Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce577ba2-d2ac-4e2a-a4f9-ea37e9d56903.roa
File:                     ce577ba2-d2ac-4e2a-a4f9-ea37e9d56903.roa (raw, json)
Hash identifier:          JCZAsLWe8yB4PU45cuHlsw93+TPq05zpbPrZd7pLhFc=
Subject key identifier:   02:3E:E1:46:2F:D8:E5:6A:03:03:AA:51:F5:88:DE:96:71:14:55:8B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       080F80E5ACA113C7707B4D599A5AA09E728E1A6F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce577ba2-d2ac-4e2a-a4f9-ea37e9d56903.roa
Signing time:             Mon 26 Oct 2026 04:30:41 +0000
ROA not before:           Mon 26 Oct 2026 04:30:41 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06d:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0f:80:e5:ac:a1:13:c7:70:7b:4d:59:9a:5a:a0:9e:72:8e:1a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:30:41 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=123a530f5fb0bdb1035f53c533bd588bef404be6afb44792473f72c4ef4d103f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:da:c5:26:09:be:a8:1f:ad:8e:e5:f2:dd:
                    bb:41:8d:31:a2:d3:77:1c:e6:0a:de:71:c4:d4:ab:
                    d0:5c:ad:38:f4:3e:01:be:f1:f0:6e:ea:9b:05:83:
                    eb:7d:a7:7c:1f:84:6f:88:ac:cf:8e:97:de:ba:55:
                    0c:57:0b:12:47:5b:ef:a4:1b:f3:72:2c:1c:af:7e:
                    0d:62:52:82:c0:fd:2b:d3:da:fc:16:ac:3c:40:f0:
                    77:3d:10:ab:6d:92:76:08:ae:c6:6a:2d:ce:86:d2:
                    db:4e:a9:c2:b9:df:b8:81:da:41:ef:11:15:b4:54:
                    a1:ce:7b:b0:78:21:8f:fa:40:6d:09:f9:97:2a:5c:
                    99:a9:c7:70:02:ef:3d:15:cb:f9:d2:1a:e8:dd:c5:
                    20:44:65:2c:58:42:c0:ee:b7:3a:f8:1e:79:8d:3e:
                    cf:ff:dc:ca:19:32:d3:d1:36:7f:b9:43:f5:60:44:
                    17:cb:57:20:d8:ab:b3:6a:5f:b0:fc:9b:f3:00:35:
                    0f:3b:b7:d4:47:c6:4e:4d:e7:67:1b:ef:a6:1d:17:
                    64:e4:bd:92:8d:c1:3d:32:72:16:7d:2c:55:cf:6d:
                    70:41:4b:e8:b8:11:2a:32:d6:09:39:d3:0a:47:54:
                    fa:d8:39:dc:e1:ce:00:52:a6:55:3f:eb:1b:14:be:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3E:E1:46:2F:D8:E5:6A:03:03:AA:51:F5:88:DE:96:71:14:55:8B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce577ba2-d2ac-4e2a-a4f9-ea37e9d56903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06d:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:de:6e:b3:88:4a:21:b9:36:fa:ba:ce:12:10:48:37:b5:85:
         1c:b3:17:16:6d:4d:76:4e:4a:f9:a2:51:84:0a:80:77:01:32:
         d1:4b:99:0a:9a:f9:3a:ec:b0:a9:eb:dd:31:86:15:f2:c0:35:
         82:52:62:4a:ca:a4:29:09:04:8b:9e:8c:fb:c3:84:92:5a:27:
         fc:c1:93:13:ce:d2:85:1c:76:b0:1a:8a:a0:48:84:4a:43:e8:
         90:b6:78:1f:7d:bc:23:5d:ce:fd:98:48:6d:6d:d1:44:67:9e:
         18:d7:56:47:0e:00:7e:64:78:4d:1b:fa:00:09:d9:a5:1d:da:
         16:00:f1:6f:8f:1b:95:6d:04:65:f3:26:a5:c6:2d:47:40:de:
         d0:12:06:7e:9e:7b:74:5e:cd:da:f3:51:f6:e0:43:60:63:bb:
         63:fc:38:76:02:10:49:c5:b1:11:2c:26:07:4b:d0:ea:7c:a5:
         50:eb:52:1c:40:f4:cb:be:0a:6d:47:c5:19:b9:d3:5a:5c:23:
         43:cb:09:ed:6a:fd:07:3b:99:42:24:34:08:b1:2e:9e:0b:2a:
         b0:12:ba:99:b9:b0:bf:bc:0a:2a:97:ef:29:3e:00:c3:73:1d:
         36:ad:54:a5:61:5f:2b:23:57:14:ff:a9:83:76:f2:44:71:c6:
         9f:6d:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----