Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a626735f-cb4b-4dff-992e-95390a4e2eea.roa
File:                     a626735f-cb4b-4dff-992e-95390a4e2eea.roa (raw, json)
Hash identifier:          h8f1T1sF9A/Plt0CUnLFB1XqI+e7T0/pRxaeaiWVy+I=
Subject key identifier:   55:F4:AB:E3:C0:6B:C5:EE:42:9D:4C:94:FF:6A:14:88:79:EB:F5:77
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       31B6E32745BF646BF688F4F9768B097A3F583C20
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a626735f-cb4b-4dff-992e-95390a4e2eea.roa
Signing time:             Mon 26 Oct 2026 04:30:30 +0000
ROA not before:           Mon 26 Oct 2026 04:30:30 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d059:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b6:e3:27:45:bf:64:6b:f6:88:f4:f9:76:8b:09:7a:3f:58:3c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:30:30 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=3d857f486cd994860e7df13180917b3dc3ae2072290f6ca89be4d3f04767fcc5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:8d:80:ed:1b:73:8d:74:3a:b7:d6:bf:16:
                    ca:38:7b:26:5f:f4:9c:c9:e1:49:6b:c4:fe:75:27:
                    35:b6:ae:37:7b:8f:d5:c7:f1:54:05:fe:df:64:54:
                    0d:52:8e:68:c7:7c:d0:62:7f:c6:02:71:cc:df:a7:
                    cd:63:aa:f0:af:bc:16:77:ca:fb:1c:26:3b:e3:b4:
                    6f:d2:01:11:8b:16:31:e7:d8:4a:d3:66:ed:1e:41:
                    a5:0d:e9:f3:93:0a:b9:f1:4c:e3:8b:c4:26:20:c3:
                    49:e7:39:02:58:65:70:6e:d3:6c:42:56:71:39:b8:
                    e6:bd:e5:59:76:c3:e2:c9:94:7e:a1:b8:95:c9:cc:
                    63:50:68:52:df:b8:a2:92:bd:4b:e2:58:6f:ed:ab:
                    d5:6e:e4:b4:5f:00:fb:88:b5:f4:f5:9a:ef:58:f7:
                    1c:19:df:cc:3f:6a:e8:61:da:94:e2:4b:b7:3a:45:
                    4f:40:8c:79:64:db:f6:1c:f2:41:9f:99:75:93:f5:
                    d9:82:f6:b9:48:ae:48:aa:2f:03:8f:09:1f:1c:f3:
                    b9:0e:d6:77:74:d8:7d:d7:c3:75:e1:ec:da:3a:05:
                    ca:ad:2b:b7:e5:62:b3:82:03:05:6c:06:c8:f8:3f:
                    a3:dc:3b:d5:a7:18:91:b0:1d:27:6f:56:ef:6c:43:
                    43:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F4:AB:E3:C0:6B:C5:EE:42:9D:4C:94:FF:6A:14:88:79:EB:F5:77
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a626735f-cb4b-4dff-992e-95390a4e2eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:7a:c6:fb:c6:11:fb:d1:0b:31:43:ae:10:24:39:59:97:f0:
         95:f2:3a:b3:08:8c:ba:b2:c4:ab:0f:a5:a6:75:55:f4:18:b1:
         84:9e:ed:5e:44:cf:57:28:0f:3b:26:c8:e4:26:6f:64:d3:fb:
         89:00:35:ed:37:5e:a1:75:55:c4:9d:16:3e:4a:8c:f8:fa:d8:
         fc:a8:8c:9d:ce:13:bb:c5:1d:47:76:ae:08:cc:bf:17:77:b3:
         4a:07:4c:2d:1a:72:51:df:0d:e6:6f:8d:d0:23:67:a7:9e:1f:
         ec:a1:e2:3c:0d:9b:85:9b:95:bc:dd:da:52:b4:54:0f:ed:dd:
         e2:6c:8a:1a:ab:f2:51:33:e0:8e:34:2e:3f:dc:58:b3:68:21:
         8c:f9:aa:54:62:d0:99:f1:5c:fe:d7:7b:06:59:17:89:cf:05:
         8c:0b:83:a5:2d:ca:96:de:01:d7:45:90:b0:32:06:18:b3:71:
         6f:8c:61:89:39:d1:3c:72:32:fb:8f:9c:f4:7e:46:4c:bf:1f:
         0d:4d:4b:ae:4b:2c:45:b8:f7:fb:36:d3:fd:f2:96:7d:e3:3e:
         a9:73:27:eb:4f:da:e3:a8:40:a4:1b:d2:ef:bf:af:b8:23:e9:
         ba:04:65:07:12:d5:28:d2:f2:8f:df:92:85:73:cc:2d:d5:60:
         58:fb:a6:ef
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUMbbjJ0W/ZGv2iPT5dosJej9YPCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDMwMzBaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDNkODU3ZjQ4NmNkOTk0ODYwZTdkZjEzMTgwOTE3YjNkYzNhZTIwNzIyOTBm
NmNhODliZTRkM2YwNDc2N2ZjYzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALhvjYDtG3ONdDq31r8Wyjh7Jl/0nMnhSWvE/nUnNbauN3uP1cfxVAX+32RU
DVKOaMd80GJ/xgJxzN+nzWOq8K+8FnfK+xwmO+O0b9IBEYsWMefYStNm7R5BpQ3p
85MKufFM44vEJiDDSec5AlhlcG7TbEJWcTm45r3lWXbD4smUfqG4lcnMY1BoUt+4
opK9S+JYb+2r1W7ktF8A+4i19PWa71j3HBnfzD9q6GHalOJLtzpFT0CMeWTb9hzy
QZ+ZdZP12YL2uUiuSKovA48JHxzzuQ7Wd3TYfdfDdeHs2joFyq0rt+Vis4IDBWwG
yPg/o9w71acYkbAdJ29W72xDQ/kCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRV9Kvj
wGvF7kKdTJT/ahSIeev1dzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTYyNjczNWYtY2I0Yi00ZGZmLTk5MmUtOTUzOTBhNGUyZWVhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Fkg
MA0GCSqGSIb3DQEBCwUAA4IBAQBPesb7xhH70QsxQ64QJDlZl/CV8jqzCIy6ssSr
D6WmdVX0GLGEnu1eRM9XKA87JsjkJm9k0/uJADXtN16hdVXEnRY+Soz4+tj8qIyd
zhO7xR1Hdq4IzL8Xd7NKB0wtGnJR3w3mb43QI2ennh/soeI8DZuFm5W83dpStFQP
7d3ibIoaq/JRM+CONC4/3FizaCGM+apUYtCZ8Vz+13sGWReJzwWMC4OlLcqW3gHX
RZCwMgYYs3FvjGGJOdE8cjL7j5z0fkZMvx8NTUuuSyxFuPf7NtP98pZ94z6pcyfr
T9rjqECkG9Lvv6+4I+m6BGUHEtUo0vKP35KFc8wt1WBY+6bv
-----END CERTIFICATE-----