Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
File:                     b92d2073-fe74-4c3d-87a9-37106f766cba.roa (raw, json)
Hash identifier:          k/hvukYVHmLJapaa37iU7fnegMrkpVH41srMfxeZXEs=
Subject key identifier:   6F:3E:5A:52:EA:35:D0:C5:7F:E9:FF:B9:D0:22:0B:7F:DD:31:D1:EF
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       20CF50662EC28A4424BA67BE802FD6E4406F2E26
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
Signing time:             Mon 26 Oct 2026 05:03:12 +0000
ROA not before:           Mon 26 Oct 2026 05:03:12 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:8060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cf:50:66:2e:c2:8a:44:24:ba:67:be:80:2f:d6:e4:40:6f:2e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:03:12 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=f6103317108c5a1eb75ab8189977c9f76af5dbeec9b1b05c628eac1c89328f3d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:fb:48:9d:96:7a:8a:1c:68:98:da:e5:cb:
                    d2:aa:01:17:12:8a:ab:e6:80:da:a1:ac:1e:7f:e5:
                    87:99:43:04:bb:d2:8c:6c:13:99:1f:5f:04:b0:52:
                    97:b9:ef:e5:be:c4:43:5f:b6:d8:28:44:9a:58:55:
                    3e:ae:d1:29:ac:c4:fb:71:18:b3:dd:d1:de:9e:15:
                    69:5a:85:43:d0:47:e8:77:dd:81:2b:cf:ab:4b:2b:
                    85:73:32:eb:72:b8:d4:d6:ea:a2:c1:2e:c5:90:ee:
                    09:59:50:8e:b2:6a:31:da:02:df:b9:0d:78:d6:e6:
                    b8:82:36:10:fa:53:70:d8:35:0e:d8:e3:f9:a8:b3:
                    8d:66:4e:45:09:b8:44:24:2c:0e:23:f2:9a:2d:58:
                    ec:04:96:4c:8e:66:de:2a:a0:34:5e:83:35:5c:0b:
                    36:e4:5f:f2:3c:5c:a4:bd:0c:30:b1:08:2a:bc:9e:
                    36:37:0e:6f:ec:8d:5f:a3:fc:79:0a:7c:68:a9:da:
                    c4:28:4a:41:4f:58:a0:05:5d:3e:cf:6c:b7:9a:82:
                    36:7f:3f:63:5f:71:78:f3:4c:fe:cf:30:0c:e0:f3:
                    dc:d9:39:bd:61:fa:4b:9f:5b:70:a4:63:75:9f:e3:
                    65:bb:ac:f5:3b:4c:da:eb:99:a1:00:0e:da:31:0e:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3E:5A:52:EA:35:D0:C5:7F:E9:FF:B9:D0:22:0B:7F:DD:31:D1:EF
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:8060::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:76:d7:5f:74:5b:1f:a4:f7:d5:0c:dc:ee:99:2b:38:62:
         50:d5:37:e3:3e:68:44:ca:a8:45:45:f2:41:92:71:94:f1:3b:
         3c:8f:e5:31:0e:a2:eb:18:27:5e:9c:34:9c:de:b3:44:eb:55:
         60:7f:ec:1c:55:61:6c:57:99:91:9f:03:f8:a2:53:18:09:65:
         7b:23:b3:e6:b5:e6:2f:f4:35:30:d8:30:51:db:50:c1:45:10:
         96:fb:61:30:50:f3:81:f9:bc:da:4d:c9:25:12:a2:58:ff:ec:
         1d:06:47:f2:e6:9f:cd:cd:5f:3c:5f:c8:99:04:5b:82:04:ab:
         ae:76:6d:2e:15:11:33:fa:f3:87:2d:16:69:b5:b1:17:9a:9a:
         52:87:7d:c6:83:d9:5c:bb:09:8d:c9:09:36:76:21:c4:82:1d:
         bb:f9:da:62:7c:f2:d9:25:19:84:e6:74:1a:7b:b5:1b:89:87:
         d8:95:34:d3:a9:3f:51:44:11:ef:08:bc:3b:9a:82:f7:0e:00:
         56:1c:22:31:71:e4:40:90:a3:fa:01:a8:fd:8c:21:64:c3:0f:
         fa:c0:7b:7a:1c:3d:41:c8:47:fd:a4:35:96:af:f8:f9:66:57:
         8c:e3:f8:f3:b8:2a:f6:7f:77:4a:af:9f:92:ba:72:a6:74:2a:
         aa:e1:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----