Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83b951c2-f827-4554-9466-de8fd6e7ecec.roa
File:                     83b951c2-f827-4554-9466-de8fd6e7ecec.roa (raw, json)
Hash identifier:          XwDz3yecGBdTAaTO+sLPTsHCwVcaerRnGo+jQgvQ/Zg=
Subject key identifier:   8B:9C:BC:F0:29:28:F1:7D:FC:03:B1:BA:6F:85:20:0B:B8:D3:86:20
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       42A8075A0B442D2CC7011864741257F68B0973A6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83b951c2-f827-4554-9466-de8fd6e7ecec.roa
Signing time:             Thu 15 Oct 2026 03:20:26 +0000
ROA not before:           Thu 15 Oct 2026 03:20:26 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d074:9000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a8:07:5a:0b:44:2d:2c:c7:01:18:64:74:12:57:f6:8b:09:73:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 15 03:20:26 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=5fa455e84bdb2af34a0800a71a6ed29dde3247a8e8de5f7ca5dc4acd276f4766, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:7e:86:8e:1b:1f:84:8a:de:4d:a7:f9:e1:
                    64:82:53:d7:5d:5c:12:0c:a8:57:3b:a1:aa:fc:88:
                    ba:7b:28:67:22:c8:b5:0f:c6:13:d3:49:03:a5:48:
                    a9:92:53:54:20:63:fb:03:65:7c:8f:95:2f:50:ae:
                    a8:60:cf:3c:91:ec:0a:44:24:e6:06:b9:f1:f4:8e:
                    5b:31:62:75:a5:ce:5c:16:cf:7f:4a:49:75:e1:96:
                    fc:5a:79:84:c4:d8:db:26:fd:65:d0:7d:e7:99:8d:
                    07:b5:a9:da:34:12:e3:63:41:a8:76:9c:2a:c7:fc:
                    a3:98:fa:8b:cb:56:ee:25:e0:70:1c:c7:6e:9b:73:
                    f9:d6:94:ed:39:38:a5:d2:30:db:fe:e6:c6:ea:51:
                    9e:5a:7a:9c:6a:be:6f:f7:7f:ab:62:4c:03:cb:9e:
                    57:f8:d2:af:3b:78:9e:3d:0c:b4:77:89:f4:00:5d:
                    16:63:ae:06:9e:51:03:93:e9:0d:f0:fe:ae:cd:2c:
                    a2:69:ed:a1:21:ee:f8:eb:76:d9:fc:bd:16:b5:00:
                    6b:7b:6e:46:dc:6c:d9:ca:ba:31:ee:0e:1f:d4:62:
                    c1:71:5b:05:c2:a6:3d:fe:b7:e0:40:97:89:a2:df:
                    65:2d:c9:54:37:25:4e:e5:5d:d4:38:06:96:94:e6:
                    83:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9C:BC:F0:29:28:F1:7D:FC:03:B1:BA:6F:85:20:0B:B8:D3:86:20
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83b951c2-f827-4554-9466-de8fd6e7ecec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:27:d9:d2:9e:5b:de:1c:9b:af:dc:d5:d5:cd:35:eb:d9:9b:
         ce:d8:57:c6:1e:35:d8:c6:65:11:82:d4:17:91:40:ee:b4:ea:
         de:95:bf:a1:d2:98:a6:4f:ad:6f:89:bf:b2:94:03:a2:ff:cf:
         1d:16:de:13:df:87:bc:93:57:2c:60:12:77:19:6c:55:c8:13:
         37:cb:63:a2:9d:bb:4b:11:2a:20:06:e8:fe:69:f7:2e:d1:92:
         99:87:28:8f:31:cf:72:70:f7:ec:88:25:6c:82:9c:7c:91:62:
         6f:33:3e:e8:5a:8f:3c:04:fb:02:c9:d4:f3:39:f3:b6:5a:4c:
         f9:11:18:0a:c6:9c:a5:7e:1b:2a:9b:04:20:91:56:c7:8f:d6:
         7e:d6:0a:33:93:22:e2:be:af:0d:23:2b:8b:57:74:42:ba:18:
         c5:99:42:d1:04:c8:66:76:81:ca:b4:f9:94:2d:47:d2:c3:f8:
         05:01:21:c3:3f:f4:4d:8d:1a:5a:c5:c3:ad:f9:5a:56:da:56:
         3c:96:6a:f9:a1:33:b7:0e:5e:aa:05:70:46:a0:b4:7e:ea:a1:
         e7:32:a9:2f:8c:bf:ea:9a:fb:57:2b:85:13:c2:b4:4f:97:1d:
         14:69:11:23:85:6d:3a:d6:0d:47:44:3c:07:64:2f:ac:f2:7f:
         04:80:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----