Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
File:                     6ee98048-5141-4b16-8b8c-269a397f53ce.roa (raw, json)
Hash identifier:          uNMf2PleABf9NXDGsN5S64SOEJBAG3xy/8KYc0wtBeM=
Subject key identifier:   E4:E1:67:DF:77:11:E6:8C:36:70:A5:3D:4B:E6:F6:2D:2F:AF:AF:33
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6B395480E6CA8CB0AD42EEC2A445EB26A08305DD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
Signing time:             Mon 26 Oct 2026 05:02:39 +0000
ROA not before:           Mon 26 Oct 2026 05:02:39 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:4080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:39:54:80:e6:ca:8c:b0:ad:42:ee:c2:a4:45:eb:26:a0:83:05:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:02:39 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=aacdf773bc8ce9ce78700a12657bd8475e668ff1ba87af571c4b9534fc79d041, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0b:0c:e4:69:c5:2a:ec:24:7b:73:c2:1c:0f:
                    3d:5d:e0:e1:a0:fb:0f:bc:50:9e:4f:4e:0c:a5:a5:
                    31:07:99:98:13:0a:46:c7:51:ce:29:0f:0c:b3:7b:
                    14:a0:36:11:ba:99:52:d9:26:60:5e:02:99:c0:25:
                    61:28:ed:49:20:b1:fa:6e:c0:50:b2:a6:f0:52:f6:
                    6e:b6:95:36:36:fd:e1:e1:c6:24:ac:eb:63:cb:b8:
                    dc:16:3c:eb:83:77:d6:49:cb:b0:a9:7e:74:e9:19:
                    17:79:6f:18:76:48:f0:46:6d:9c:21:58:8b:cc:1b:
                    70:a4:4e:8f:bb:16:3e:ed:3a:51:34:47:5c:10:88:
                    51:7b:a6:e1:b9:7c:e6:56:56:c9:ac:fe:20:72:53:
                    83:0d:41:cf:32:e6:08:13:2b:37:e7:fb:8c:cd:66:
                    98:13:0f:4c:63:bf:26:51:b4:cc:d3:02:42:ad:6b:
                    53:3e:93:06:c9:44:ac:1d:39:86:7d:c2:5b:56:37:
                    27:be:9a:0b:f9:72:83:11:38:47:bf:bc:b5:24:a6:
                    74:61:a8:b0:3f:5c:5e:08:16:d4:db:59:89:9e:42:
                    3f:7e:97:5b:c0:b3:3f:63:e1:cf:15:ba:43:d2:56:
                    37:72:c0:8e:2d:e0:e7:38:24:b4:f4:3a:9f:77:e6:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E1:67:DF:77:11:E6:8C:36:70:A5:3D:4B:E6:F6:2D:2F:AF:AF:33
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:4080::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:ea:7c:90:ce:d6:df:7e:16:da:68:e1:4e:0d:33:87:17:fc:
         26:48:77:f7:a6:cc:b2:c7:63:bc:4e:a6:0c:00:fd:7e:9c:49:
         43:a6:f8:dd:b6:7a:05:ef:cd:7a:2f:e8:06:06:9d:5a:41:e7:
         dd:49:50:f6:b5:d7:53:78:4f:44:6d:d8:12:0b:d0:93:e9:a9:
         a2:fb:6e:53:ee:8a:44:6a:ed:db:60:d3:a0:c9:8e:64:a2:f9:
         78:04:80:7c:9b:ce:a6:c1:f2:dd:9a:ae:d6:93:cf:5d:c9:dc:
         4a:48:27:05:b0:a6:38:22:6c:10:e7:ce:94:5a:32:aa:63:fd:
         af:5c:3b:d4:8f:84:29:55:b7:b7:44:94:46:77:9f:1c:2f:0e:
         95:08:7d:a3:bd:17:b7:c4:1e:36:73:34:09:fa:70:cd:bc:3c:
         92:ee:c3:2b:d4:1b:12:b5:ce:6e:af:2a:2d:eb:03:3c:d2:47:
         bd:60:2a:00:c6:76:1e:3e:74:b0:cb:5e:bd:22:33:e6:96:88:
         37:71:21:5f:89:e7:a3:a6:fc:b1:64:23:bf:28:74:69:f7:2c:
         37:0c:3f:6e:de:72:90:da:28:7d:03:df:87:eb:ab:00:ff:fd:
         8a:75:6e:a2:ce:99:e6:18:06:dc:ad:72:f7:7f:cd:28:bc:ae:
         e5:a1:da:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----