Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa
File:                     e437969a-a36c-4417-88bd-c48ac88d9a5c.roa (raw, json)
Hash identifier:          N4OmZS0i9SpS6Y1ttlEsdfohp0limsROgxfejlMZaF4=
Subject key identifier:   91:28:79:AF:F8:63:77:6C:49:AA:A3:8A:66:14:6B:F0:A1:36:2E:3D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       229D405B08D352CF53FABC90CF4EFF16B2490929
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa
Signing time:             Mon 26 Oct 2026 05:20:20 +0000
ROA not before:           Mon 26 Oct 2026 05:20:20 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d038:b080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9d:40:5b:08:d3:52:cf:53:fa:bc:90:cf:4e:ff:16:b2:49:09:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:20:20 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=e87cbea8cf40dc106c2f5837b2eab5f361f91682f55c402fcde8657c4fde4b94, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d6:b8:cb:0c:5c:21:d7:02:ec:cc:47:03:b0:
                    d7:35:e1:60:65:e7:f2:93:e5:33:2b:bf:d8:ef:97:
                    ac:a1:a6:b3:b4:74:97:25:ba:b7:19:90:30:ce:13:
                    0e:0c:88:95:5d:3f:1f:26:11:91:33:82:bf:83:0a:
                    72:b5:0e:eb:25:a2:81:49:1e:84:8a:6a:0c:44:bd:
                    e7:67:a5:89:39:3f:92:89:e9:81:f0:be:de:4c:af:
                    05:2c:4e:9c:a3:01:c2:b0:4a:a4:e9:2d:b5:7d:25:
                    39:30:46:de:2b:9c:a7:f4:23:4a:8a:fd:b4:dc:d9:
                    60:43:9e:ae:31:13:e2:b0:6a:31:59:e3:76:4e:92:
                    41:59:14:f0:e1:81:95:a1:62:8c:99:8a:fc:59:0a:
                    ed:a6:ff:02:9c:7f:73:80:bc:88:9a:8c:c4:a5:d6:
                    df:5f:33:d6:74:f7:04:b1:d6:04:c7:b0:c3:15:9b:
                    f1:6d:5b:fd:3b:72:06:91:d4:47:f2:a4:75:21:7c:
                    ad:5d:e1:75:51:95:19:ba:7e:cf:1f:68:70:cb:b7:
                    49:d4:c1:64:dd:4e:69:85:51:ec:f2:ef:18:af:e3:
                    9d:25:c5:57:8a:43:c0:43:37:b2:27:04:c0:86:85:
                    f6:1a:ac:47:0a:25:43:41:ea:ca:f9:d7:32:d4:6e:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:28:79:AF:F8:63:77:6C:49:AA:A3:8A:66:14:6B:F0:A1:36:2E:3D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d038:b080::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:26:7d:f3:d7:6b:1c:db:20:09:b0:d6:a7:80:26:84:a7:77:
         f6:e1:1a:a3:62:42:25:0e:49:1a:f5:3c:fd:b6:99:5a:e0:9b:
         fa:fa:67:e5:12:a7:ad:53:93:2f:08:ae:66:7e:b2:a6:14:de:
         83:89:53:4e:7d:f3:41:66:8f:91:fb:df:81:fe:83:e8:40:7e:
         85:7d:c6:4d:0d:c8:77:79:c7:eb:42:76:cf:eb:c2:c4:66:b5:
         46:02:3f:42:65:9b:6d:69:5c:f9:97:e1:3f:2f:90:c1:fe:73:
         1c:d7:8c:ee:21:fd:a4:82:78:92:89:e3:d9:1b:ca:f8:19:af:
         1d:06:3b:54:e5:fe:0a:fc:b6:e2:53:0e:cd:7c:df:67:2c:7b:
         7c:4e:c4:9b:c9:0a:cc:eb:40:c8:c4:74:10:7e:da:96:c7:1f:
         07:38:52:76:81:a9:6e:79:24:77:52:b8:54:b7:e8:35:f5:95:
         dc:aa:06:3d:a7:a8:20:8e:73:a1:e2:f1:3a:ff:07:c4:6f:ee:
         2d:ff:97:0b:c7:33:d8:e1:db:6c:f0:c7:12:86:8e:c9:01:09:
         c5:50:f6:33:89:fb:b2:f5:de:fb:81:90:01:af:a0:48:00:79:
         8a:5a:2c:ba:8d:5c:32:a3:0d:9c:3b:78:0d:9e:ce:58:d4:ef:
         6b:8c:f9:5f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUIp1AWwjTUs9T+ryQz07/FrJJCSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTIwMjBaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGU4N2NiZWE4Y2Y0MGRjMTA2YzJmNTgzN2IyZWFiNWYzNjFmOTE2ODJmNTVj
NDAyZmNkZTg2NTdjNGZkZTRiOTQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPbWuMsMXCHXAuzMRwOw1zXhYGXn8pPlMyu/2O+XrKGms7R0lyW6txmQMM4T
DgyIlV0/HyYRkTOCv4MKcrUO6yWigUkehIpqDES952eliTk/konpgfC+3kyvBSxO
nKMBwrBKpOkttX0lOTBG3iucp/QjSor9tNzZYEOerjET4rBqMVnjdk6SQVkU8OGB
laFijJmK/FkK7ab/Apx/c4C8iJqMxKXW318z1nT3BLHWBMewwxWb8W1b/TtyBpHU
R/KkdSF8rV3hdVGVGbp+zx9ocMu3SdTBZN1OaYVR7PLvGK/jnSXFV4pDwEM3sicE
wIaF9hqsRwolQ0HqyvnXMtRu9VECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSRKHmv
+GN3bEmqo4pmFGvwoTYuPTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTQzNzk2OWEtYTM2Yy00NDE3LTg4YmQtYzQ4YWM4OGQ5YTVjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Diw
gDANBgkqhkiG9w0BAQsFAAOCAQEAhiZ989drHNsgCbDWp4AmhKd39uEao2JCJQ5J
GvU8/baZWuCb+vpn5RKnrVOTLwiuZn6yphTeg4lTTn3zQWaPkfvfgf6D6EB+hX3G
TQ3Id3nH60J2z+vCxGa1RgI/QmWbbWlc+ZfhPy+Qwf5zHNeM7iH9pIJ4konj2RvK
+BmvHQY7VOX+Cvy24lMOzXzfZyx7fE7Em8kKzOtAyMR0EH7alscfBzhSdoGpbnkk
d1K4VLfoNfWV3KoGPaeoII5zoeLxOv8HxG/uLf+XC8cz2OHbbPDHEoaOyQEJxVD2
M4n7svXe+4GQAa+gSAB5ilosuo1cMqMNnDt4DZ7OWNTva4z5Xw==
-----END CERTIFICATE-----