-b4f4-4b9e-a734-b63f515360e2.roa
File:                     6e4d9890-b4f4-4b9e-a734-b63f515360e2.roa (raw, json)
Hash identifier:          eFMtGrULr8IKbpJs3kqFXSvg/OCA7PsejIbppOanHpY=
Subject key identifier:   C4:8B:54:1B:4A:D1:DC:19:31:4B:E2:A0:5D:67:34:DA:3C:54:3D:9E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       525E656686108AA7EA309D027DB0D4A7962FC1C7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e4d9890-b4f4-4b9e-a734-b63f515360e2.roa
Signing time:             Mon 26 Oct 2026 04:50:23 +0000
ROA not before:           Mon 26 Oct 2026 04:50:23 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:4040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5e:65:66:86:10:8a:a7:ea:30:9d:02:7d:b0:d4:a7:96:2f:c1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:50:23 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=a9c1c5b65f6b2204fbe6b306a4ba144377f3c334e9248c5a8b8d0865f1418f09, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:da:4b:40:65:73:ce:71:c8:84:f7:f9:05:42:
                    5c:4b:40:37:c5:2c:5a:e1:3f:7a:74:25:5c:0f:8d:
                    3a:42:46:6b:d3:52:8f:e4:86:0c:09:d1:52:9d:a2:
                    17:4b:44:b5:c6:b8:63:52:39:a4:63:d3:ee:22:1d:
                    2c:cd:54:c8:c3:dd:13:0f:92:5f:46:11:32:54:3b:
                    f2:b5:4e:5f:01:ed:30:f1:f0:bf:a8:f2:d5:47:50:
                    d9:7c:bd:4b:41:35:43:b2:a3:20:0f:cb:d1:27:99:
                    02:f1:04:d6:b5:a0:cd:71:06:c4:b9:31:8d:c3:3d:
                    50:09:5e:b2:d2:05:c2:21:0c:28:5e:69:a4:c6:77:
                    08:70:cf:62:f5:60:ad:d9:1e:1e:4d:8f:c1:e5:b7:
                    ba:5a:f0:3d:45:fc:36:54:42:47:07:17:3f:f6:a2:
                    de:89:6a:1e:b6:a4:7a:bf:05:4e:85:a0:b2:8b:73:
                    fb:ea:95:70:cc:08:51:b3:1c:e0:16:08:4d:ad:8b:
                    90:83:58:a8:83:c2:77:d9:e1:83:cc:e6:93:11:eb:
                    67:eb:c4:65:d7:86:ab:4e:1d:bd:be:59:45:ae:4b:
                    d4:dd:43:59:ee:aa:5e:2b:c2:f5:50:3d:72:66:a4:
                    f1:62:e0:93:bd:26:3e:8b:91:59:e4:d4:5c:bd:0a:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8B:54:1B:4A:D1:DC:19:31:4B:E2:A0:5D:67:34:DA:3C:54:3D:9E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e4d9890-b4f4-4b9e-a734-b63f515360e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:a5:7d:fc:e9:9e:00:42:ea:8e:c9:5c:88:b2:b0:80:c1:4a:
         71:af:5a:b0:a7:d7:35:0a:c5:8b:f5:d9:76:9d:33:8f:d3:d8:
         df:2c:0b:3b:86:e5:bd:0d:3a:97:d9:ca:71:9c:7b:db:bf:a9:
         d6:f1:5b:1a:68:59:7c:e5:fc:62:6f:ec:6f:e3:60:00:49:23:
         b8:04:c3:a7:e3:5d:68:c6:f6:91:cf:6b:28:a2:33:95:73:c5:
         9c:cc:73:05:cd:e0:b1:70:77:16:a8:5d:36:76:5d:ae:6e:29:
         73:81:b4:7b:ce:43:1a:e8:a9:6c:28:1e:dc:10:28:7d:fc:60:
         2a:ac:94:10:34:ad:18:31:ce:6c:dd:ff:5f:f9:aa:2f:00:06:
         7e:51:cb:21:ca:61:bb:e2:ad:d8:c4:ca:45:46:0d:81:27:2a:
         33:60:5b:e9:3c:a2:4a:ed:c3:7a:13:30:8b:e2:f2:a0:55:f0:
         11:45:f8:73:c7:29:3b:73:df:c1:1c:88:64:af:c1:01:3f:89:
         c4:25:cc:93:d8:28:1b:e2:8b:e4:d1:e5:11:97:53:57:0c:85:
         b8:d8:0f:25:07:9a:32:cd:9d:d3:41:e3:b6:59:47:ac:32:45:
         14:fd:a2:c7:80:a0:aa:26:a7:51:93:cc:90:4c:72:97:9d:5f:
         88:35:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----