Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cfa3133-8fd4-4816-ad14-c49146075f82.roa
File:                     8cfa3133-8fd4-4816-ad14-c49146075f82.roa (raw, json)
Hash identifier:          5247I3Q5LOKfbUCZoVo22QNne6HBiCvJUlI9bg25csY=
Subject key identifier:   5A:70:B2:6B:12:91:63:5A:73:C0:8B:59:AC:6C:65:69:BC:71:FC:DC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       66EDEA9C70EE75F54E9A75D1DB52C0D557DDE57B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cfa3133-8fd4-4816-ad14-c49146075f82.roa
Signing time:             Mon 26 Oct 2026 04:40:37 +0000
ROA not before:           Mon 26 Oct 2026 04:40:37 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ed:ea:9c:70:ee:75:f5:4e:9a:75:d1:db:52:c0:d5:57:dd:e5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:37 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=b2ef6b6b0d12c530eb1ec473e20f40baecd925b0d5227faa21c44c30c287d1cc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:26:3c:0a:66:ed:17:4d:2f:c8:d9:2f:1d:
                    8d:b9:ed:f3:d7:58:9f:43:5f:e8:04:c2:9f:a9:11:
                    e0:ba:7b:67:0b:1c:82:7f:e4:53:fc:08:f1:ba:e5:
                    b7:a3:e3:c5:77:e8:1e:d3:49:0b:f9:78:6d:1c:06:
                    53:96:7a:e5:07:82:36:6f:06:9d:32:53:86:95:7f:
                    60:8c:36:bf:21:15:dd:ed:af:10:a6:28:ab:e1:09:
                    a4:83:e3:c6:74:f9:cd:34:1f:2f:27:bc:b8:c5:42:
                    d3:35:40:68:9f:b4:bb:03:02:7c:6c:de:a8:c6:b1:
                    90:c0:c1:78:69:f6:62:37:cd:8b:fb:d3:e7:51:7e:
                    ba:cf:88:fe:b0:a8:7f:79:4d:de:ac:a5:2c:74:43:
                    e6:c0:6c:88:2e:e8:14:b0:8f:43:09:21:0f:98:b0:
                    44:0c:08:48:c7:b7:ff:dd:68:3b:b4:b3:c7:14:78:
                    cf:c5:08:76:e0:e3:a4:8b:d0:61:9e:e4:23:07:45:
                    d7:1e:cd:55:56:84:91:6e:42:14:5b:72:3b:ca:16:
                    1b:21:7f:b5:59:69:49:9e:2c:a3:6f:e4:22:ad:c3:
                    4d:4f:fa:19:17:b4:bb:c5:f7:ca:6b:22:dd:22:69:
                    5b:31:86:05:ca:03:c0:9e:8f:64:67:b4:04:60:41:
                    66:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:70:B2:6B:12:91:63:5A:73:C0:8B:59:AC:6C:65:69:BC:71:FC:DC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cfa3133-8fd4-4816-ad14-c49146075f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:10:09:3e:f5:8a:6a:e5:a5:d7:f1:e0:06:00:3c:1c:83:1e:
         75:84:2c:d0:07:13:c4:dd:f3:82:b2:7f:8e:c4:fe:9f:ae:fa:
         3e:f9:19:f0:35:ad:64:c8:cc:58:0e:3f:8c:24:d6:c8:df:ff:
         1a:16:35:18:bb:ca:88:b3:05:01:68:59:33:13:60:47:98:2d:
         de:0b:64:97:e5:c5:50:67:6e:fb:85:45:57:64:ef:92:b6:f9:
         f3:36:ad:98:10:a3:a7:e8:fa:1b:51:0e:95:d5:23:71:12:81:
         a0:ab:1b:f4:a7:4f:1f:17:90:dc:4a:06:14:3a:e5:96:76:e2:
         0f:d9:ef:f9:5d:4f:d3:cc:28:cf:e4:d5:9a:13:de:40:d8:e4:
         25:40:eb:fd:72:61:37:84:73:3a:a0:f7:72:3a:2e:1a:cf:29:
         87:73:1d:a9:fe:99:bd:71:55:74:6d:dc:32:a2:82:b7:9b:14:
         2e:fe:8e:e4:3b:eb:a0:b4:3d:e0:ba:cd:5e:82:d5:57:f1:92:
         15:95:41:6b:d4:66:db:ab:4c:6f:39:51:e3:52:78:8a:a2:6c:
         e4:f2:be:4b:5f:92:82:f5:cd:3e:80:69:94:d4:15:8e:de:92:
         79:7b:3e:17:a6:8b:27:99:36:e9:44:09:d2:8c:6a:e6:b5:67:
         17:2d:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----