Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1fb46240-1c3f-4b2f-9927-3470c9898890.roa
File:                     1fb46240-1c3f-4b2f-9927-3470c9898890.roa (raw, json)
Hash identifier:          1P20hFYhv3tuUtWqgdQ8J+v5tKA4nwfgfMgOarkOVkQ=
Subject key identifier:   AC:31:93:7E:CF:42:E7:39:BB:A6:4E:92:86:D1:7D:82:88:7C:42:E1
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       59BAC055CB0E0EF4F9FC7D1321375674CA1DF7E6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1fb46240-1c3f-4b2f-9927-3470c9898890.roa
Signing time:             Tue 19 May 2026 05:20:24 +0000
ROA not before:           Tue 19 May 2026 05:20:24 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:80a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ba:c0:55:cb:0e:0e:f4:f9:fc:7d:13:21:37:56:74:ca:1d:f7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 05:20:24 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=409a459f3984f8c148c9c4756dcb7c4b65c15904c00be1384cbbc502c9ff0f0a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1a:8c:4c:ab:9e:d8:8f:8a:01:2d:75:da:8f:
                    2d:73:11:91:fb:f2:09:59:d6:e2:eb:ee:9f:3e:26:
                    15:be:d2:86:4c:bb:c9:31:00:85:46:51:9b:10:e5:
                    7c:98:30:b7:69:16:f2:f4:ed:60:c6:65:5f:8f:61:
                    33:d1:43:b9:6a:f7:a7:ce:5e:64:cc:ac:e5:92:18:
                    5e:05:56:f8:4d:d8:5f:d3:23:69:26:02:69:6b:82:
                    dd:85:53:f6:3c:69:01:a9:c3:3f:31:93:10:5c:2e:
                    2f:f1:e7:37:6a:4a:41:d5:ec:97:b6:f5:8c:b4:42:
                    db:d2:78:b3:6c:09:72:a2:43:bd:3a:a7:6e:0d:e2:
                    d8:df:25:aa:4b:b1:8d:5d:ad:ee:67:e4:3f:f7:a3:
                    10:45:55:c1:33:bc:a2:90:0d:eb:4c:a2:b6:91:a2:
                    c7:fa:9c:1c:73:e1:7e:e6:0d:d0:80:03:d6:3f:9a:
                    a9:3f:d9:73:eb:e5:6c:e0:7b:f1:0e:92:f8:53:2c:
                    a8:d5:8a:03:e5:d4:e4:79:89:4f:8f:1c:4f:42:8f:
                    61:13:42:d8:23:6d:01:d8:5f:a2:48:78:b8:2f:ff:
                    70:eb:b3:63:b0:8a:ee:21:f8:eb:99:55:34:53:bb:
                    24:07:35:48:35:6a:c2:8a:c0:b6:f4:ac:d3:34:89:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:31:93:7E:CF:42:E7:39:BB:A6:4E:92:86:D1:7D:82:88:7C:42:E1
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1fb46240-1c3f-4b2f-9927-3470c9898890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:80a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:6e:91:6c:c8:e4:00:5a:30:19:79:00:1e:7a:bf:e4:2e:dd:
         ab:02:25:ab:86:fa:1f:ab:6a:99:f1:96:4b:73:31:44:89:48:
         9c:79:36:af:6e:88:08:ef:e5:4c:e2:64:2e:5c:17:f0:55:13:
         e3:92:bf:34:1b:1b:c5:d3:fd:6e:15:7a:13:75:a3:21:a4:57:
         69:83:41:c5:c9:5a:90:56:24:d5:be:f7:3f:d6:40:e4:65:82:
         05:a3:d7:dd:c1:3f:3e:c9:96:a8:c3:d5:24:e0:23:58:6f:7f:
         a7:cf:f3:6b:4f:cf:a1:18:f2:4d:d7:49:d1:23:95:c3:af:e1:
         65:aa:81:28:d7:8e:96:0b:e7:fb:78:d3:a7:9a:ef:54:89:61:
         b6:91:7d:e5:14:da:5b:de:11:d2:be:21:d7:78:71:0c:f1:0e:
         80:f6:68:5c:e1:ae:f5:8e:86:22:d4:a2:ca:65:2f:9d:4b:e4:
         56:9c:cd:ff:f2:55:64:72:cc:39:20:7c:34:80:85:7d:33:3e:
         d3:51:4e:54:72:50:0f:0d:df:12:45:9e:9f:ee:9a:c1:0b:38:
         6d:c3:82:93:f3:f4:e9:f7:26:e9:e9:f9:e3:8b:11:8e:47:a1:
         d2:18:4d:8b:30:d6:3d:4b:73:c9:dd:ba:80:bc:c3:0b:f6:99:
         c8:23:49:0d
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWbrAVcsODvT5/H0TITdWdMod9+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNTIwMjRaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDQwOWE0NTlmMzk4NGY4YzE0OGM5YzQ3NTZkY2I3YzRiNjVjMTU5MDRjMDBi
ZTEzODRjYmJjNTAyYzlmZjBmMGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOkajEyrntiPigEtddqPLXMRkfvyCVnW4uvunz4mFb7Shky7yTEAhUZRmxDl
fJgwt2kW8vTtYMZlX49hM9FDuWr3p85eZMys5ZIYXgVW+E3YX9MjaSYCaWuC3YVT
9jxpAanDPzGTEFwuL/HnN2pKQdXsl7b1jLRC29J4s2wJcqJDvTqnbg3i2N8lqkux
jV2t7mfkP/ejEEVVwTO8opAN60yitpGix/qcHHPhfuYN0IAD1j+aqT/Zc+vlbOB7
8Q6S+FMsqNWKA+XU5HmJT48cT0KPYRNC2CNtAdhfokh4uC//cOuzY7CK7iH465lV
NFO7JAc1SDVqworAtvSs0zSJcFECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSsMZN+
z0LnObumTpKG0X2CiHxC4TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWZiNDYyNDAtMWMzZi00YjJmLTk5MjctMzQ3MGM5ODk4ODkwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+A
oDANBgkqhkiG9w0BAQsFAAOCAQEAXW6RbMjkAFowGXkAHnq/5C7dqwIlq4b6H6tq
mfGWS3MxRIlInHk2r26ICO/lTOJkLlwX8FUT45K/NBsbxdP9bhV6E3WjIaRXaYNB
xclakFYk1b73P9ZA5GWCBaPX3cE/PsmWqMPVJOAjWG9/p8/za0/PoRjyTddJ0SOV
w6/hZaqBKNeOlgvn+3jTp5rvVIlhtpF95RTaW94R0r4h13hxDPEOgPZoXOGu9Y6G
ItSiymUvnUvkVpzN//JVZHLMOSB8NICFfTM+01FOVHJQDw3fEkWen+6awQs4bcOC
k/P06fcm6en544sRjkeh0hhNizDWPUtzyd26gLzDC/aZyCNJDQ==
-----END CERTIFICATE-----