Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8eb63ceb-3350-490c-9a1a-85b2563a8947.roa
File:                     8eb63ceb-3350-490c-9a1a-85b2563a8947.roa (raw, json)
Hash identifier:          LXK0dze0WftX5EPjOrnppu6F7tdmDeFAwLL3bdLLDI8=
Subject key identifier:   CA:69:20:DF:37:42:63:E1:C5:D5:0C:4E:24:96:71:4D:2D:6F:91:D9
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       55CDDF150966C0E07593716DDF68B5F655EAE33B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8eb63ceb-3350-490c-9a1a-85b2563a8947.roa
Signing time:             Mon 26 Oct 2026 05:30:12 +0000
ROA not before:           Mon 26 Oct 2026 05:30:12 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d071:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:cd:df:15:09:66:c0:e0:75:93:71:6d:df:68:b5:f6:55:ea:e3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:30:12 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=0d7841d0d54663d7b31d2a699326f271a24f06df379fd3d5b2d9b1d0ca0c99cb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:33:bf:10:7a:6d:4f:ec:b0:9b:3e:d6:6f:c8:
                    9a:fc:e6:9a:9a:7c:e1:d6:ca:f5:9d:4e:76:6a:04:
                    a6:32:14:41:f7:9d:b6:a3:c1:47:ff:d2:2c:2a:0d:
                    08:a3:0d:32:7a:a7:c1:c2:89:fc:a0:3f:58:76:04:
                    d6:9e:cc:8a:38:e7:40:05:91:35:67:2b:eb:56:21:
                    02:0c:10:08:da:71:30:2e:23:71:56:b7:99:1b:04:
                    e5:6f:84:30:9d:52:78:6d:66:ec:cf:37:b7:17:aa:
                    0d:1b:8c:a0:e3:8b:7a:5c:82:26:a3:64:c4:2e:bc:
                    07:fc:eb:b4:79:82:62:50:de:7f:d7:78:08:ef:27:
                    85:0c:e4:c7:a1:51:70:b5:7c:98:6d:5b:67:a3:9e:
                    5d:67:07:10:71:84:b8:c2:f3:25:e0:42:08:b1:fb:
                    bb:bb:ca:15:a0:e7:91:b9:dc:20:64:74:d6:a9:68:
                    38:94:a3:e2:5e:4b:68:e6:c4:ee:7b:c4:f6:3e:db:
                    24:c3:30:11:db:3b:51:51:11:6b:66:c8:c2:1a:52:
                    5c:28:09:a7:b8:1e:9e:5e:91:3d:59:96:73:64:ca:
                    a2:42:ae:78:a6:70:d7:1d:02:0e:b1:2d:65:08:e7:
                    02:bc:16:a8:75:be:95:f9:8b:b1:72:b2:63:60:03:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:69:20:DF:37:42:63:E1:C5:D5:0C:4E:24:96:71:4D:2D:6F:91:D9
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8eb63ceb-3350-490c-9a1a-85b2563a8947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d071:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:48:f3:3a:b4:f4:f2:e5:dc:f7:d0:a0:e0:13:5b:e5:b2:df:
         cf:d8:4c:23:5e:72:8c:c7:00:8b:7d:dc:d1:8d:0a:44:35:fb:
         0b:ad:62:34:df:67:51:5f:fe:2b:80:29:9c:17:30:32:29:29:
         db:cb:1a:5c:bc:9a:c1:95:a0:a3:b9:15:4a:f2:f4:b0:d8:f9:
         8f:73:c5:2d:90:c4:c7:c5:fe:ae:01:40:a6:7a:b2:ca:e1:9b:
         62:9b:38:6b:b5:38:f6:8d:97:d6:d9:46:55:44:60:32:d3:80:
         79:c1:3d:77:1d:9e:a5:76:85:0f:80:9d:c0:73:96:54:9c:d7:
         1f:7a:29:3a:5e:49:54:27:cc:3e:78:6c:c7:0b:a3:ff:d4:9b:
         84:09:61:55:44:fd:53:62:4b:3f:f5:f5:57:36:fe:ad:5a:4d:
         04:89:76:fc:a1:e3:72:02:d7:f5:83:f7:25:a8:3b:03:fa:e1:
         b0:c7:a0:b5:4d:27:06:7c:2a:22:1f:87:a2:b3:25:c0:8a:2a:
         d7:46:46:b3:83:0f:18:89:33:0d:7e:cb:0a:01:a3:c0:74:f4:
         a1:40:ac:0c:c4:4c:c2:c5:2b:65:19:2a:ae:b4:ef:db:04:50:
         20:6e:37:dd:2c:4c:71:24:01:bd:54:6a:87:cf:62:a4:d0:f6:
         f6:aa:cf:7c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUVc3fFQlmwOB1k3Ft32i19lXq4zswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTMwMTJaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDBkNzg0MWQwZDU0NjYzZDdiMzFkMmE2OTkzMjZmMjcxYTI0ZjA2ZGYzNzlm
ZDNkNWIyZDliMWQwY2EwYzk5Y2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIUzvxB6bU/ssJs+1m/Imvzmmpp84dbK9Z1OdmoEpjIUQfedtqPBR//SLCoN
CKMNMnqnwcKJ/KA/WHYE1p7MijjnQAWRNWcr61YhAgwQCNpxMC4jcVa3mRsE5W+E
MJ1SeG1m7M83txeqDRuMoOOLelyCJqNkxC68B/zrtHmCYlDef9d4CO8nhQzkx6FR
cLV8mG1bZ6OeXWcHEHGEuMLzJeBCCLH7u7vKFaDnkbncIGR01qloOJSj4l5LaObE
7nvE9j7bJMMwEds7UVERa2bIwhpSXCgJp7genl6RPVmWc2TKokKueKZw1x0CDrEt
ZQjnArwWqHW+lfmLsXKyY2ADmQ8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTKaSDf
N0Jj4cXVDE4klnFNLW+R2TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGViNjNjZWItMzM1MC00OTBjLTlhMWEtODViMjU2M2E4OTQ3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HFA
MA0GCSqGSIb3DQEBCwUAA4IBAQBeSPM6tPTy5dz30KDgE1vlst/P2EwjXnKMxwCL
fdzRjQpENfsLrWI032dRX/4rgCmcFzAyKSnbyxpcvJrBlaCjuRVK8vSw2PmPc8Ut
kMTHxf6uAUCmerLK4ZtimzhrtTj2jZfW2UZVRGAy04B5wT13HZ6ldoUPgJ3Ac5ZU
nNcfeik6XklUJ8w+eGzHC6P/1JuECWFVRP1TYks/9fVXNv6tWk0EiXb8oeNyAtf1
g/clqDsD+uGwx6C1TScGfCoiH4eisyXAiirXRkazgw8YiTMNfssKAaPAdPShQKwM
xEzCxStlGSqutO/bBFAgbjfdLExxJAG9VGqHz2Kk0Pb2qs98
-----END CERTIFICATE-----