Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb0c6bec-0345-4f72-afa3-9220fe75b260.roa
File:                     fb0c6bec-0345-4f72-afa3-9220fe75b260.roa (raw, json)
Hash identifier:          X/g6X515RT8KvUL05bnDXXWc4cEljxMtzNa/H59qaq4=
Subject key identifier:   2F:6B:A2:29:DC:68:AA:53:08:83:F4:9A:3D:09:68:8D:3C:56:8E:C2
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       50291230416D6BC00F0C32E208C0B9EAB85BD48B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb0c6bec-0345-4f72-afa3-9220fe75b260.roa
Signing time:             Thu 29 Oct 2026 01:02:44 +0000
ROA not before:           Thu 29 Oct 2026 01:02:44 +0000
ROA not after:            Wed 27 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:29:12:30:41:6d:6b:c0:0f:0c:32:e2:08:c0:b9:ea:b8:5b:d4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 29 01:02:44 2026 GMT
            Not After : Jan 27 23:59:59 2027 GMT
        Subject: serialNumber=856eac6f1ca5dd5dd303356a5ba22f95d2c7e472d6cfda7d377a080e3dc0a702, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:33:9e:64:df:ec:33:8b:ce:34:cb:1a:97:
                    49:98:9c:a5:cc:bd:61:21:60:38:9d:3b:bd:52:68:
                    36:98:fb:38:a8:8c:3e:6a:e6:63:b7:b6:7a:9a:14:
                    8a:76:bf:bc:9a:65:8a:6b:59:a7:fd:fd:d0:b7:3c:
                    d7:4a:a0:f5:f2:53:d9:cf:bf:a2:51:83:64:b7:98:
                    37:87:12:3c:40:65:4e:a1:b3:1f:c5:b4:54:c1:ab:
                    30:11:0e:ce:c2:3e:7b:0c:0e:0e:da:1d:6d:9e:21:
                    19:45:c1:35:d3:1f:3d:c6:86:cf:e3:c2:7b:e3:fb:
                    0d:f2:06:40:d3:0e:8c:05:61:01:ee:ed:49:be:2b:
                    a5:a7:32:1b:a5:b7:1c:16:64:d1:c0:33:e6:f0:f5:
                    23:e8:dd:29:cf:d3:a5:b4:56:20:78:54:89:25:6a:
                    88:44:45:3a:34:14:11:df:b9:6e:ad:75:e4:fa:a0:
                    c1:2e:72:5a:a6:48:bd:74:d2:f4:da:eb:e0:34:ea:
                    94:9a:02:3f:4b:46:7f:25:91:15:26:47:1e:b4:00:
                    af:79:e3:fc:3c:e9:00:2b:fa:43:10:65:28:c1:c1:
                    35:b8:54:97:f8:18:48:39:15:17:4c:5c:7e:d8:57:
                    8a:c3:be:70:ba:14:c7:df:bf:93:2d:ec:2b:6f:ed:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6B:A2:29:DC:68:AA:53:08:83:F4:9A:3D:09:68:8D:3C:56:8E:C2
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb0c6bec-0345-4f72-afa3-9220fe75b260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:ac:3d:d8:39:24:2a:f2:62:64:8b:f2:b2:bd:72:99:8e:f7:
         49:a5:2e:2f:5b:50:29:06:19:69:39:45:38:69:e9:4e:ba:0f:
         f2:f8:b1:ab:fb:45:c4:60:e3:4b:53:ab:35:bc:20:e1:d7:69:
         6b:e2:b2:5f:ff:44:25:fb:9a:ac:11:d1:34:34:40:11:23:2a:
         14:22:d4:fc:cb:8b:49:33:b4:93:83:5a:20:2b:d1:30:9a:8e:
         75:11:54:15:0e:60:c6:27:25:a9:01:45:2d:74:bb:84:39:8a:
         86:e1:49:46:0c:8b:df:76:43:5b:30:e3:43:a4:e0:99:42:38:
         ef:bf:58:f6:fe:d8:10:e2:6d:98:37:4f:06:9d:ec:57:a8:ff:
         cb:37:02:45:28:5a:ea:42:9e:44:0b:ac:3d:5a:b2:91:f4:f0:
         86:fc:19:d9:63:ca:45:a5:bb:e0:60:0a:a1:c4:df:f4:41:00:
         53:94:a8:1d:b6:9b:ba:aa:cd:a2:f4:46:d5:2c:c1:77:af:5e:
         8b:eb:cd:bf:d8:62:94:2c:07:82:b6:2a:74:c7:a4:d4:bd:d4:
         7e:f1:fe:6a:fc:16:c6:25:30:d8:3c:6e:ee:bf:43:f3:42:2e:
         89:3b:cd:6d:a2:c9:50:ee:98:d9:6a:0c:01:99:2b:e3:b1:64:
         ab:ce:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----