Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e4adf38-a007-4c0e-8621-1e65a160ad12.roa
File:                     8e4adf38-a007-4c0e-8621-1e65a160ad12.roa (raw, json)
Hash identifier:          +KESO03GphP/6WfuPaplFWaYFc6oPDc+a2WYVEEzk0Q=
Subject key identifier:   65:CB:0E:B5:51:F0:32:C1:69:0B:53:A3:CA:78:35:51:14:55:4E:9A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6FD183619149FEB0291786DA6E5D4EF482F4D822
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e4adf38-a007-4c0e-8621-1e65a160ad12.roa
Signing time:             Mon 26 Oct 2026 04:50:37 +0000
ROA not before:           Mon 26 Oct 2026 04:50:37 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d1:83:61:91:49:fe:b0:29:17:86:da:6e:5d:4e:f4:82:f4:d8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:50:37 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=618212594a0e5714459b3808fa1b2589699ad542da886d0a54b44676f009bfe1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d0:19:55:8d:67:c6:44:ac:0b:14:09:0f:6f:
                    18:4d:20:fa:92:0a:d6:df:3d:ce:2e:19:3e:66:08:
                    09:8b:6a:e0:2a:19:9c:fd:b4:9f:bc:f7:25:48:73:
                    09:77:df:b5:64:b1:60:67:8a:f7:af:47:73:a4:8f:
                    03:86:eb:38:e5:fa:87:e0:3e:51:9e:94:7b:cc:47:
                    83:18:cf:ae:31:a0:43:bd:56:99:8c:28:42:7d:74:
                    af:4c:c7:41:db:a7:c4:7d:a9:9d:ad:b8:1a:82:f2:
                    83:cd:5b:c1:88:74:91:fa:33:31:ae:00:22:d1:5e:
                    28:7b:1b:0e:5a:ee:79:4b:fb:38:8c:32:1d:03:a8:
                    8b:be:13:78:48:69:32:6d:67:e7:8f:9a:9c:c2:b1:
                    df:15:28:12:68:65:b8:01:36:5e:c5:d7:5b:a0:1d:
                    ac:b3:cb:af:dc:90:fa:19:1d:bb:cb:06:d8:84:ec:
                    c6:fc:b3:71:36:0a:be:f0:2f:6b:69:4c:77:6f:51:
                    b7:b6:1a:a5:f4:ce:f6:5a:31:ed:51:db:8e:97:96:
                    53:53:a3:60:2c:9e:d8:ee:e4:ea:e3:41:e9:88:d0:
                    09:1d:96:4c:27:62:89:20:4d:a5:48:a0:ec:18:05:
                    f7:a1:09:07:08:2e:3b:c5:6e:b4:05:6c:0b:eb:c9:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CB:0E:B5:51:F0:32:C1:69:0B:53:A3:CA:78:35:51:14:55:4E:9A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e4adf38-a007-4c0e-8621-1e65a160ad12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:a0:ff:5e:c7:5e:45:60:ae:e8:0e:a7:a9:71:d8:1f:ca:ce:
         bb:e5:2b:93:a6:a6:1a:65:9f:e0:b2:7e:a1:cf:60:87:b5:e5:
         08:f8:8e:71:a6:1f:c4:53:76:4f:bb:a6:5d:dc:45:8d:8b:7f:
         87:b4:90:cf:21:3e:f6:2c:0f:47:b7:ac:ad:b3:dc:38:ae:fc:
         eb:84:b0:45:0b:00:06:fb:9a:be:de:80:08:7c:e7:c0:d1:7b:
         2d:94:a4:1c:e3:25:8f:09:19:d7:6b:23:b3:90:8c:04:1b:1a:
         01:db:48:da:0b:5c:c5:ac:65:73:30:a1:cd:09:f0:f1:5c:8b:
         0c:8d:71:85:29:12:58:61:07:a5:a7:05:1a:67:54:5e:23:e8:
         d7:7b:62:b6:92:3f:7a:85:fc:ab:9a:10:71:5f:4e:ef:63:8e:
         4c:ec:4b:47:f0:be:70:d7:fc:47:8d:fc:81:b6:76:79:22:7d:
         85:6f:b2:92:94:59:85:21:60:91:86:d6:fe:8f:82:fd:ce:27:
         a2:f1:9a:98:7a:9a:72:8d:1e:8a:31:e3:2b:4f:b8:8f:c2:c0:
         a4:56:e5:99:78:5c:bb:e5:9f:cf:d9:48:ba:6b:06:8c:3e:6c:
         1c:18:9a:56:d9:55:b4:fd:7b:05:01:09:ec:5f:73:5a:ee:2d:
         61:8b:7d:c2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUb9GDYZFJ/rApF4babl1O9IL02CIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDUwMzdaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDYxODIxMjU5NGEwZTU3MTQ0NTliMzgwOGZhMWIyNTg5Njk5YWQ1NDJkYTg4
NmQwYTU0YjQ0Njc2ZjAwOWJmZTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANLQGVWNZ8ZErAsUCQ9vGE0g+pIK1t89zi4ZPmYICYtq4CoZnP20n7z3JUhz
CXfftWSxYGeK969Hc6SPA4brOOX6h+A+UZ6Ue8xHgxjPrjGgQ71WmYwoQn10r0zH
QdunxH2pna24GoLyg81bwYh0kfozMa4AItFeKHsbDlrueUv7OIwyHQOoi74TeEhp
Mm1n54+anMKx3xUoEmhluAE2XsXXW6AdrLPLr9yQ+hkdu8sG2ITsxvyzcTYKvvAv
a2lMd29Rt7YapfTO9lox7VHbjpeWU1OjYCye2O7k6uNB6YjQCR2WTCdiiSBNpUig
7BgF96EJBwguO8VutAVsC+vJa0cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRlyw61
UfAywWkLU6PKeDVRFFVOmjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGU0YWRmMzgtYTAwNy00YzBlLTg2MjEtMWU2NWExNjBhZDEyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H8g
MA0GCSqGSIb3DQEBCwUAA4IBAQB8oP9ex15FYK7oDqepcdgfys675SuTpqYaZZ/g
sn6hz2CHteUI+I5xph/EU3ZPu6Zd3EWNi3+HtJDPIT72LA9Ht6yts9w4rvzrhLBF
CwAG+5q+3oAIfOfA0XstlKQc4yWPCRnXayOzkIwEGxoB20jaC1zFrGVzMKHNCfDx
XIsMjXGFKRJYYQelpwUaZ1ReI+jXe2K2kj96hfyrmhBxX07vY45M7EtH8L5w1/xH
jfyBtnZ5In2Fb7KSlFmFIWCRhtb+j4L9ziei8ZqYeppyjR6KMeMrT7iPwsCkVuWZ
eFy75Z/P2Ui6awaMPmwcGJpW2VW0/XsFAQnsX3Na7i1hi33C
-----END CERTIFICATE-----