Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdaa6de6-00d3-4d18-8aa0-0bf82888d36e.roa
File:                     bdaa6de6-00d3-4d18-8aa0-0bf82888d36e.roa (raw, json)
Hash identifier:          3H1TcpH9KeCx9B5qfaaLAEnXO02QlNhZ1WIxdaT9gBs=
Subject key identifier:   57:97:58:1A:80:C8:12:D0:E2:35:0C:5F:AA:5E:A2:BC:CA:25:DA:3F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2B6A0155F3C594389E6B975C6C41ECB714009D87
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdaa6de6-00d3-4d18-8aa0-0bf82888d36e.roa
Signing time:             Thu 30 Jul 2026 01:40:07 +0000
ROA not before:           Thu 30 Jul 2026 01:40:07 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d030:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6a:01:55:f3:c5:94:38:9e:6b:97:5c:6c:41:ec:b7:14:00:9d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 30 01:40:07 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=f253b7ce7ade23c7897c30674875a38c365ecf00b78eb52891060caedc725b53, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:94:22:3e:e8:d8:e1:fc:13:a5:1a:2e:09:
                    fc:91:36:b8:7d:e9:09:68:4c:61:b8:56:29:05:d5:
                    b5:ac:b4:fc:4a:99:71:52:3b:fd:e7:cf:68:69:2d:
                    39:77:08:ad:d5:56:e1:1a:ef:9c:0c:56:b6:fd:41:
                    85:35:69:e7:b7:eb:b1:c3:da:ba:fa:6c:49:12:2e:
                    84:2f:2a:9b:ad:b4:43:e7:d0:67:cc:c2:a3:0d:7b:
                    9b:57:36:be:3e:c3:c9:18:9f:0a:27:ff:a7:8e:04:
                    c3:f2:a8:30:c4:da:db:5a:9d:f8:21:71:84:60:77:
                    2e:16:64:14:5e:7b:40:e6:81:37:62:0a:03:d6:ef:
                    b7:8d:f3:e4:19:af:e2:fc:68:1e:a9:c7:40:f0:b0:
                    b2:03:49:7a:e3:d0:40:62:e9:23:d5:4f:a5:0a:2b:
                    39:e3:eb:57:e9:87:41:5b:e2:ef:7a:14:2f:18:3e:
                    f7:4c:c5:7a:96:d2:c0:13:3f:51:71:c6:c9:58:be:
                    13:ce:24:94:95:c8:79:b3:8f:53:a6:cd:50:e1:b8:
                    58:03:65:41:96:dc:3a:b0:db:6c:f9:d8:87:0f:0a:
                    ec:40:f5:98:a7:a4:0e:78:f4:1c:10:7e:34:98:68:
                    de:bf:6e:78:37:75:87:22:7e:05:8a:ab:c8:7c:d3:
                    ee:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:97:58:1A:80:C8:12:D0:E2:35:0C:5F:AA:5E:A2:BC:CA:25:DA:3F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdaa6de6-00d3-4d18-8aa0-0bf82888d36e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d030:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:ca:e4:ae:d1:93:8b:f0:a5:7a:ec:0c:e2:74:69:7a:1d:
         3b:89:da:29:10:6f:da:dd:98:c7:d3:cc:f8:d6:18:e8:8f:a0:
         e5:d6:5f:a2:00:77:73:7d:d2:6d:91:49:6f:c2:2d:cd:75:2b:
         a9:85:e7:74:62:1c:be:58:33:b1:aa:19:8f:47:84:1f:d3:c9:
         7b:b7:4b:87:8e:30:aa:24:5a:0c:32:f4:5c:1f:55:90:63:06:
         ca:fa:63:f1:ae:10:06:bf:55:8d:4a:bd:9e:7c:ec:69:66:97:
         82:9b:61:38:1c:c6:d7:ac:79:14:76:16:3a:f0:db:02:ad:55:
         a4:53:60:3e:ab:24:fe:cb:01:18:08:f8:69:38:1e:eb:e1:b5:
         13:42:a7:fe:20:52:da:40:34:cb:45:82:92:57:d3:5d:09:00:
         81:d3:13:75:9e:fd:ce:95:16:9b:84:08:ab:1c:4c:e7:46:b3:
         d6:d6:2c:f2:e4:83:7f:84:13:99:0d:7b:79:2f:80:49:e4:c0:
         16:77:70:28:84:0d:15:e8:f0:0b:c1:4a:5a:f2:b2:b6:dd:72:
         98:86:30:ad:9c:27:1c:30:e5:c6:bd:ec:58:24:23:19:5c:de:
         73:05:80:f8:ef:8b:12:c6:76:d5:de:81:5a:b6:91:a1:ec:c0:
         5f:af:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----