Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac7d1653-2fa3-4817-8e00-87e6c3f2a9c2.roa
File:                     ac7d1653-2fa3-4817-8e00-87e6c3f2a9c2.roa (raw, json)
Hash identifier:          UmLQnjVEHYMdI8RROZZGs7LzDyR0+DxSkfHgaySNcFQ=
Subject key identifier:   6C:10:E2:6B:89:E5:8F:17:54:8A:2D:EB:8F:46:88:0D:79:77:FD:E4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       26FEF78DE697C307C0995E7051CF41532A68EB0A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac7d1653-2fa3-4817-8e00-87e6c3f2a9c2.roa
Signing time:             Thu 30 Jul 2026 01:30:15 +0000
ROA not before:           Thu 30 Jul 2026 01:30:15 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d074:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fe:f7:8d:e6:97:c3:07:c0:99:5e:70:51:cf:41:53:2a:68:eb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 30 01:30:15 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=4d8b71dea77266807dce82c4f0ab81d350f7f9759963cf23fbc5b05f6daed11c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:de:b8:5a:fb:f8:1d:13:00:32:7b:2d:b6:83:
                    64:01:9a:58:71:9d:db:38:17:9e:48:a5:03:6f:ce:
                    33:8f:8d:82:50:5c:a4:40:cf:c3:3a:44:e0:31:b8:
                    52:2b:ca:52:a8:c6:71:cf:95:49:97:7a:8e:97:32:
                    5c:12:ea:7f:3f:85:7b:17:7a:5d:42:2e:8c:cb:5b:
                    2b:9c:b4:ff:2e:70:ce:dd:02:8a:90:c6:c2:4d:e4:
                    64:d3:90:ca:c1:71:24:00:5e:41:ea:e1:9e:48:23:
                    88:31:25:3e:18:44:09:bb:a5:5d:b7:f4:23:d8:56:
                    a3:57:fb:05:95:e8:71:0a:e4:54:bc:11:d9:5b:3a:
                    39:36:15:fa:0f:7c:ed:10:3f:1e:ac:47:fe:3d:a7:
                    17:e6:fc:38:8c:f4:0e:08:44:a0:9f:96:1e:93:6e:
                    fb:62:2a:9e:f5:33:9f:b5:41:ad:19:d8:0e:80:a3:
                    a5:d7:c1:e5:13:6e:a9:91:ec:46:df:14:59:7f:17:
                    4f:2c:e6:f9:43:c4:05:72:30:c6:b0:1f:82:cc:a6:
                    f3:e3:ee:0b:16:ed:71:4b:44:e6:5e:c6:6a:1b:52:
                    24:73:7b:be:7c:ee:13:fe:a6:bf:9c:56:31:96:a0:
                    f5:05:63:14:81:37:5f:1c:b5:c8:09:65:a3:89:ea:
                    9a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:10:E2:6B:89:E5:8F:17:54:8A:2D:EB:8F:46:88:0D:79:77:FD:E4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac7d1653-2fa3-4817-8e00-87e6c3f2a9c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:10:22:d7:25:d6:4c:e2:1b:fb:e9:49:ed:f2:f2:5f:60:76:
         5f:0c:83:5f:9f:62:96:05:10:7e:3b:06:31:84:e0:82:be:47:
         06:55:d6:ee:cb:75:34:21:ba:d5:fe:c1:0a:26:28:b4:6c:86:
         b8:ec:b1:4b:d0:11:96:8a:2d:95:31:a0:ed:78:eb:d2:4d:4b:
         5b:4f:46:c1:d9:1f:55:4e:ba:f1:69:da:5d:be:6b:9d:15:f2:
         79:97:d5:d8:af:e4:3f:ad:17:e5:fb:b2:d6:aa:83:6b:19:bf:
         95:c4:60:4d:81:9c:19:c7:f8:64:bc:85:e4:ab:c0:26:19:e3:
         d0:d4:6d:41:9e:92:46:b7:59:a7:99:c4:52:7e:aa:31:a9:8e:
         31:54:bf:c0:f7:5e:4c:1e:e0:54:53:ab:3f:0d:b2:aa:b1:9a:
         f3:e6:cb:df:d2:f2:50:dc:fe:35:f0:b1:61:e3:73:19:e6:af:
         5f:6e:4d:75:70:a7:28:a6:f7:b8:91:5e:1f:f6:09:8c:ab:e2:
         03:67:19:ec:26:7c:7c:82:77:48:08:25:59:dc:f8:c7:e2:0c:
         f7:e6:35:e7:06:cd:af:25:c5:23:c1:9f:13:2e:36:df:ea:6d:
         38:89:df:75:f9:f1:16:fd:c4:ae:cd:7f:28:7a:06:78:65:e9:
         f3:20:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----