Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6931f13-0c44-4edc-b1b7-89dc8e035321.roa
File:                     d6931f13-0c44-4edc-b1b7-89dc8e035321.roa (raw, json)
Hash identifier:          JQiNfI3EZVHhuxv1I7TSCn+RC7RlkaEuogCBcRFXZQk=
Subject key identifier:   B0:27:CC:F1:73:66:B4:14:75:68:74:A7:F9:A7:27:5F:10:9A:3B:10
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       54C2255BD2E707D7E815D8164583B8DF09DC5A67
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6931f13-0c44-4edc-b1b7-89dc8e035321.roa
Signing time:             Mon 26 Oct 2026 04:40:23 +0000
ROA not before:           Mon 26 Oct 2026 04:40:23 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d058::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c2:25:5b:d2:e7:07:d7:e8:15:d8:16:45:83:b8:df:09:dc:5a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:23 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=b5c2792625b6bf88ad62826ec94c059984788d5dd9e5c3287aac79487df84971, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:56:66:9b:a7:d0:10:61:a6:95:3e:59:d6:
                    1f:11:08:90:a2:5c:d0:e8:49:3f:28:f4:ad:c3:93:
                    60:ad:e6:a2:8e:e7:88:6d:fa:46:f3:47:8b:f5:11:
                    1d:0e:49:63:02:2f:39:26:55:73:f5:b4:d0:f7:a7:
                    b0:a6:05:98:9f:50:a2:74:ea:f3:55:35:ac:67:47:
                    b6:2e:e9:bf:33:d6:c0:72:e5:c8:ce:b5:20:7f:a6:
                    13:b7:f7:ab:1f:de:80:d5:1c:5f:7e:27:56:e3:a3:
                    fb:a9:8e:88:85:22:d7:3d:8b:6c:8f:1d:f1:20:0d:
                    37:a9:f9:18:a5:26:45:0c:4b:48:f4:9b:e7:ff:4e:
                    27:6a:a4:09:a9:1a:f8:c9:83:e8:8a:fb:f9:27:a9:
                    1d:53:0a:34:bb:3c:1c:96:c1:16:f7:10:82:3c:1d:
                    72:5e:0c:90:20:f7:44:dd:d2:31:e4:ab:e0:af:a2:
                    bf:fa:a9:62:84:31:ef:31:9a:36:e0:99:55:20:2f:
                    70:bf:fa:a1:6e:56:ca:01:d0:a9:7e:a2:06:74:f8:
                    fe:c2:b3:e4:35:0d:87:f8:61:0b:73:0a:e4:d5:4b:
                    3b:27:87:31:19:b1:af:85:26:be:1c:d6:2d:3a:dd:
                    61:a7:c9:cf:64:a8:59:c4:35:92:3a:97:99:97:a9:
                    d6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:27:CC:F1:73:66:B4:14:75:68:74:A7:F9:A7:27:5F:10:9A:3B:10
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6931f13-0c44-4edc-b1b7-89dc8e035321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d058::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:06:f2:a1:bf:98:26:c5:61:92:90:a2:d8:1f:81:f7:bd:43:
         00:f7:07:26:7f:31:74:60:5d:a0:b3:a3:b9:2f:6c:36:a7:6a:
         99:08:ad:70:47:25:f8:2e:56:90:4c:7f:71:05:c3:07:85:83:
         05:09:82:43:a2:10:8f:34:2a:97:81:00:2c:91:3a:6b:9a:e7:
         2f:31:08:d7:02:6e:7d:51:0a:d0:8c:d4:10:ba:7a:cf:ee:e5:
         f6:70:45:3e:32:86:de:e3:f1:bd:b1:db:3f:bc:d0:73:b2:17:
         dd:6b:78:4f:e9:22:6c:74:92:cd:a8:db:1d:57:28:36:eb:4d:
         81:32:d7:54:47:98:4d:5e:c5:1d:9e:7d:d3:8f:d8:0e:d6:c2:
         3d:83:7c:9d:76:91:bc:91:b5:7f:49:15:65:b7:e8:ea:3a:58:
         7e:61:22:95:9c:bf:2b:43:5b:bd:50:c6:44:cf:70:55:bd:c5:
         e9:bf:b0:9e:e2:58:cb:d6:09:28:e6:c1:ef:00:61:d5:00:3c:
         4d:5d:e7:f2:92:2f:f8:c0:10:2c:7d:5b:9c:91:02:a2:fc:55:
         db:ae:3b:f4:b2:50:6a:5e:32:0a:b7:6a:e2:1b:54:3b:5e:95:
         8c:75:20:24:d8:a4:67:34:1c:3e:0c:7b:d3:88:8c:96:8f:42:
         27:91:f2:9e
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUVMIlW9LnB9foFdgWRYO43wncWmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDQwMjNaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGI1YzI3OTI2MjViNmJmODhhZDYyODI2ZWM5NGMwNTk5ODQ3ODhkNWRkOWU1
YzMyODdhYWM3OTQ4N2RmODQ5NzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALCaVmabp9AQYaaVPlnWHxEIkKJc0OhJPyj0rcOTYK3moo7niG36RvNHi/UR
HQ5JYwIvOSZVc/W00PensKYFmJ9QonTq81U1rGdHti7pvzPWwHLlyM61IH+mE7f3
qx/egNUcX34nVuOj+6mOiIUi1z2LbI8d8SANN6n5GKUmRQxLSPSb5/9OJ2qkCaka
+MmD6Ir7+SepHVMKNLs8HJbBFvcQgjwdcl4MkCD3RN3SMeSr4K+iv/qpYoQx7zGa
NuCZVSAvcL/6oW5WygHQqX6iBnT4/sKz5DUNh/hhC3MK5NVLOyeHMRmxr4UmvhzW
LTrdYafJz2SoWcQ1kjqXmZep1i8CAwEAAaOCAiIwggIeMB0GA1UdDgQWBBSwJ8zx
c2a0FHVodKf5pydfEJo7EDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDY5MzFmMTMtMGM0NC00ZWRjLWIxYjctODlkYzhlMDM1MzIxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0Fgw
DQYJKoZIhvcNAQELBQADggEBAB0G8qG/mCbFYZKQotgfgfe9QwD3ByZ/MXRgXaCz
o7kvbDanapkIrXBHJfguVpBMf3EFwweFgwUJgkOiEI80KpeBACyROmua5y8xCNcC
bn1RCtCM1BC6es/u5fZwRT4yht7j8b2x2z+80HOyF91reE/pImx0ks2o2x1XKDbr
TYEy11RHmE1exR2efdOP2A7Wwj2DfJ12kbyRtX9JFWW36Oo6WH5hIpWcvytDW71Q
xkTPcFW9xem/sJ7iWMvWCSjmwe8AYdUAPE1d5/KSL/jAECx9W5yRAqL8VduuO/Sy
UGpeMgq3auIbVDtelYx1ICTYpGc0HD4Me9OIjJaPQieR8p4=
-----END CERTIFICATE-----