Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0f6fb02-62ef-44b6-be63-dabac16f02dc.roa
File:                     a0f6fb02-62ef-44b6-be63-dabac16f02dc.roa (raw, json)
Hash identifier:          hDTpptRshvME3wrnCriMuLPfMTQ2A2/EBFgDz1tSPUk=
Subject key identifier:   46:19:41:7A:DA:A9:0E:7E:54:7F:A2:93:BA:C9:53:1B:75:17:6A:BB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4EBD98D512C314266C01F4A8E19644B5475B7092
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0f6fb02-62ef-44b6-be63-dabac16f02dc.roa
Signing time:             Wed 19 Aug 2026 01:00:06 +0000
ROA not before:           Wed 19 Aug 2026 01:00:06 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d05a:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bd:98:d5:12:c3:14:26:6c:01:f4:a8:e1:96:44:b5:47:5b:70:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 01:00:06 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=8f3d4ee52fedac00783138638b66fada8615c9e22d2f7967ea331fe7887a91c1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:71:e6:6d:5f:24:3e:80:9a:4c:5b:68:e7:
                    c0:ea:7b:28:22:06:f1:ed:4a:91:35:0b:63:7b:1f:
                    df:bd:49:75:d3:5d:4b:f9:a9:48:a2:aa:6b:33:b3:
                    8c:ce:b9:4f:15:44:2e:c7:94:8c:98:84:b4:02:da:
                    93:3a:5d:12:64:3d:7b:48:bc:38:f5:84:e8:75:53:
                    4e:ef:f6:6f:56:7c:5e:8d:fe:70:48:b1:ae:99:50:
                    43:c1:b7:cd:db:4e:2c:76:06:6d:94:ce:b9:d6:5f:
                    30:2a:34:4f:66:54:05:18:ca:df:92:5a:f4:b2:83:
                    f3:c1:1c:a2:c0:86:fc:bc:15:a8:fa:73:50:53:58:
                    78:01:45:ae:34:78:c7:e0:b0:fe:b9:38:5d:32:9e:
                    c8:95:80:2c:14:4e:3d:0a:5e:5f:1c:04:c8:30:2a:
                    41:2b:34:1d:44:0a:4b:9d:94:75:f6:2e:93:5a:4f:
                    5c:a5:b8:37:c1:10:9f:68:bb:76:0c:26:d9:c1:c6:
                    4f:1b:4e:23:96:94:3d:a7:25:a7:df:0d:63:97:52:
                    21:2f:d6:3a:06:42:60:3f:23:69:db:b4:a3:1f:7b:
                    10:5b:28:37:39:58:77:c3:dd:de:f1:a3:af:a6:d6:
                    1e:97:4c:57:b2:2e:c3:5b:93:e5:59:84:8c:ed:a9:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:19:41:7A:DA:A9:0E:7E:54:7F:A2:93:BA:C9:53:1B:75:17:6A:BB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0f6fb02-62ef-44b6-be63-dabac16f02dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d05a:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:d0:1e:60:66:cf:9d:18:21:bd:90:44:c2:62:c7:9f:93:81:
         ff:a1:5c:cb:60:62:38:2e:a2:73:18:ea:d4:e8:f0:ee:2f:13:
         a7:ff:6a:32:0a:91:3c:0e:e8:9d:9a:4e:74:a9:66:17:de:61:
         98:38:b6:1b:0b:6a:1b:67:13:57:92:d8:aa:22:65:3f:99:6c:
         49:f5:da:84:22:ef:cd:f6:05:19:3f:a9:94:8b:f4:26:bf:64:
         3b:f8:43:80:86:9d:91:42:f5:12:61:e4:60:6b:a0:63:40:54:
         12:77:6f:4e:b9:86:06:46:a9:8a:bb:7c:73:63:3a:91:6c:89:
         25:05:72:23:53:44:55:45:d6:a6:f5:97:e9:7e:2d:c0:3b:0e:
         2a:dc:47:4b:c0:c8:5d:7a:ce:bf:0e:4f:78:cb:49:11:3e:4e:
         a1:35:1f:58:01:35:5f:12:d7:0f:23:28:3c:1f:05:35:d0:ea:
         9a:8a:00:13:e2:7e:c3:1b:8a:07:6d:32:ba:e9:84:83:b3:95:
         1f:36:74:dc:66:68:5f:2b:9f:e5:3f:ee:eb:7f:4c:8b:4c:c1:
         72:aa:e4:7f:e3:4f:f6:32:b4:3d:e7:da:64:49:5d:55:7e:8d:
         31:da:79:18:eb:4c:88:2d:45:fa:ac:fa:71:01:35:53:d4:af:
         bf:5d:71:63
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTr2Y1RLDFCZsAfSo4ZZEtUdbcJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTkwMTAwMDZaFw0yNjExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDhmM2Q0ZWU1MmZlZGFjMDA3ODMxMzg2MzhiNjZmYWRhODYxNWM5ZTIyZDJm
Nzk2N2VhMzMxZmU3ODg3YTkxYzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMQ6ceZtXyQ+gJpMW2jnwOp7KCIG8e1KkTULY3sf371JddNdS/mpSKKqazOz
jM65TxVELseUjJiEtALakzpdEmQ9e0i8OPWE6HVTTu/2b1Z8Xo3+cEixrplQQ8G3
zdtOLHYGbZTOudZfMCo0T2ZUBRjK35Ja9LKD88EcosCG/LwVqPpzUFNYeAFFrjR4
x+Cw/rk4XTKeyJWALBROPQpeXxwEyDAqQSs0HUQKS52UdfYuk1pPXKW4N8EQn2i7
dgwm2cHGTxtOI5aUPaclp98NY5dSIS/WOgZCYD8jadu0ox97EFsoNzlYd8Pd3vGj
r6bWHpdMV7Iuw1uT5VmEjO2pyBcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRGGUF6
2qkOflR/opO6yVMbdRdquzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTBmNmZiMDItNjJlZi00NGI2LWJlNjMtZGFiYWMxNmYwMmRjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Fog
MA0GCSqGSIb3DQEBCwUAA4IBAQCm0B5gZs+dGCG9kETCYsefk4H/oVzLYGI4LqJz
GOrU6PDuLxOn/2oyCpE8Duidmk50qWYX3mGYOLYbC2obZxNXktiqImU/mWxJ9dqE
Iu/N9gUZP6mUi/Qmv2Q7+EOAhp2RQvUSYeRga6BjQFQSd29OuYYGRqmKu3xzYzqR
bIklBXIjU0RVRdam9Zfpfi3AOw4q3EdLwMhdes6/Dk94y0kRPk6hNR9YATVfEtcP
Iyg8HwU10OqaigAT4n7DG4oHbTK66YSDs5UfNnTcZmhfK5/lP+7rf0yLTMFyquR/
40/2MrQ959pkSV1Vfo0x2nkY60yILUX6rPpxATVT1K+/XXFj
-----END CERTIFICATE-----