Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bbc59b63-5d58-4e68-8e95-c972a0df4b68.roa
File:                     bbc59b63-5d58-4e68-8e95-c972a0df4b68.roa (raw, json)
Hash identifier:          Yjljnco4ImPE2i8zDj9oNWhnkG+uzkegaLGjbbO7N8E=
Subject key identifier:   BF:61:85:35:B7:F3:85:AC:E6:D2:86:EF:16:CE:D2:94:AA:D7:66:92
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7185011EA02A8D034EEEB714466CE7586536D0A7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bbc59b63-5d58-4e68-8e95-c972a0df4b68.roa
Signing time:             Thu 15 Oct 2026 03:30:33 +0000
ROA not before:           Thu 15 Oct 2026 03:30:33 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:85:01:1e:a0:2a:8d:03:4e:ee:b7:14:46:6c:e7:58:65:36:d0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 15 03:30:33 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=ee3a1e9b1a5889685b645d2ce4ebfc885adf015a5e453b93a323bc4562def6dc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:20:7e:21:5b:6f:5c:66:9a:42:f3:ec:3d:29:
                    32:e0:e9:f5:97:f1:9b:05:9f:c3:99:e3:15:8b:39:
                    af:f2:78:f9:78:4a:48:a7:7b:b6:e8:24:6d:bc:46:
                    30:9b:2c:c1:ad:c7:fa:9c:aa:e6:e0:a7:68:87:6c:
                    85:29:6a:6a:e1:72:b0:7d:77:ee:f5:5b:07:24:05:
                    ec:af:f8:f4:11:70:3b:98:e7:b6:fb:74:06:8a:d4:
                    44:e6:22:40:25:32:3d:a6:cf:45:00:d1:ef:1d:ff:
                    58:cd:76:f9:bc:97:6b:a8:8b:93:6c:2b:c1:44:be:
                    9d:26:d9:ac:1c:e1:ac:82:4c:a7:ee:00:07:9a:81:
                    b4:c0:db:5f:72:38:2e:9d:5e:65:6b:e5:4b:b3:11:
                    bf:76:f6:0e:3c:ea:cf:9b:d3:e1:f7:48:ad:c8:61:
                    2b:7c:fd:6e:cf:3a:df:42:ba:d5:fc:c5:a9:2e:63:
                    f1:5f:47:06:58:64:66:ab:e0:cd:08:41:72:66:f2:
                    84:44:aa:12:fc:28:4f:f5:80:dc:2c:77:92:b0:31:
                    e5:0c:82:85:07:8e:1f:f1:d8:33:df:fb:6a:d4:05:
                    5a:48:f0:ec:cb:1d:81:ce:64:ee:00:30:65:42:4e:
                    d7:b5:0a:94:c0:6f:c0:8f:4b:c1:cd:c6:99:78:46:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:61:85:35:B7:F3:85:AC:E6:D2:86:EF:16:CE:D2:94:AA:D7:66:92
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bbc59b63-5d58-4e68-8e95-c972a0df4b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:3c:6b:aa:4f:7b:c9:11:11:b6:ce:73:13:9d:ea:26:10:db:
         d6:85:f9:85:32:ff:47:97:16:51:c4:bb:12:d8:69:33:61:cf:
         09:07:01:18:18:a0:93:5b:97:f0:ab:ea:47:e6:29:4d:22:c7:
         be:35:f5:d1:86:71:11:72:d3:27:d4:bf:60:9c:c3:38:e3:2e:
         4f:ab:f7:6a:b0:b6:35:1b:dc:5c:81:82:18:23:5e:4d:96:c4:
         ce:46:e0:a2:5c:39:0a:4c:97:45:17:57:53:23:6a:92:fe:d6:
         9d:70:cc:b8:a7:da:a0:6f:e2:c5:ac:14:35:91:49:dc:15:9b:
         6e:a4:79:72:3c:89:e1:eb:c1:1c:58:56:0e:c9:bc:38:2c:ad:
         09:68:83:a6:62:1a:cf:08:62:78:12:4d:4d:88:f9:5e:f0:14:
         a6:74:9f:04:4b:61:49:03:8c:a1:74:04:a1:67:9f:8d:3a:ed:
         43:1c:5f:e6:2b:61:e2:d4:b0:e1:fd:48:e6:89:a4:de:25:24:
         77:88:24:c2:fd:6e:7e:04:31:11:9a:c1:b7:99:13:d6:99:f9:
         82:62:06:73:b5:4b:1f:39:20:bf:06:8b:98:af:76:43:a1:4a:
         62:4b:6a:03:91:bb:ab:46:0a:8f:f2:b1:2f:0f:61:d1:a6:46:
         f6:cd:97:e4
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUcYUBHqAqjQNO7rcURmznWGU20KcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTUwMzMwMzNaFw0yNzAxMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGVlM2ExZTliMWE1ODg5Njg1YjY0NWQyY2U0ZWJmYzg4NWFkZjAxNWE1ZTQ1
M2I5M2EzMjNiYzQ1NjJkZWY2ZGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANggfiFbb1xmmkLz7D0pMuDp9ZfxmwWfw5njFYs5r/J4+XhKSKd7tugkbbxG
MJsswa3H+pyq5uCnaIdshSlqauFysH137vVbByQF7K/49BFwO5jntvt0BorUROYi
QCUyPabPRQDR7x3/WM12+byXa6iLk2wrwUS+nSbZrBzhrIJMp+4AB5qBtMDbX3I4
Lp1eZWvlS7MRv3b2Djzqz5vT4fdIrchhK3z9bs8630K61fzFqS5j8V9HBlhkZqvg
zQhBcmbyhESqEvwoT/WA3Cx3krAx5QyChQeOH/HYM9/7atQFWkjw7Msdgc5k7gAw
ZUJO17UKlMBvwI9Lwc3GmXhGtk8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS/YYU1
t/OFrObShu8WztKUqtdmkjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmJjNTliNjMtNWQ1OC00ZTY4LThlOTUtYzk3MmEwZGY0YjY4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0AAI
MA0GCSqGSIb3DQEBCwUAA4IBAQBPPGuqT3vJERG2znMTneomENvWhfmFMv9HlxZR
xLsS2GkzYc8JBwEYGKCTW5fwq+pH5ilNIse+NfXRhnERctMn1L9gnMM44y5Pq/dq
sLY1G9xcgYIYI15NlsTORuCiXDkKTJdFF1dTI2qS/tadcMy4p9qgb+LFrBQ1kUnc
FZtupHlyPInh68EcWFYOybw4LK0JaIOmYhrPCGJ4Ek1NiPle8BSmdJ8ES2FJA4yh
dAShZ5+NOu1DHF/mK2Hi1LDh/UjmiaTeJSR3iCTC/W5+BDERmsG3mRPWmfmCYgZz
tUsfOSC/BouYr3ZDoUpiS2oDkburRgqP8rEvD2HRpkb2zZfk
-----END CERTIFICATE-----