Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b6458390-b890-469e-85b6-f6a75dc61271.roa
File:                     b6458390-b890-469e-85b6-f6a75dc61271.roa (raw, json)
Hash identifier:          5ZoQ6vVrrGOFAd45pi8yOmKW+sApTCydwBK4tOT2EwA=
Subject key identifier:   69:02:D8:5B:21:68:53:CB:1D:F5:7B:78:AA:FF:2B:B1:CB:D7:3C:6B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       76E1642E2BF84F83BA94DFB9BA75ACD8ABC5309F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b6458390-b890-469e-85b6-f6a75dc61271.roa
Signing time:             Wed 19 Aug 2026 01:00:25 +0000
ROA not before:           Wed 19 Aug 2026 01:00:25 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d:6080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e1:64:2e:2b:f8:4f:83:ba:94:df:b9:ba:75:ac:d8:ab:c5:30:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 01:00:25 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=d46e73e7f7eade6261041da484dc23dcf764be308a2afcbc6a315bf5222a5b59, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:a7:d0:77:37:83:0e:66:81:7c:a3:5d:f2:
                    d3:3a:9b:ba:dc:c6:a1:25:d0:dd:32:13:3d:59:7d:
                    47:d7:fb:b1:77:04:bf:88:54:9f:47:8a:e0:7f:e8:
                    03:1c:3a:da:92:e8:55:f9:67:60:78:45:11:96:0b:
                    b2:c1:06:23:db:7c:58:eb:90:e7:5a:56:d2:68:be:
                    0f:b0:6a:69:5a:a1:07:4e:af:9f:b5:56:54:68:3e:
                    0b:80:38:a6:b0:53:8e:b7:0b:39:af:af:40:3a:36:
                    b4:8d:ad:51:8e:cc:cb:a2:55:0f:ab:e2:a2:63:f3:
                    4b:2c:55:79:be:e1:e2:e6:97:65:be:64:d2:5f:e1:
                    3c:5c:7f:58:3b:c6:23:91:35:d5:b8:d2:9d:a1:b2:
                    6e:dd:88:83:7d:cb:0c:8b:2f:12:45:3c:f4:97:4c:
                    2d:f0:dc:47:e0:35:ff:2d:9e:0e:d1:04:6e:c7:8f:
                    74:45:8d:6c:eb:d2:b8:3f:2d:06:39:b1:e8:1f:d6:
                    94:67:f0:a6:af:81:62:80:6f:b5:b1:65:c1:70:c2:
                    f4:1f:e3:fb:de:f2:9a:26:a4:fa:f1:33:74:97:4d:
                    9c:81:d6:aa:11:8a:61:47:91:c4:fb:2b:df:eb:dc:
                    78:96:3a:7b:a8:ce:20:ca:6e:42:f7:1b:12:25:44:
                    79:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:02:D8:5B:21:68:53:CB:1D:F5:7B:78:AA:FF:2B:B1:CB:D7:3C:6B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b6458390-b890-469e-85b6-f6a75dc61271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:ed:49:43:28:e4:1a:c3:7e:5e:a2:73:51:22:7b:0f:26:88:
         b8:09:77:ce:0a:17:3e:1c:c1:34:52:f4:93:54:8e:61:04:15:
         66:e8:e3:ba:9f:43:4f:30:0c:13:1c:6a:83:2d:8d:52:63:80:
         eb:ed:15:aa:e1:d2:eb:a9:89:70:d1:2b:1d:f5:d4:d3:a8:7e:
         35:5e:bd:cd:15:a2:fd:77:08:1b:87:66:63:42:0d:3d:d1:4c:
         07:44:11:9e:04:d1:9c:96:1f:49:94:59:3d:d2:6a:7c:8c:1f:
         02:b7:4e:83:55:0a:c7:80:5c:31:c4:c6:79:17:87:d6:9f:a9:
         d5:98:33:33:15:5b:57:0a:58:48:4e:d5:d3:7d:6e:25:53:88:
         fd:de:e6:df:8a:f5:c5:cb:1d:f5:55:5b:aa:d2:c6:26:1e:74:
         76:e5:27:2f:86:90:3e:43:1a:2a:a2:2f:d8:7a:2e:2b:e6:9f:
         49:fa:50:f1:b8:45:41:69:ac:38:ff:06:34:3f:93:2c:ea:69:
         c6:9b:27:15:b6:64:8e:3f:9e:63:93:ad:6a:47:c0:28:25:f0:
         0b:98:4e:5a:94:fe:d4:79:cf:2a:22:54:2d:86:98:65:98:90:
         58:81:5a:a0:71:8a:fe:eb:a6:50:6e:dd:4a:84:11:89:89:07:
         20:43:a2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----