Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a129e18d-8c22-46bb-a20e-0577b34a9021.roa
File:                     a129e18d-8c22-46bb-a20e-0577b34a9021.roa (raw, json)
Hash identifier:          scSGtQRR/7yfHb5fnUHcKfSgRfgwB+qXcCybHdnhkFw=
Subject key identifier:   DA:A4:78:FB:B0:52:37:0B:CB:D1:FA:D7:D0:DC:D8:92:04:46:C1:3B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       47B14710C9A48BE780AF4DA9F8E0DE9A275B5778
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a129e18d-8c22-46bb-a20e-0577b34a9021.roa
Signing time:             Wed 19 Aug 2026 01:00:42 +0000
ROA not before:           Wed 19 Aug 2026 01:00:42 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d05a:e0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b1:47:10:c9:a4:8b:e7:80:af:4d:a9:f8:e0:de:9a:27:5b:57:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 01:00:42 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=36dd5fb643b8082e292ee7afe020e9aa108715e05d900e41ffc7fc28ee28610c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:d5:b0:29:1b:0f:82:db:ca:bb:11:5b:a4:
                    9e:78:03:fc:3b:c9:e3:48:42:58:7a:09:9c:f9:4a:
                    94:90:71:9b:a5:e3:89:84:67:d0:ad:a5:91:03:f3:
                    71:bd:55:03:1e:8d:8e:ee:e0:a1:2e:92:56:c0:ee:
                    4c:f9:fc:a4:16:65:2a:4e:fa:c0:13:0f:61:6e:be:
                    c4:e3:5f:fe:79:7a:6b:75:1d:94:71:0a:59:9d:59:
                    6d:aa:c8:ff:a7:18:e4:fb:7a:b1:16:1a:e6:19:f4:
                    04:8c:25:a8:d8:d3:ae:2f:0e:75:ef:f7:3d:1c:5f:
                    27:8a:e7:02:d8:62:11:ed:6d:6e:c5:99:76:ce:88:
                    15:bc:d1:6b:10:f0:89:ca:ea:8d:f7:ea:2d:3b:fa:
                    79:17:a7:8f:82:bb:1b:93:1e:e5:a6:10:4b:aa:06:
                    4b:7f:27:d6:90:1d:c7:e6:6c:78:c9:4f:17:51:d4:
                    66:2e:5c:a0:ca:42:0c:13:9e:35:77:64:ff:b8:5e:
                    c9:fd:a5:dc:b3:3b:8f:6b:c0:55:22:2f:0b:89:aa:
                    e0:e4:c6:39:10:44:d9:35:ca:63:0b:70:00:9a:77:
                    f7:f0:a5:1c:98:4b:09:4f:9a:e8:17:ad:83:54:12:
                    2d:cd:62:48:8a:5d:9d:56:00:93:67:bc:39:57:fb:
                    b0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A4:78:FB:B0:52:37:0B:CB:D1:FA:D7:D0:DC:D8:92:04:46:C1:3B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a129e18d-8c22-46bb-a20e-0577b34a9021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d05a:e0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:d8:9d:ee:01:de:d5:3e:ad:b9:77:f2:ce:fa:9d:34:79:0f:
         85:eb:a3:14:b3:40:ff:93:96:29:e2:7e:cf:57:fb:87:f1:91:
         5f:08:9b:8f:b8:2b:29:90:04:7b:05:51:0d:1a:33:36:25:0a:
         f6:0c:bf:46:0c:bc:ac:c9:f3:7a:e7:09:25:8a:53:45:e6:52:
         78:d2:fd:63:c8:c7:c3:a0:87:fc:5f:58:ee:1b:7d:12:54:1f:
         82:a9:f2:62:49:57:2f:76:b0:6b:07:54:e3:26:56:46:40:4d:
         01:30:90:f6:08:8c:f4:fd:76:75:74:34:d5:9e:aa:ab:63:10:
         92:ae:4b:d5:dd:fa:2c:02:d7:f1:f8:c0:e9:c3:4d:90:fb:74:
         b3:5d:89:8a:d8:e7:7c:b3:2f:73:ca:be:6f:13:a8:c7:42:c8:
         1f:14:bb:90:5f:c2:76:ce:3b:ca:69:6f:df:77:29:08:b3:43:
         c5:c3:9f:35:de:a3:e2:85:a6:19:e8:f4:ef:eb:44:ca:47:39:
         1d:ae:c9:c3:38:a1:73:fe:5f:c9:3f:28:88:d3:07:f4:32:f6:
         9b:d9:aa:e4:8d:bf:9e:dc:59:f7:56:a7:57:fb:07:50:7d:5b:
         c6:67:f2:b6:7b:10:54:5a:60:b8:90:1c:a8:f5:79:fe:35:6c:
         3a:ad:7d:61
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUR7FHEMmki+eAr02p+ODemidbV3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTkwMTAwNDJaFw0yNjExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDM2ZGQ1ZmI2NDNiODA4MmUyOTJlZTdhZmUwMjBlOWFhMTA4NzE1ZTA1ZDkw
MGU0MWZmYzdmYzI4ZWUyODYxMGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJeh1bApGw+C28q7EVuknngD/DvJ40hCWHoJnPlKlJBxm6XjiYRn0K2lkQPz
cb1VAx6Nju7goS6SVsDuTPn8pBZlKk76wBMPYW6+xONf/nl6a3UdlHEKWZ1ZbarI
/6cY5Pt6sRYa5hn0BIwlqNjTri8Ode/3PRxfJ4rnAthiEe1tbsWZds6IFbzRaxDw
icrqjffqLTv6eRenj4K7G5Me5aYQS6oGS38n1pAdx+ZseMlPF1HUZi5coMpCDBOe
NXdk/7heyf2l3LM7j2vAVSIvC4mq4OTGORBE2TXKYwtwAJp39/ClHJhLCU+a6Bet
g1QSLc1iSIpdnVYAk2e8OVf7sGsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTapHj7
sFI3C8vR+tfQ3NiSBEbBOzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTEyOWUxOGQtOGMyMi00NmJiLWEyMGUtMDU3N2IzNGE5MDIxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Frg
wDANBgkqhkiG9w0BAQsFAAOCAQEAJ9id7gHe1T6tuXfyzvqdNHkPheujFLNA/5OW
KeJ+z1f7h/GRXwibj7grKZAEewVRDRozNiUK9gy/Rgy8rMnzeucJJYpTReZSeNL9
Y8jHw6CH/F9Y7ht9ElQfgqnyYklXL3awawdU4yZWRkBNATCQ9giM9P12dXQ01Z6q
q2MQkq5L1d36LALX8fjA6cNNkPt0s12JitjnfLMvc8q+bxOox0LIHxS7kF/Cds47
ymlv33cpCLNDxcOfNd6j4oWmGej07+tEykc5Ha7Jwzihc/5fyT8oiNMH9DL2m9mq
5I2/ntxZ91anV/sHUH1bxmfytnsQVFpguJAcqPV5/jVsOq19YQ==
-----END CERTIFICATE-----