Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
File:                     0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa (raw, json)
Hash identifier:          DnTJaunBUsfT5H5iZX1upxw+kN4v4n1qjwk2cHl27j0=
Subject key identifier:   5B:B0:EF:FB:D7:9D:D7:12:40:59:BF:0A:BC:85:2A:1D:CB:D4:25:33
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4FAEB3579809F159CC49739A224DEDAC9FA885E0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
Signing time:             Fri 13 Feb 2026 15:20:13 +0000
ROA not before:           Fri 13 Feb 2026 15:20:13 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        178.236.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ae:b3:57:98:09:f1:59:cc:49:73:9a:22:4d:ed:ac:9f:a8:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 13 15:20:13 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=b80478b0ad57105dc6693fd97532ca25046c38d89afc28203b3c403e10294e52, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:dd:71:c6:82:15:12:bf:7d:4a:9a:d2:73:
                    ae:8a:30:9d:fd:c9:0c:50:cc:f3:83:6c:02:95:64:
                    45:87:c2:81:b4:88:ca:eb:14:3b:b6:ef:1e:88:4f:
                    33:29:b3:5f:b9:55:4d:66:7f:2b:a6:63:fd:b1:ef:
                    7c:a0:bf:7b:e3:47:9a:5c:92:1d:68:e3:83:34:17:
                    55:98:4f:e9:9f:f8:b4:8f:5c:87:ce:5d:4b:88:81:
                    1b:7d:2e:85:3e:e0:ff:b1:e0:c2:bf:ff:ca:c4:01:
                    13:18:5b:a1:16:f3:fd:92:6d:e4:a9:2c:b0:41:17:
                    d0:c9:d0:f1:e5:df:20:64:cd:43:33:3d:02:a0:14:
                    c2:e4:ce:d6:cb:40:83:2a:cd:fc:5a:24:3a:98:e7:
                    58:a3:8c:4c:1b:7f:2e:16:c3:11:18:a3:67:2a:ab:
                    ff:1a:3e:d0:92:a6:2e:17:da:7d:5d:ce:60:67:0a:
                    f9:46:b0:ad:d8:15:ef:aa:f5:0c:a9:69:31:3d:3c:
                    0f:98:ca:91:43:68:d2:45:a9:ad:24:1d:c4:31:a5:
                    a2:64:7d:84:ae:18:11:98:f8:7b:36:65:6c:13:30:
                    4a:3a:41:20:35:00:b8:df:eb:d0:c1:01:64:78:16:
                    c4:56:f3:cf:75:3b:f1:78:e4:40:dc:29:5a:39:97:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B0:EF:FB:D7:9D:D7:12:40:59:BF:0A:BC:85:2A:1D:CB:D4:25:33
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.236.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:03:29:de:6c:c8:36:33:c8:42:06:6d:50:8c:ca:f0:4f:40:
         e9:40:88:63:56:ef:1c:16:9a:07:e3:c3:8b:81:5d:37:69:86:
         57:18:79:a9:62:95:33:e2:f3:74:c1:e5:e1:e7:9d:d5:4d:f6:
         7a:db:cf:4b:fb:64:17:02:77:1a:46:1a:f5:ec:ff:47:47:c2:
         38:65:67:86:4b:17:19:df:b8:9d:09:cb:cb:6e:89:cd:a1:ac:
         92:34:54:56:d2:a0:74:96:18:92:36:39:17:df:dd:25:19:b4:
         e4:85:3d:52:ce:80:9d:7e:19:e3:39:76:42:4e:89:69:78:9e:
         74:ef:07:7a:df:4c:91:a4:93:f0:a7:8b:6c:83:69:c2:47:76:
         06:c0:c9:16:42:09:87:d0:5b:e2:a9:e6:82:a8:c1:b3:e3:29:
         1f:36:eb:fc:e6:60:6d:72:b0:98:cc:8b:8e:d3:75:f7:e6:99:
         4b:48:ee:69:c3:1c:09:c0:5f:e1:0c:4a:1c:81:cf:f9:8f:c0:
         ff:32:f1:56:d5:41:34:a8:ea:32:a1:ca:2c:5a:71:57:f9:81:
         ae:b3:7d:4a:17:55:75:05:b2:86:4d:f3:ce:01:17:7e:85:b2:
         de:99:b1:3d:dc:85:94:6b:b1:c1:6e:8d:52:90:53:16:43:bb:
         52:06:15:c6
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUT66zV5gJ8VnMSXOaIk3trJ+oheAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMTMxNTIwMTNaFw0yNjA1MTQyMzU5NTlaMHoxSTBHBgNV
BAUTQGI4MDQ3OGIwYWQ1NzEwNWRjNjY5M2ZkOTc1MzJjYTI1MDQ2YzM4ZDg5YWZj
MjgyMDNiM2M0MDNlMTAyOTRlNTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ+I3XHGghUSv31KmtJzroownf3JDFDM84NsApVkRYfCgbSIyusUO7bvHohP
MymzX7lVTWZ/K6Zj/bHvfKC/e+NHmlySHWjjgzQXVZhP6Z/4tI9ch85dS4iBG30u
hT7g/7Hgwr//ysQBExhboRbz/ZJt5KkssEEX0MnQ8eXfIGTNQzM9AqAUwuTO1stA
gyrN/FokOpjnWKOMTBt/LhbDERijZyqr/xo+0JKmLhfafV3OYGcK+UawrdgV76r1
DKlpMT08D5jKkUNo0kWprSQdxDGlomR9hK4YEZj4ezZlbBMwSjpBIDUAuN/r0MEB
ZHgWxFbzz3U78XjkQNwpWjmXyxkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRbsO/7
153XEkBZvwq8hSody9QlMzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDk5MmM4ZjMtOTFiOC00ODNlLTgyYTMtM2M1YzljMWE5ZTg0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLLsADAN
BgkqhkiG9w0BAQsFAAOCAQEANwMp3mzINjPIQgZtUIzK8E9A6UCIY1bvHBaaB+PD
i4FdN2mGVxh5qWKVM+LzdMHl4eed1U32etvPS/tkFwJ3GkYa9ez/R0fCOGVnhksX
Gd+4nQnLy26JzaGskjRUVtKgdJYYkjY5F9/dJRm05IU9Us6AnX4Z4zl2Qk6JaXie
dO8Het9MkaST8KeLbINpwkd2BsDJFkIJh9Bb4qnmgqjBs+MpHzbr/OZgbXKwmMyL
jtN19+aZS0juacMcCcBf4QxKHIHP+Y/A/zLxVtVBNKjqMqHKLFpxV/mBrrN9ShdV
dQWyhk3zzgEXfoWy3pmxPdyFlGuxwW6NUpBTFkO7UgYVxg==
-----END CERTIFICATE-----