Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdfda4b5-843e-4797-9739-e616ff3d5825.roa
File:                     bdfda4b5-843e-4797-9739-e616ff3d5825.roa (raw, json)
Hash identifier:          X/CFHD+us8IlBnefJPsODN1LhRownyZoWc5M6sC9XWk=
Subject key identifier:   D5:D8:93:CE:33:53:54:C8:4B:0F:2F:03:C5:D4:56:41:0F:D2:20:2F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1C3FE4F3E9401BC2ACFCEF6D215A8D857EE4A355
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdfda4b5-843e-4797-9739-e616ff3d5825.roa
Signing time:             Thu 30 Jul 2026 01:40:33 +0000
ROA not before:           Thu 30 Jul 2026 01:40:33 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d030:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3f:e4:f3:e9:40:1b:c2:ac:fc:ef:6d:21:5a:8d:85:7e:e4:a3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 30 01:40:33 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=6edc4331616a38b36dcdd6337bd9e57483bd26d0331fe1a6bcd20e5a21657d8e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:54:d0:ab:24:5d:80:9f:de:f7:60:0e:a6:db:
                    67:1f:bb:92:0e:73:4f:d0:94:cc:20:8e:f7:ed:6b:
                    2b:26:6d:70:09:1b:e0:7c:a3:e2:2d:02:15:b0:c9:
                    27:78:d9:90:f4:e5:7f:ff:ed:3b:48:9b:3d:fb:b3:
                    87:f5:c6:f6:04:0c:04:6c:3d:22:58:82:12:93:2d:
                    9d:9a:29:86:81:0c:76:10:75:a4:55:13:ed:2d:d9:
                    14:30:f5:8f:ce:e6:8b:f4:0f:a3:49:a4:75:e0:25:
                    d1:c7:49:55:dc:0d:51:7f:c3:12:60:aa:1f:3e:07:
                    6c:c6:91:94:69:45:da:c3:f7:4a:ea:3c:fa:f8:99:
                    26:38:cd:86:74:ca:9c:be:b3:97:28:82:96:11:fb:
                    e2:4a:77:4c:b3:99:bb:78:0a:4c:6e:ff:ae:ea:2c:
                    4e:81:37:88:b5:60:db:bc:e4:87:23:ce:26:fd:64:
                    b7:92:9d:d3:05:8d:e4:a4:8a:ba:50:4b:12:8f:88:
                    0f:56:99:11:1b:e1:71:7f:14:44:cb:f5:fd:c9:61:
                    58:85:6e:0d:de:91:af:7c:80:e6:49:91:ac:64:b9:
                    92:f8:8e:25:fa:7a:fe:bc:79:9e:3e:06:77:ac:70:
                    9a:98:69:2b:ff:91:07:29:9b:09:e7:35:0a:94:9b:
                    74:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D8:93:CE:33:53:54:C8:4B:0F:2F:03:C5:D4:56:41:0F:D2:20:2F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdfda4b5-843e-4797-9739-e616ff3d5825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d030:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:b4:c7:4d:10:f7:a3:35:f3:9d:b7:ef:6b:1a:3f:15:ec:30:
         90:74:3c:f5:15:ce:f4:8d:9f:3f:4f:3d:b4:bf:2a:14:8b:c5:
         fa:4b:60:90:70:1a:78:64:9a:98:d6:f6:9e:20:b9:a7:62:5c:
         9a:30:10:27:b9:fb:72:8a:85:80:0b:4d:65:d5:87:d5:4b:35:
         d9:79:16:d0:6e:c0:86:02:77:88:52:10:fa:88:8d:04:2d:a1:
         6d:ed:bd:12:51:2f:c3:b0:b7:33:9b:ff:5f:da:df:e9:1c:c6:
         3e:6d:53:95:e8:c0:67:79:66:44:fa:26:06:3e:4f:d9:1f:34:
         87:bd:7c:c5:3c:42:57:47:4a:e3:19:b2:db:08:34:6f:7a:1f:
         ec:f9:f6:dc:98:52:69:12:68:d3:8f:25:30:68:7c:58:af:39:
         03:4b:38:da:76:e2:f0:be:57:4c:d9:2b:7c:cd:6c:6a:35:0d:
         93:6c:ea:6a:d7:38:cc:32:c0:43:2e:1b:2f:3e:6d:95:bc:a7:
         38:68:c8:eb:bf:6a:2f:da:4b:79:74:60:2e:1f:5c:44:0a:3f:
         55:ca:5b:c7:f1:b7:d8:33:d5:c6:05:93:fa:c5:a3:8f:c3:67:
         50:08:4d:b6:d3:51:91:43:b1:59:e4:07:69:3f:76:9a:31:8f:
         79:24:9d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----