Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7f51085-242e-4975-929d-5a48b9aa7650.roa
File:                     b7f51085-242e-4975-929d-5a48b9aa7650.roa (raw, json)
Hash identifier:          4becfAizm1MJDr6Fp/uZ0Xeiz3C5pL11j8XlqxQ+Xcg=
Subject key identifier:   2B:B5:CC:EF:EC:95:20:4B:9B:DC:54:68:B5:65:70:C6:76:94:11:45
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1915BCBAD75EEDB708F8C4D08226A3066FFD9A8C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7f51085-242e-4975-929d-5a48b9aa7650.roa
Signing time:             Thu 22 Oct 2026 01:40:09 +0000
ROA not before:           Thu 22 Oct 2026 01:40:09 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:15:bc:ba:d7:5e:ed:b7:08:f8:c4:d0:82:26:a3:06:6f:fd:9a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 22 01:40:09 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=242bc7caea63154a4be81d132731560cce83c2a6952712348dc78f86a0a05836, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:95:bb:6d:27:ab:a7:7a:e1:58:b2:51:2a:2c:
                    24:6c:49:89:42:1d:01:ca:4b:f3:ae:7c:0f:37:09:
                    47:e0:92:8f:5b:92:05:f9:30:50:bb:dd:a8:68:57:
                    3e:04:82:38:1b:c5:fa:7c:b6:22:90:b0:44:fa:2c:
                    37:bc:2f:55:b8:40:5c:80:85:ce:57:26:9d:d3:0b:
                    f9:89:11:9c:9c:f9:3e:67:33:19:8a:68:58:65:62:
                    76:b6:39:fd:e4:b5:2e:de:06:b2:80:1a:93:38:98:
                    dd:35:0e:cf:dd:45:96:6c:9e:af:c7:0c:c8:95:08:
                    8b:79:cc:5b:25:fa:a2:02:76:ea:5c:c7:c9:db:9d:
                    3e:75:e3:1d:22:e3:9e:ff:31:c5:1b:f8:44:19:b3:
                    b3:ba:1f:1a:f4:c0:7c:5c:04:9f:2b:5a:ec:35:5b:
                    b7:10:86:1c:a5:e8:62:96:5b:b4:0b:83:8e:1a:36:
                    45:b2:ed:63:61:05:6f:21:5a:a4:06:c2:44:a5:86:
                    fd:70:98:77:74:59:2e:0d:07:4e:d9:c0:64:5c:50:
                    ff:ff:a4:bd:e3:fb:be:31:bf:c7:bd:18:e6:6b:2d:
                    c7:29:16:48:80:2b:7e:80:f9:22:dc:f3:cf:8f:68:
                    da:c3:35:40:de:5d:c5:cd:73:d7:89:a1:82:dd:96:
                    34:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B5:CC:EF:EC:95:20:4B:9B:DC:54:68:B5:65:70:C6:76:94:11:45
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7f51085-242e-4975-929d-5a48b9aa7650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:2c:51:2a:3a:d6:30:fd:cd:23:34:43:d5:96:e4:c6:44:6a:
         85:e7:2c:06:c3:b2:4c:18:f9:a8:61:d8:1b:59:69:dd:4b:ea:
         9d:55:d3:1e:c7:aa:66:77:77:46:8b:aa:d9:f5:ee:cb:1b:b2:
         ff:6d:42:4a:b4:75:9a:36:c0:a8:ce:bd:93:e8:7e:fa:d3:52:
         9a:46:ff:22:a0:b7:34:b6:39:94:c9:3b:bc:9c:7c:72:7c:4d:
         93:51:cf:b1:e9:6d:c4:99:ea:9f:4d:64:16:ff:83:ea:6c:0a:
         09:75:14:54:4c:fa:ea:f8:80:50:65:fe:7f:22:b5:6d:49:24:
         7c:ad:c8:2a:08:20:c2:b1:75:71:62:64:33:46:3a:e0:1a:9b:
         10:0d:b1:0b:9d:0d:4f:46:1f:50:1f:c8:2b:83:46:0e:f7:df:
         a3:70:d9:71:df:e5:73:6b:e6:b3:f3:78:23:fd:be:b8:54:3f:
         bd:1b:a1:a7:71:8b:ac:64:ba:bd:73:4e:ea:71:57:24:5e:5e:
         b7:b5:7a:66:a0:63:71:bb:bb:17:ff:97:30:06:98:d6:4c:f3:
         a1:ab:56:7c:bd:26:e3:ca:19:2a:5d:94:4e:22:13:8a:a7:fb:
         55:98:03:6e:d2:c6:3a:a1:79:ae:34:fa:3d:f7:5a:c7:42:a3:
         44:fa:c3:c7
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGRW8utde7bcI+MTQgiajBm/9mowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjIwMTQwMDlaFw0yNzAxMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDI0MmJjN2NhZWE2MzE1NGE0YmU4MWQxMzI3MzE1NjBjY2U4M2MyYTY5NTI3
MTIzNDhkYzc4Zjg2YTBhMDU4MzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJmVu20nq6d64ViyUSosJGxJiUIdAcpL8658DzcJR+CSj1uSBfkwULvdqGhX
PgSCOBvF+ny2IpCwRPosN7wvVbhAXICFzlcmndML+YkRnJz5PmczGYpoWGVidrY5
/eS1Lt4GsoAakziY3TUOz91Flmyer8cMyJUIi3nMWyX6ogJ26lzHydudPnXjHSLj
nv8xxRv4RBmzs7ofGvTAfFwEnyta7DVbtxCGHKXoYpZbtAuDjho2RbLtY2EFbyFa
pAbCRKWG/XCYd3RZLg0HTtnAZFxQ//+kveP7vjG/x70Y5mstxykWSIArfoD5Itzz
z49o2sM1QN5dxc1z14mhgt2WNGkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQrtczv
7JUgS5vcVGi1ZXDGdpQRRTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjdmNTEwODUtMjQyZS00OTc1LTkyOWQtNWE0OGI5YWE3NjUwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HtQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCELFEqOtYw/c0jNEPVluTGRGqF5ywGw7JMGPmo
YdgbWWndS+qdVdMex6pmd3dGi6rZ9e7LG7L/bUJKtHWaNsCozr2T6H7601KaRv8i
oLc0tjmUyTu8nHxyfE2TUc+x6W3EmeqfTWQW/4PqbAoJdRRUTPrq+IBQZf5/IrVt
SSR8rcgqCCDCsXVxYmQzRjrgGpsQDbELnQ1PRh9QH8grg0YO99+jcNlx3+Vza+az
83gj/b64VD+9G6GncYusZLq9c07qcVckXl63tXpmoGNxu7sX/5cwBpjWTPOhq1Z8
vSbjyhkqXZROIhOKp/tVmANu0sY6oXmuNPo991rHQqNE+sPH
-----END CERTIFICATE-----