Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa
File:                     d4a512a3-4257-431f-b201-8d747948cebb.roa (raw, json)
Hash identifier:          KLio43aXffAlNT9yYaWw33lnmTbMzbFtYVV8X8K2nH4=
Subject key identifier:   65:9D:91:EE:58:87:55:94:C2:F8:26:95:6D:43:C1:53:FE:79:F3:76
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3D10C320C613099317E044D95670A258FDFAEC1E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa
Signing time:             Mon 26 Oct 2026 05:02:55 +0000
ROA not before:           Mon 26 Oct 2026 05:02:55 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:c0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:10:c3:20:c6:13:09:93:17:e0:44:d9:56:70:a2:58:fd:fa:ec:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:02:55 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=f3e25352dd294ed51fdaeb52b5acb907f6145f21f00c13d7d138333ab61da46d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:04:26:98:ff:71:76:fc:ef:59:25:c9:29:
                    4a:b7:17:f0:a5:a0:a1:03:15:90:9a:f0:e9:d7:a7:
                    03:05:aa:26:ca:90:bd:c0:aa:bc:cb:4b:ed:69:2e:
                    01:16:ac:9b:b6:07:f2:49:db:4a:e4:1c:91:e5:5f:
                    38:30:33:32:a1:6e:e1:a4:a6:fa:14:16:18:5a:0b:
                    69:01:f7:02:59:9a:76:38:be:e2:c9:cf:73:90:22:
                    80:85:2b:9d:6a:ed:21:2e:37:0d:0e:d8:3d:e7:26:
                    63:6f:24:cb:fe:51:ab:4b:92:92:d7:ff:67:b8:ee:
                    10:31:6e:ad:a8:4d:cd:2b:23:92:76:48:38:bc:49:
                    4b:23:8b:77:0c:69:2e:4e:d3:15:85:39:63:78:9b:
                    fa:cc:02:96:81:74:36:74:c2:e1:55:65:be:73:64:
                    89:76:b6:75:2f:2b:8c:74:1a:f5:fe:ed:e7:72:62:
                    e2:8f:92:c0:f6:c8:7b:0a:eb:b0:4b:e6:9d:f0:d3:
                    ca:6a:da:ed:fb:85:88:8c:72:ee:fa:e1:e8:4a:d7:
                    c2:b7:b3:7c:29:73:95:7b:f5:c5:5a:58:fe:60:9a:
                    11:c5:48:15:cb:19:73:1c:8c:85:75:96:d4:a2:f1:
                    18:f0:54:76:17:34:51:7a:4b:5d:a1:59:78:93:62:
                    f0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9D:91:EE:58:87:55:94:C2:F8:26:95:6D:43:C1:53:FE:79:F3:76
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:c0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:f8:c7:37:c9:7f:db:ec:44:21:f8:ec:d1:1f:30:0f:d3:11:
         32:7a:1c:73:27:06:c9:07:ae:2e:70:40:5b:e4:31:94:68:ba:
         3e:6c:22:7d:3e:6c:62:a3:51:55:2f:36:4a:19:9f:96:fb:2c:
         d4:79:e7:71:6d:53:f1:d2:6c:98:64:82:3a:25:ad:bf:4e:93:
         f9:28:91:32:3c:a4:87:a6:be:6d:22:50:23:a5:82:4a:fb:46:
         93:c5:7a:8b:9a:14:f5:0c:c7:29:bb:37:34:cb:26:6c:09:e8:
         be:fc:10:fd:70:c0:0e:d8:21:79:56:24:cd:f8:bc:d3:b5:e6:
         f8:7a:da:e6:b6:0c:bf:80:bb:3e:d4:9c:aa:e5:96:b4:2e:61:
         88:44:82:6f:8c:ee:4c:af:32:79:ad:ae:c6:a9:11:74:24:cf:
         7a:fc:e7:c9:4b:c2:33:40:32:7f:a0:d0:26:37:af:69:29:a2:
         f3:da:9a:7c:6c:ca:91:57:58:b0:e3:c2:5d:04:9c:f5:23:94:
         a5:c5:0d:12:80:4b:12:44:46:09:97:9d:16:91:ef:4d:0f:ab:
         08:16:a8:67:bc:ed:1b:ba:1b:dd:56:3b:a0:78:5e:b2:0a:88:
         26:2d:0d:9d:bc:6e:c7:3d:d6:3f:f4:45:f3:1b:8c:fd:06:87:
         b1:c9:4a:f4
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUPRDDIMYTCZMX4ETZVnCiWP367B4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTAyNTVaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGYzZTI1MzUyZGQyOTRlZDUxZmRhZWI1MmI1YWNiOTA3ZjYxNDVmMjFmMDBj
MTNkN2QxMzgzMzNhYjYxZGE0NmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALNwBCaY/3F2/O9ZJckpSrcX8KWgoQMVkJrw6denAwWqJsqQvcCqvMtL7Wku
ARasm7YH8knbSuQckeVfODAzMqFu4aSm+hQWGFoLaQH3Almadji+4snPc5AigIUr
nWrtIS43DQ7YPecmY28ky/5Rq0uSktf/Z7juEDFurahNzSsjknZIOLxJSyOLdwxp
Lk7TFYU5Y3ib+swCloF0NnTC4VVlvnNkiXa2dS8rjHQa9f7t53Ji4o+SwPbIewrr
sEvmnfDTymra7fuFiIxy7vrh6ErXwrezfClzlXv1xVpY/mCaEcVIFcsZcxyMhXWW
1KLxGPBUdhc0UXpLXaFZeJNi8KkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRlnZHu
WIdVlML4JpVtQ8FT/nnzdjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDRhNTEyYTMtNDI1Ny00MzFmLWIyMDEtOGQ3NDc5NDhjZWJiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ADA
wDANBgkqhkiG9w0BAQsFAAOCAQEAxPjHN8l/2+xEIfjs0R8wD9MRMnoccycGyQeu
LnBAW+QxlGi6PmwifT5sYqNRVS82Shmflvss1HnncW1T8dJsmGSCOiWtv06T+SiR
Mjykh6a+bSJQI6WCSvtGk8V6i5oU9QzHKbs3NMsmbAnovvwQ/XDADtgheVYkzfi8
07Xm+Hra5rYMv4C7PtScquWWtC5hiESCb4zuTK8yea2uxqkRdCTPevznyUvCM0Ay
f6DQJjevaSmi89qafGzKkVdYsOPCXQSc9SOUpcUNEoBLEkRGCZedFpHvTQ+rCBao
Z7ztG7ob3VY7oHhesgqIJi0Nnbxuxz3WP/RF8xuM/QaHsclK9A==
-----END CERTIFICATE-----