Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d05b320-910b-406e-955a-e1d143ee93ff.roa
File:                     9d05b320-910b-406e-955a-e1d143ee93ff.roa (raw, json)
Hash identifier:          JLVwjYJ2E+sj5BpLpOozduYKSdIk1NXe/JxRJ9odHQ4=
Subject key identifier:   76:53:A5:DC:6D:89:DC:A0:E2:B7:3C:A7:0E:A7:62:96:42:06:46:17
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       313158DA8C1710A739F114072A0A3B7D5DAD81E3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d05b320-910b-406e-955a-e1d143ee93ff.roa
Signing time:             Wed 19 Aug 2026 01:10:17 +0000
ROA not before:           Wed 19 Aug 2026 01:10:17 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d:a080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:31:58:da:8c:17:10:a7:39:f1:14:07:2a:0a:3b:7d:5d:ad:81:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 01:10:17 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=ac164e52af90b3f8b7dfdc43eb8f86beb29fd3fe43d8b325bedd97b2b3b4975b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:78:96:36:97:7e:8b:1e:03:34:73:46:31:
                    90:12:27:ae:73:15:a0:68:31:af:05:73:62:74:a2:
                    82:6b:d2:2a:bb:60:29:89:2d:ec:24:bc:99:66:2a:
                    1e:84:dc:55:3b:93:f1:12:35:f1:06:69:0e:27:a6:
                    9c:e4:e3:9b:0f:4e:7e:83:80:fb:43:51:b1:4b:ef:
                    82:11:b2:7a:5d:be:ce:b0:bb:47:cf:6b:cd:27:26:
                    0f:ca:24:7d:c2:53:12:4c:8a:c2:3a:4d:39:a9:ab:
                    bd:1c:3d:6c:d4:4c:14:dd:20:15:75:1e:be:c9:03:
                    1e:3b:55:96:7d:39:f3:a1:b2:c5:44:16:c4:87:03:
                    2f:c0:c7:8b:c8:90:a5:ea:9c:dd:59:31:8e:ec:30:
                    55:08:21:ec:3e:c9:de:37:c7:d8:78:dc:82:3d:d4:
                    4f:0d:3b:bb:97:67:1c:53:61:4b:7a:54:b0:c8:4c:
                    87:f8:20:c1:63:e4:66:49:ad:e9:26:f3:bf:12:ab:
                    d0:db:9f:cc:0b:a4:5a:a7:b6:fe:c2:5a:e1:d5:7f:
                    81:ed:73:47:99:a3:7a:ef:bc:45:ed:37:af:e2:31:
                    32:a3:03:9c:2e:67:8c:53:b5:46:ed:16:cf:37:19:
                    46:1b:5d:fe:b4:81:37:89:dd:44:ef:03:c6:3c:88:
                    73:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:A5:DC:6D:89:DC:A0:E2:B7:3C:A7:0E:A7:62:96:42:06:46:17
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d05b320-910b-406e-955a-e1d143ee93ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d:a080::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:77:2e:8b:38:6a:a3:67:42:bd:b9:19:31:42:28:e6:96:
         8f:f9:44:5d:ff:99:62:63:62:dd:26:01:11:89:dc:3e:4c:3f:
         d5:e2:61:62:99:5d:f6:c7:56:09:e5:f6:49:59:14:6b:2d:af:
         27:e6:37:ca:a8:56:2c:c8:cc:5f:1a:5e:86:e9:bd:f4:c7:8d:
         e7:22:ca:21:62:31:95:92:8d:56:d8:1c:af:db:7c:62:d6:33:
         e8:db:1f:0b:8d:ff:66:77:f1:3c:dc:77:0b:89:a6:25:85:c7:
         a5:88:b2:d6:d9:47:18:29:47:2f:4d:ab:53:61:0c:cd:db:e0:
         fc:1e:ad:d3:2c:9c:87:e4:b7:64:8a:51:31:77:a9:89:40:76:
         8d:36:e0:f1:39:07:e0:48:f5:70:5c:48:90:2d:77:e3:6a:a1:
         9c:a5:eb:1b:91:e0:83:39:55:06:64:df:3c:89:f7:97:29:f2:
         de:1b:7b:ce:1a:a4:5c:7b:24:dd:e8:ad:e2:e6:a9:36:be:1d:
         26:24:fc:bd:f7:e8:c7:d8:e1:0a:68:38:18:df:54:c2:e7:c8:
         52:28:95:b8:a3:80:7c:95:48:77:62:70:7f:eb:b8:0e:37:e0:
         0c:b3:84:57:03:87:d2:a3:29:0d:7e:1f:7f:0f:32:2a:a0:2c:
         6b:f6:d1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----