Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
File:                     788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa (raw, json)
Hash identifier:          3lQPxZl4GN/V3EWFTA4TjlTJMoZo+DhKkPRt3KPBG70=
Subject key identifier:   5E:0C:EA:62:C8:FE:5A:29:30:C9:85:AF:F3:A0:9B:18:A4:A0:72:6C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0C63FB1DB85AE65AAE52C1C9BE277495A1750E97
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
Signing time:             Mon 26 Oct 2026 05:30:46 +0000
ROA not before:           Mon 26 Oct 2026 05:30:46 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d038:9000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:63:fb:1d:b8:5a:e6:5a:ae:52:c1:c9:be:27:74:95:a1:75:0e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:30:46 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=c7ef5f35630cdc44adec7ce2a7ed0f200e19df700c74d530d142488767392253, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:74:dc:09:c7:27:ae:4e:b2:f7:e7:65:fe:ad:
                    13:eb:18:93:5c:a8:ab:9e:31:04:e5:21:76:bb:15:
                    b0:0a:55:d8:3b:70:f8:51:63:a6:24:cc:fa:c2:26:
                    b5:2a:91:ca:6b:c0:79:f8:dc:76:44:10:2c:64:b6:
                    5b:a4:3f:01:64:8c:94:a2:10:dc:bc:b9:5c:ec:b4:
                    9f:ae:9f:26:93:b9:c3:43:50:19:a9:81:46:30:d9:
                    ba:88:f3:01:ed:d6:ff:2e:6c:b0:16:ac:37:b9:70:
                    84:a0:06:a4:a1:3e:f4:26:3f:0e:a4:22:c0:3f:68:
                    1a:79:c3:5f:ba:45:dd:76:26:20:7c:df:57:80:99:
                    b5:fd:b3:4a:52:bd:fb:51:85:63:54:30:3f:10:61:
                    9c:77:4e:93:13:76:bc:9c:9d:68:ac:2f:f4:07:88:
                    02:08:90:2c:66:d4:c8:01:71:b5:78:7d:e9:66:c3:
                    9c:cb:00:34:6f:70:31:a6:e5:3d:5e:10:3a:41:e6:
                    92:70:53:40:e1:35:8c:15:27:3d:73:d9:5e:bb:7a:
                    ec:ea:b9:ab:ee:98:7e:d3:7a:0a:6c:81:26:58:f6:
                    5a:88:f9:0d:6f:22:7a:1b:a4:e9:14:eb:97:57:df:
                    de:c9:ab:75:93:2a:d0:a0:2e:2c:bd:8c:19:bf:bf:
                    64:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0C:EA:62:C8:FE:5A:29:30:C9:85:AF:F3:A0:9B:18:A4:A0:72:6C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d038:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:61:37:df:72:7b:39:9f:51:6c:68:78:1b:cd:bb:be:84:20:
         eb:8e:04:e6:fe:74:07:f3:9c:e2:51:8b:b0:db:0f:b2:9b:34:
         72:d7:ec:0f:49:b3:21:92:6e:dc:84:0a:dc:51:14:0d:e8:ab:
         a9:49:e1:ba:a2:1c:28:08:ba:66:fe:29:57:e0:ef:d0:43:76:
         98:04:f1:17:5f:51:a8:70:6e:a6:0e:f0:d3:37:53:ad:18:58:
         b0:f9:cf:eb:0c:90:0b:da:55:29:72:2b:74:98:61:48:e6:a4:
         17:cf:e8:6f:87:e8:f1:26:60:cc:ea:41:cf:2a:df:ef:3b:5f:
         5f:7d:ba:ee:72:9d:93:68:29:94:24:dd:fc:85:c5:0f:9f:30:
         ae:44:4b:d7:03:76:6f:1b:64:71:a6:be:b2:ae:cb:3d:62:14:
         b3:c3:e1:0f:21:a2:a1:07:38:84:a7:69:90:50:45:39:9c:12:
         95:1e:c9:ce:2e:9e:44:2a:a5:43:fc:a7:2c:0a:52:c2:d9:71:
         15:2b:53:75:2a:ce:59:8a:28:06:37:d8:ba:89:7b:d4:77:3b:
         84:70:4f:80:38:0c:e9:02:b4:f3:0a:db:99:fc:0d:3f:9b:60:
         59:cd:64:f5:cf:0f:e2:dd:56:68:42:c3:c2:fb:cc:85:2e:05:
         c2:69:60:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----