Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
File:                     0141b806-c012-49b3-a8da-73590b0cd2b5.roa (raw, json)
Hash identifier:          ZpJVOnWtREVtO3S1b22E8TbgF1jmD0xanXfLIxEFaLc=
Subject key identifier:   E4:DC:C9:DA:3D:CE:0F:F9:30:33:94:1A:C4:67:74:8F:F0:30:14:B6
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0B9BEA8C4461A7D8B2851B78016C7506DA20AD61
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
Signing time:             Tue 19 May 2026 05:10:38 +0000
ROA not before:           Tue 19 May 2026 05:10:38 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:50c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9b:ea:8c:44:61:a7:d8:b2:85:1b:78:01:6c:75:06:da:20:ad:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 05:10:38 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=4effea5048c123aea106ad773a6e6348e520afe6a0ff8647b4cd244da820dcb7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:39:1b:ff:9a:66:29:40:75:1a:71:51:fd:50:
                    dd:71:47:62:85:78:51:5c:a1:e8:e1:8f:d9:64:1b:
                    62:18:82:48:54:05:b0:68:2f:bf:f5:4d:e5:c6:71:
                    a4:bb:1e:2d:a1:26:3b:8c:e5:86:df:d4:8c:73:3d:
                    84:83:1d:fa:bd:1b:7e:70:90:d6:71:ea:8a:0a:5a:
                    5c:82:db:3c:2b:63:12:fc:2b:b6:fd:72:95:f6:72:
                    ef:e0:27:91:92:11:45:b3:98:ae:47:de:dc:4e:47:
                    51:f0:d3:82:65:7b:a6:ca:0a:17:d4:be:75:03:0d:
                    1c:15:58:e7:1b:4a:83:15:65:98:e8:b2:6d:a8:95:
                    51:13:70:29:6e:fc:a3:e8:8c:e6:ed:ee:17:55:51:
                    dd:10:c6:f4:fb:a4:1e:6f:3d:78:e9:22:b2:f3:96:
                    8d:be:d7:4f:ee:48:18:f1:a4:3d:22:cc:18:a4:05:
                    0f:db:e1:01:6d:55:36:58:0c:b1:9d:cd:cd:bb:50:
                    56:1a:d7:50:bb:d0:ba:20:ab:f4:93:17:a8:82:c3:
                    a8:68:c8:97:a9:c9:85:44:65:22:8e:fc:9e:3c:9c:
                    14:4a:7c:42:1f:fb:86:52:3c:68:79:a1:da:6f:bb:
                    63:6f:5a:e2:49:6f:de:1f:35:58:5d:24:8c:09:d5:
                    67:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DC:C9:DA:3D:CE:0F:F9:30:33:94:1A:C4:67:74:8F:F0:30:14:B6
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:50c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:3b:b0:9f:17:a5:45:9f:3a:38:59:f7:c7:6e:2e:fc:7a:e9:
         eb:1b:6a:ab:e9:98:fb:4a:7c:b2:1a:11:40:ec:fb:b3:b2:13:
         20:08:5e:c5:b6:62:50:59:e2:43:95:73:3f:55:cd:b9:dd:e6:
         4e:f9:4c:bc:31:c1:5f:fc:8a:b2:9d:4e:d7:6c:e7:ba:51:ac:
         2d:91:d8:72:4a:22:83:ee:33:fa:5d:d3:89:aa:8d:c6:be:c7:
         87:58:2e:c0:cd:77:a6:ed:eb:c0:ca:9c:51:21:52:8b:77:1a:
         aa:ee:04:b4:6a:3f:f4:59:b0:9d:68:3f:8c:fe:ae:ad:57:ac:
         0e:70:2c:80:c4:9b:45:d7:f8:31:d3:d3:3d:94:57:52:ca:f2:
         19:93:12:52:4c:76:97:68:4f:90:41:9d:7f:c8:b1:25:a7:f3:
         84:79:12:38:8b:a9:b2:04:05:86:df:db:63:b4:78:2d:a6:bb:
         25:c8:16:35:a4:b3:57:3d:2f:64:3b:d8:e4:70:71:5a:39:7d:
         b8:8e:c3:7c:6a:dc:67:8c:34:26:3d:07:d3:5c:11:db:0b:20:
         16:f5:9e:12:cf:b7:4a:19:34:e2:6b:bc:c3:c4:ac:25:64:55:
         b1:54:76:ac:b2:ee:07:80:8e:09:00:a6:a7:e2:19:36:03:18:
         ef:2d:c2:4f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUC5vqjERhp9iyhRt4AWx1BtogrWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNTEwMzhaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDRlZmZlYTUwNDhjMTIzYWVhMTA2YWQ3NzNhNmU2MzQ4ZTUyMGFmZTZhMGZm
ODY0N2I0Y2QyNDRkYTgyMGRjYjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJo5G/+aZilAdRpxUf1Q3XFHYoV4UVyh6OGP2WQbYhiCSFQFsGgvv/VN5cZx
pLseLaEmO4zlht/UjHM9hIMd+r0bfnCQ1nHqigpaXILbPCtjEvwrtv1ylfZy7+An
kZIRRbOYrkfe3E5HUfDTgmV7psoKF9S+dQMNHBVY5xtKgxVlmOiybaiVURNwKW78
o+iM5u3uF1VR3RDG9PukHm89eOkisvOWjb7XT+5IGPGkPSLMGKQFD9vhAW1VNlgM
sZ3NzbtQVhrXULvQuiCr9JMXqILDqGjIl6nJhURlIo78njycFEp8Qh/7hlI8aHmh
2m+7Y29a4klv3h81WF0kjAnVZ2ECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTk3Mna
Pc4P+TAzlBrEZ3SP8DAUtjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDE0MWI4MDYtYzAxMi00OWIzLWE4ZGEtNzM1OTBiMGNkMmI1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJQ
wDANBgkqhkiG9w0BAQsFAAOCAQEAKTuwnxelRZ86OFn3x24u/Hrp6xtqq+mY+0p8
shoRQOz7s7ITIAhexbZiUFniQ5VzP1XNud3mTvlMvDHBX/yKsp1O12znulGsLZHY
ckoig+4z+l3TiaqNxr7Hh1guwM13pu3rwMqcUSFSi3caqu4EtGo/9FmwnWg/jP6u
rVesDnAsgMSbRdf4MdPTPZRXUsryGZMSUkx2l2hPkEGdf8ixJafzhHkSOIupsgQF
ht/bY7R4Laa7JcgWNaSzVz0vZDvY5HBxWjl9uI7DfGrcZ4w0Jj0H01wR2wsgFvWe
Es+3Shk04mu8w8SsJWRVsVR2rLLuB4COCQCmp+IZNgMY7y3CTw==
-----END CERTIFICATE-----