Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
File:                     f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa (raw, json)
Hash identifier:          kyuqt4mxKr80TTQC/g6gdwOCexI78VnXmtSMJvf6PpI=
Subject key identifier:   A3:91:8E:0D:36:31:DE:E5:C0:3C:C2:C4:51:78:9B:A8:BB:AC:E1:DA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1D26703AD77C8CE58C26BA08349DBF9046A57CD4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
Signing time:             Mon 26 Oct 2026 05:02:39 +0000
ROA not before:           Mon 26 Oct 2026 05:02:39 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:5080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:26:70:3a:d7:7c:8c:e5:8c:26:ba:08:34:9d:bf:90:46:a5:7c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:02:39 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=e5602838586cdd22954ad5e93091636812c859d116ab29cfed9fc785b32be8f3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:e2:09:ab:cb:80:8e:71:9d:2f:d9:a2:d7:
                    e8:70:1d:1f:5a:f4:fc:b4:71:7a:d9:38:0d:f7:fb:
                    09:5c:59:b7:37:19:6d:1a:1a:5d:78:b6:de:d8:41:
                    4d:6c:c8:a4:da:06:95:27:b3:f3:19:f8:df:5b:e6:
                    5f:ba:5f:25:2f:b9:ee:96:56:7e:0c:cf:c0:3f:6e:
                    32:56:8c:7b:4f:97:33:e4:b5:b4:66:0c:69:26:f0:
                    08:a1:ce:37:1d:be:14:8c:de:7e:98:f8:f1:d7:8d:
                    e1:cf:29:74:59:a0:46:94:1a:4f:43:f9:f1:7b:e2:
                    7e:00:1a:2a:f5:67:33:cd:89:ee:53:43:16:3f:00:
                    58:37:bd:c9:48:27:d2:4b:2e:78:80:ff:03:da:f8:
                    cd:63:b4:e0:af:59:9c:66:dc:7e:dc:00:25:92:e6:
                    17:59:c5:61:44:63:23:4a:3f:e0:58:0b:77:c6:dc:
                    59:75:ba:23:f1:77:c2:3f:9d:5a:41:e1:7b:04:13:
                    4e:26:63:1b:04:15:da:b0:6f:54:bc:f5:a6:92:e3:
                    78:ba:e9:14:b7:bf:c4:15:2a:4c:b9:5e:e0:f8:7a:
                    26:e2:ce:40:e9:8f:54:b6:93:57:38:ae:b2:bb:dd:
                    f2:00:f1:d7:6d:4e:fd:ca:c5:ba:4c:41:bc:65:c9:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:91:8E:0D:36:31:DE:E5:C0:3C:C2:C4:51:78:9B:A8:BB:AC:E1:DA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:5080::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:e3:ea:4a:ea:94:0b:30:a9:1c:3c:b2:f0:55:ee:55:96:2a:
         62:2a:ef:25:c8:7f:5a:fa:a0:59:8c:c8:11:77:58:50:3e:9e:
         36:ba:a0:91:0f:90:56:64:69:1b:01:26:04:4c:7b:f2:92:f1:
         5e:98:04:ba:ba:02:b6:20:f6:83:3b:27:5d:e2:29:79:4a:e5:
         9d:00:d1:b2:b4:9e:35:da:5c:5c:22:ca:ce:d1:3a:f6:e0:a4:
         61:c0:cd:8c:5e:d5:ce:c6:1a:f6:ac:b7:66:71:aa:d2:9f:1f:
         fb:09:09:ca:ab:d2:12:c2:cc:6a:31:55:d7:a1:02:31:96:99:
         47:d3:0b:a0:38:f0:3e:31:bc:ed:1d:4b:b5:93:5b:1e:52:c3:
         b1:5b:47:a8:96:34:1d:11:36:d4:77:a7:36:b0:ff:53:30:6b:
         cd:f3:53:0f:54:d3:e6:e3:bc:4d:ca:01:3e:d3:0b:b5:13:97:
         e6:51:af:3b:37:24:e4:8c:84:c7:e2:35:12:17:d0:69:19:25:
         79:f2:2b:cf:14:96:30:67:fc:65:e6:20:28:3d:ac:06:ca:94:
         18:53:ad:e0:36:18:dd:2f:85:70:67:33:a2:d0:98:f7:d2:99:
         76:02:4d:20:71:2d:34:dd:16:f4:29:76:8e:a9:4f:36:8e:d4:
         2c:c6:aa:cb
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUHSZwOtd8jOWMJroINJ2/kEalfNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTAyMzlaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGU1NjAyODM4NTg2Y2RkMjI5NTRhZDVlOTMwOTE2MzY4MTJjODU5ZDExNmFi
MjljZmVkOWZjNzg1YjMyYmU4ZjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALgU4gmry4COcZ0v2aLX6HAdH1r0/LRxetk4Dff7CVxZtzcZbRoaXXi23thB
TWzIpNoGlSez8xn431vmX7pfJS+57pZWfgzPwD9uMlaMe0+XM+S1tGYMaSbwCKHO
Nx2+FIzefpj48deN4c8pdFmgRpQaT0P58XvifgAaKvVnM82J7lNDFj8AWDe9yUgn
0ksueID/A9r4zWO04K9ZnGbcftwAJZLmF1nFYURjI0o/4FgLd8bcWXW6I/F3wj+d
WkHhewQTTiZjGwQV2rBvVLz1ppLjeLrpFLe/xBUqTLle4Ph6JuLOQOmPVLaTVziu
srvd8gDx121O/crFukxBvGXJ/TECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSjkY4N
NjHe5cA8wsRReJuou6zh2jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjE5NTFiZGEtNTljZC00YjExLWI3YTEtMTliMWY1ZDMyMTE2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAEOPqSuqUCzCpHDyy8FXuVZYqYirvJch/Wvqg
WYzIEXdYUD6eNrqgkQ+QVmRpGwEmBEx78pLxXpgEuroCtiD2gzsnXeIpeUrlnQDR
srSeNdpcXCLKztE69uCkYcDNjF7VzsYa9qy3ZnGq0p8f+wkJyqvSEsLMajFV16EC
MZaZR9MLoDjwPjG87R1LtZNbHlLDsVtHqJY0HRE21HenNrD/UzBrzfNTD1TT5uO8
TcoBPtMLtROX5lGvOzck5IyEx+I1EhfQaRklefIrzxSWMGf8ZeYgKD2sBsqUGFOt
4DYY3S+FcGczotCY99KZdgJNIHEtNN0W9Cl2jqlPNo7ULMaqyw==
-----END CERTIFICATE-----