Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3af05485-fd97-4026-a50e-0227f46bd107.roa
File:                     3af05485-fd97-4026-a50e-0227f46bd107.roa (raw, json)
Hash identifier:          zg++BX1XppTCEX6C5GsvXOJVK/hbbOkfzTywm8dOl2E=
Subject key identifier:   FA:71:53:2E:73:31:2F:89:3F:6B:D8:8D:54:6F:4B:A0:B4:9E:26:2C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       526923C718590C6CED3906741FB2790720BFC9CB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3af05485-fd97-4026-a50e-0227f46bd107.roa
Signing time:             Tue 19 May 2026 04:40:43 +0000
ROA not before:           Tue 19 May 2026 04:40:43 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:69:23:c7:18:59:0c:6c:ed:39:06:74:1f:b2:79:07:20:bf:c9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 04:40:43 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=479c2def1082b727d931694ef726d71c57535398dd1774bdc235a2f0c8cd82cf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:7f:1e:79:d4:70:a2:00:88:d7:df:63:01:
                    87:6b:85:86:be:bb:3b:75:c7:91:0b:d2:e6:4f:6d:
                    5d:00:a9:d3:82:09:49:77:74:64:7b:71:10:45:62:
                    c3:4e:ca:da:ea:27:6a:7f:dc:8f:72:0a:f1:c0:3c:
                    cd:25:24:68:97:45:a6:d4:1a:01:b9:73:da:8f:c0:
                    ac:9a:d9:29:75:6d:e1:6c:81:5e:7e:f8:81:e0:78:
                    a9:23:e7:d3:ea:4a:0c:61:3d:07:21:ba:10:2a:b8:
                    13:81:fa:40:83:3d:1e:b4:f3:ec:b8:84:ef:76:cb:
                    0f:11:0d:c9:a3:9b:8d:69:98:7a:dd:ee:87:1a:84:
                    33:57:c4:8b:40:ea:9f:90:79:4a:43:a3:38:06:9c:
                    03:14:c9:9c:37:b8:d6:fe:c7:3d:f4:42:3c:cc:1b:
                    3d:da:ba:e6:c4:d8:e6:62:9d:cb:f5:11:61:67:f8:
                    17:63:dd:4b:19:dd:7f:fc:1d:c1:2c:1b:53:3b:48:
                    7d:0f:49:c6:f9:0f:0d:ae:54:04:98:32:60:80:84:
                    e2:bb:d8:ea:e9:09:c7:18:42:1e:db:12:1a:b1:1c:
                    91:b3:3e:34:a5:4d:2d:bb:6f:4d:bb:5a:a0:c3:56:
                    f1:bd:5e:67:c5:64:02:fb:aa:02:db:d4:c5:09:ff:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:71:53:2E:73:31:2F:89:3F:6B:D8:8D:54:6F:4B:A0:B4:9E:26:2C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3af05485-fd97-4026-a50e-0227f46bd107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:f2:7c:aa:32:2d:16:00:10:47:da:cb:a5:61:99:8a:45:f3:
         69:54:77:da:1a:1e:31:03:27:8a:b4:6f:69:e5:c4:77:a3:64:
         f3:b2:ff:cf:dd:0b:36:1a:5b:ed:46:7c:30:31:9f:61:49:28:
         70:62:48:1e:23:d3:ed:ff:52:d0:49:a5:1e:f7:d3:93:c8:b4:
         8d:92:d9:50:7b:9d:f2:e1:95:23:fe:c8:72:e8:fb:54:8b:8d:
         d9:c4:11:fa:82:12:06:b4:f2:1e:11:4d:28:18:7b:45:ac:d2:
         11:9a:32:f8:10:6c:4e:38:91:7c:3f:6d:8a:bf:a5:01:f2:e5:
         d6:c8:85:b9:50:f8:e5:18:bc:4a:93:ca:d8:da:19:f0:2c:c0:
         dd:eb:5e:dc:b9:b9:9b:96:d9:88:ff:df:77:f1:0e:f3:de:9a:
         57:36:7b:c4:e5:1c:35:26:b9:ee:cf:78:ab:3e:47:f3:4a:ef:
         34:a4:b6:8c:d6:96:38:e7:7c:84:17:99:4e:f8:be:de:bf:91:
         85:e5:0c:fb:f3:82:e4:19:53:1f:99:92:23:91:1d:0d:6b:36:
         58:2e:44:8b:1f:69:96:e1:2b:d1:3c:a9:98:3a:85:e4:a2:1c:
         7e:81:c2:aa:98:7a:c3:9e:16:37:95:1f:e3:41:02:ce:d0:9d:
         d0:1e:e8:67
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUUmkjxxhZDGztOQZ0H7J5ByC/ycswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNDQwNDNaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ3OWMyZGVmMTA4MmI3MjdkOTMxNjk0ZWY3MjZkNzFjNTc1MzUzOThkZDE3
NzRiZGMyMzVhMmYwYzhjZDgyY2YxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALeBfx551HCiAIjX32MBh2uFhr67O3XHkQvS5k9tXQCp04IJSXd0ZHtxEEVi
w07K2uonan/cj3IK8cA8zSUkaJdFptQaAblz2o/ArJrZKXVt4WyBXn74geB4qSPn
0+pKDGE9ByG6ECq4E4H6QIM9HrTz7LiE73bLDxENyaObjWmYet3uhxqEM1fEi0Dq
n5B5SkOjOAacAxTJnDe41v7HPfRCPMwbPdq65sTY5mKdy/URYWf4F2PdSxndf/wd
wSwbUztIfQ9JxvkPDa5UBJgyYICE4rvY6ukJxxhCHtsSGrEckbM+NKVNLbtvTbta
oMNW8b1eZ8VkAvuqAtvUxQn/ry8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT6cVMu
czEviT9r2I1Ub0ugtJ4mLDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2FmMDU0ODUtZmQ5Ny00MDI2LWE1MGUtMDIyN2Y0NmJkMTA3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H9g
MA0GCSqGSIb3DQEBCwUAA4IBAQAa8nyqMi0WABBH2sulYZmKRfNpVHfaGh4xAyeK
tG9p5cR3o2Tzsv/P3Qs2GlvtRnwwMZ9hSShwYkgeI9Pt/1LQSaUe99OTyLSNktlQ
e53y4ZUj/shy6PtUi43ZxBH6ghIGtPIeEU0oGHtFrNIRmjL4EGxOOJF8P22Kv6UB
8uXWyIW5UPjlGLxKk8rY2hnwLMDd617cubmbltmI/9938Q7z3ppXNnvE5Rw1Jrnu
z3irPkfzSu80pLaM1pY453yEF5lO+L7ev5GF5Qz784LkGVMfmZIjkR0NazZYLkSL
H2mW4SvRPKmYOoXkohx+gcKqmHrDnhY3lR/jQQLO0J3QHuhn
-----END CERTIFICATE-----