Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
File:                     9ee0a48b-ba88-465e-9e42-d0732351f46e.roa (raw, json)
Hash identifier:          jlV1YZILDz/CwHrdP2EojGguDQ2PvBu8uNEmRtkAz8Q=
Subject key identifier:   BE:CE:CC:85:5F:C0:32:70:7D:C0:81:D3:AE:EA:25:62:37:D9:AE:46
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       511F7B6384CE0A80E297461D94C22EBCA57213A4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
Signing time:             Tue 27 Oct 2026 00:02:21 +0000
ROA not before:           Tue 27 Oct 2026 00:02:21 +0000
ROA not after:            Mon 25 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        79.125.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1f:7b:63:84:ce:0a:80:e2:97:46:1d:94:c2:2e:bc:a5:72:13:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 27 00:02:21 2026 GMT
            Not After : Jan 25 23:59:59 2027 GMT
        Subject: serialNumber=0924536ae5a4c1fbe00920743379d79de354ff9faf980d138946ace771db9c50, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b3:cb:0c:27:bb:8a:e5:f8:0d:95:5d:fa:17:
                    64:70:0d:4e:bc:a6:dd:f6:79:7b:93:95:c3:90:76:
                    32:e7:c2:87:28:f0:7b:70:3d:26:20:82:89:2a:42:
                    e7:ad:81:f1:6f:fa:eb:f4:ff:6c:f7:ee:6d:57:0a:
                    8d:a8:cc:33:d6:dd:27:a6:fe:34:8b:af:b1:d7:59:
                    09:e1:2c:7d:45:6d:8e:f9:fa:0e:82:88:08:cd:5f:
                    c0:e1:6a:da:1e:82:89:c8:88:b4:3b:76:13:1c:a0:
                    c4:97:5f:2a:8a:2b:f9:2d:00:2c:00:a6:1b:23:87:
                    69:17:75:5d:55:65:9a:88:ef:5c:d0:39:ea:52:b1:
                    9a:35:ba:05:b1:1d:54:52:d8:06:09:01:c3:4f:a2:
                    e1:96:74:9a:be:ab:6a:c1:c2:43:48:18:1a:c8:b1:
                    dc:a0:7e:81:4f:24:f5:63:e0:17:ba:0a:da:91:8c:
                    15:a1:c3:58:ab:f1:a7:20:c1:65:67:38:25:4a:24:
                    ea:31:df:15:5e:de:7f:ea:96:38:9e:0e:8a:56:78:
                    7e:d3:47:3d:f9:8b:b2:87:c6:c1:20:99:a8:69:5a:
                    14:9e:a8:eb:6e:4c:67:ef:c2:86:fd:cd:5f:5e:c9:
                    70:42:fa:63:d7:6d:f5:99:e5:98:45:18:57:0c:60:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CE:CC:85:5F:C0:32:70:7D:C0:81:D3:AE:EA:25:62:37:D9:AE:46
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.125.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:f9:62:de:48:a7:09:6e:3a:68:5b:ed:20:6e:93:fb:bc:ae:
         8d:53:83:3a:a5:a4:02:20:2d:f4:16:41:e3:82:c6:8d:82:73:
         d6:8f:11:ae:ec:6a:27:4d:4a:d9:cc:eb:1f:d0:42:06:5f:10:
         4b:31:21:19:b4:2c:61:16:25:aa:4f:93:fb:e7:a3:3d:7b:61:
         77:74:4f:af:7d:bb:ff:e2:9a:d7:06:96:19:83:7d:87:9e:eb:
         7d:cb:51:21:7f:2d:42:da:80:df:75:37:97:c8:33:de:5f:ab:
         83:11:4b:8c:39:b6:d8:8e:88:ce:bc:87:b6:f2:a2:53:75:c1:
         05:d7:9f:bb:cc:48:52:d4:cd:3d:fb:9b:f7:20:12:c9:98:20:
         1d:6a:2d:ef:a6:ad:95:5c:42:ce:51:9c:1b:25:1d:75:eb:c6:
         8e:84:d6:a4:37:6c:00:75:32:b4:e0:36:0c:1c:70:79:77:39:
         6c:55:c3:56:94:89:97:fe:10:2c:e3:8f:83:a6:06:e8:4b:da:
         09:ea:33:72:80:2f:b3:0f:13:60:74:26:7e:d9:32:4b:c6:33:
         78:24:b5:f9:7e:32:09:9f:93:db:68:4e:96:1d:67:49:ec:69:
         06:9e:47:21:7d:8c:67:f9:f1:43:b1:10:0f:bd:e9:74:67:bd:
         11:15:e9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----