Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa
File:                     3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa (raw, json)
Hash identifier:          s5GqH2kGO6KK338aIwku8cpPCjNeptt1YzjURE3IQVk=
Subject key identifier:   73:0D:72:DF:BB:B9:3C:01:65:BD:2D:18:7C:B8:D6:3D:A9:3E:31:A0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6501FF35DC95743E0366CFF52FE6147B1EB88BFA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa
Signing time:             Tue 19 May 2026 05:10:55 +0000
ROA not before:           Tue 19 May 2026 05:10:55 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d03a:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:01:ff:35:dc:95:74:3e:03:66:cf:f5:2f:e6:14:7b:1e:b8:8b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 05:10:55 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=bb625a60b7fcf70774759759aff75571742c32fe9016e4433f961807ff65610c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:1c:bb:7a:ff:33:e1:ef:6f:62:7e:9c:4a:
                    dc:3a:1d:86:61:a3:8b:5a:fa:16:ee:e1:99:75:5d:
                    9d:55:be:c6:55:43:e7:25:be:93:c5:29:9f:5f:9e:
                    a5:72:fc:55:34:f2:74:91:99:aa:c5:ed:49:fa:a9:
                    f2:4d:65:b9:59:26:e2:ba:33:f0:3f:51:31:b6:44:
                    49:4d:f1:63:54:fc:e0:b3:0f:c4:76:73:ac:92:62:
                    a2:1b:92:5c:c1:c0:c0:f9:8c:16:5e:2d:dd:d4:2d:
                    78:fa:26:91:35:34:d6:b4:8f:94:5b:68:ad:9d:e9:
                    27:f0:95:65:a7:55:16:02:58:64:a8:fa:0b:0f:d7:
                    cd:db:7f:df:a5:c3:31:1d:c7:2d:c5:fb:73:bc:6b:
                    57:e8:2c:ce:e6:fc:47:e0:51:38:5d:7b:38:71:d0:
                    63:11:cc:0d:ea:3a:da:23:d9:7a:2d:80:ec:e3:3e:
                    47:ac:03:98:d2:95:aa:ca:96:6d:7e:0a:0a:f5:2a:
                    77:46:dd:c3:17:6f:17:ed:60:af:17:b1:8d:d0:fb:
                    d6:35:5e:60:77:aa:fb:d5:ee:4e:92:8c:d6:f8:9f:
                    34:58:38:c8:2b:00:51:f2:a9:c7:72:d9:12:34:34:
                    47:e0:6a:09:f6:61:36:a9:95:9d:b3:46:f2:64:aa:
                    12:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0D:72:DF:BB:B9:3C:01:65:BD:2D:18:7C:B8:D6:3D:A9:3E:31:A0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d03a:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:79:84:cd:ed:8f:ce:db:1e:ba:6f:e4:80:44:bb:04:5f:cb:
         84:c4:6b:b7:61:1c:9c:69:15:81:bc:73:45:cd:2c:f9:c9:6b:
         99:aa:e3:09:24:8f:ae:9e:e3:6a:d3:fc:86:9a:70:01:49:a3:
         8d:89:80:29:8b:0d:f1:ba:ca:86:18:f3:bd:40:f4:5f:60:c0:
         bb:7f:13:89:18:c7:09:2a:81:38:59:36:85:17:79:07:2c:be:
         97:23:de:61:00:e0:39:06:6b:01:b1:70:f0:c5:29:8e:c0:15:
         f2:71:f1:7e:9f:f6:9b:33:b8:26:13:19:c8:75:cc:e4:e2:3e:
         fa:92:9c:86:bd:8a:05:2e:e1:98:eb:ab:17:49:e8:8a:67:39:
         67:44:96:e1:40:35:a5:8c:21:b8:f9:19:22:0f:5a:be:06:32:
         e5:b0:90:79:77:3b:dc:c3:e4:5e:2d:5e:91:2f:86:b2:22:67:
         23:ad:44:5c:34:0e:36:cc:7d:ba:a7:9f:f7:73:6c:60:d3:9d:
         1b:42:83:c5:19:1b:1e:1b:7d:f3:05:16:94:d1:22:de:48:c7:
         1f:79:76:e3:0b:eb:f5:95:69:bf:b1:c4:40:9c:43:46:07:31:
         db:bd:0c:b6:fa:10:a7:eb:1c:a5:2b:6a:26:df:dd:fa:6d:c7:
         6b:4e:89:a6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZQH/NdyVdD4DZs/1L+YUex64i/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNTEwNTVaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGJiNjI1YTYwYjdmY2Y3MDc3NDc1OTc1OWFmZjc1NTcxNzQyYzMyZmU5MDE2
ZTQ0MzNmOTYxODA3ZmY2NTYxMGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKvwHLt6/zPh729ifpxK3DodhmGji1r6Fu7hmXVdnVW+xlVD5yW+k8Upn1+e
pXL8VTTydJGZqsXtSfqp8k1luVkm4roz8D9RMbZESU3xY1T84LMPxHZzrJJiohuS
XMHAwPmMFl4t3dQtePomkTU01rSPlFtorZ3pJ/CVZadVFgJYZKj6Cw/Xzdt/36XD
MR3HLcX7c7xrV+gszub8R+BROF17OHHQYxHMDeo62iPZei2A7OM+R6wDmNKVqsqW
bX4KCvUqd0bdwxdvF+1grxexjdD71jVeYHeq+9XuTpKM1vifNFg4yCsAUfKpx3LZ
EjQ0R+BqCfZhNqmVnbNG8mSqEnMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRzDXLf
u7k8AWW9LRh8uNY9qT4xoDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2E2MjcxYzgtNmYwMi00NWYxLTk3ZDYtY2UyN2I0NjNkM2I1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Dqg
MA0GCSqGSIb3DQEBCwUAA4IBAQBMeYTN7Y/O2x66b+SARLsEX8uExGu3YRycaRWB
vHNFzSz5yWuZquMJJI+unuNq0/yGmnABSaONiYApiw3xusqGGPO9QPRfYMC7fxOJ
GMcJKoE4WTaFF3kHLL6XI95hAOA5BmsBsXDwxSmOwBXycfF+n/abM7gmExnIdczk
4j76kpyGvYoFLuGY66sXSeiKZzlnRJbhQDWljCG4+RkiD1q+BjLlsJB5dzvcw+Re
LV6RL4ayImcjrURcNA42zH26p5/3c2xg050bQoPFGRseG33zBRaU0SLeSMcfeXbj
C+v1lWm/scRAnENGBzHbvQy2+hCn6xylK2om3936bcdrTomm
-----END CERTIFICATE-----