Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8feef1e-9058-4b34-a7f2-24e5e044fea2.roa
File:                     e8feef1e-9058-4b34-a7f2-24e5e044fea2.roa (raw, json)
Hash identifier:          chQt/02ej0slrlk263heLgMaoqMZE674QxNiv9mpG/E=
Subject key identifier:   70:82:AB:FB:D4:E0:E4:04:E5:92:07:CB:D4:48:FE:ED:D6:FF:CB:5B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       17D4D6B4FB924DE03F5032ADB0D39FA3D6BFFE46
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8feef1e-9058-4b34-a7f2-24e5e044fea2.roa
Signing time:             Thu 15 Oct 2026 03:20:07 +0000
ROA not before:           Thu 15 Oct 2026 03:20:07 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d074:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d4:d6:b4:fb:92:4d:e0:3f:50:32:ad:b0:d3:9f:a3:d6:bf:fe:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 15 03:20:07 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=bbccd26089c8d139e1750d4f2437e31cad1aadc587ab00a78257ff190e0bb847, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:1e:5c:3f:46:b2:95:16:2e:33:9e:5b:73:
                    07:29:49:27:45:56:d2:69:ce:4e:c0:9d:e6:f5:c3:
                    c7:ea:6a:95:35:eb:5f:2f:40:f4:a3:ea:70:f7:2d:
                    74:bd:95:51:18:31:0c:f4:b1:ab:0f:b1:be:0d:b1:
                    c9:c1:44:82:65:23:5c:86:0d:c2:34:db:a4:8c:e7:
                    68:4a:ce:88:6a:6f:ac:bb:9c:6c:f9:e6:00:72:84:
                    3b:e4:a5:11:b7:dc:74:1d:5d:45:65:3f:80:33:54:
                    b8:bc:a3:fa:af:9b:0d:c1:72:b7:5b:b5:34:46:e9:
                    e6:3b:4c:d0:07:9a:6c:d6:87:b4:0d:3e:6d:ca:01:
                    0d:5d:ee:85:10:c7:c6:86:94:a7:20:cd:31:36:3f:
                    55:16:df:fc:53:6a:bd:5b:b4:4c:14:e6:5d:9a:ab:
                    5f:c6:1f:ca:c3:8d:3b:40:34:41:c4:39:8b:40:a4:
                    ac:b1:34:9a:4a:85:22:a1:4a:0f:82:4a:88:5e:08:
                    a2:c1:6a:ea:48:a7:2b:c8:ad:91:2f:f3:0d:c4:1f:
                    3a:b6:61:83:5c:c4:47:4d:d0:ee:73:0d:79:7e:be:
                    b5:a8:00:8f:fa:2d:1b:97:6f:f0:12:94:2c:b7:fd:
                    07:15:4d:2f:1a:70:18:ec:75:c6:1b:95:62:75:d1:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:82:AB:FB:D4:E0:E4:04:E5:92:07:CB:D4:48:FE:ED:D6:FF:CB:5B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8feef1e-9058-4b34-a7f2-24e5e044fea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:0f:d6:33:78:4e:2c:dd:11:d8:24:86:70:6d:7e:78:7a:5f:
         03:3f:9a:a5:6d:22:15:db:f7:44:13:06:28:0a:3f:a3:ac:9b:
         0f:e2:d3:e8:89:6e:12:87:82:2e:f7:a1:bc:c2:b8:24:96:f3:
         98:ad:1d:59:68:51:41:79:2d:28:61:aa:9c:bd:92:be:c0:0e:
         1e:f5:0e:99:7f:d3:eb:d7:15:f9:01:63:ac:90:b0:8e:3b:d5:
         0f:b8:59:86:19:66:65:b9:3b:7e:56:69:8c:95:15:e4:27:26:
         37:e8:7b:5d:cc:b6:de:1e:a6:92:1b:15:61:cf:92:38:04:55:
         4a:4a:64:8a:92:0e:8d:d6:51:1f:71:32:c3:1d:c6:66:3d:eb:
         54:fc:8a:0e:95:4e:2f:6e:e6:48:2c:66:0c:27:99:36:80:db:
         41:84:f0:22:17:7c:f1:97:08:03:33:b1:70:ff:73:ff:ac:67:
         8e:86:f9:71:9c:e2:fd:9e:86:f7:4b:cf:50:22:08:4c:8f:9e:
         db:29:a4:e2:66:af:3c:14:f2:7c:26:23:fc:b0:af:cc:7c:f0:
         84:ae:57:c4:0c:3e:9b:b5:56:f0:7f:2a:7d:ee:ce:26:b2:89:
         60:5c:36:48:fe:6b:d2:fc:9c:68:53:26:d4:41:e2:f8:b4:3b:
         f9:aa:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----