Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f9d48f9-40ee-4724-93e7-c046a9c2d277.roa
File:                     3f9d48f9-40ee-4724-93e7-c046a9c2d277.roa (raw, json)
Hash identifier:          Oq4caBxuR4HMUyIhsDkAggTEDjGgX05673LujEWMOJA=
Subject key identifier:   96:D6:79:FC:BD:CB:FF:82:86:14:D9:14:23:55:DA:74:F3:73:55:F9
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0437668EC6B55B39C74C7BF4F0AA2A7778D1A99E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f9d48f9-40ee-4724-93e7-c046a9c2d277.roa
Signing time:             Mon 27 Jul 2026 03:21:00 +0000
ROA not before:           Mon 27 Jul 2026 03:21:00 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d059:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:37:66:8e:c6:b5:5b:39:c7:4c:7b:f4:f0:aa:2a:77:78:d1:a9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:21:00 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=ac13ba224462e3fa544776cee4aed45d314044557fa155c00473404164746e84, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:3d:10:8d:37:13:fa:3b:15:1b:51:d0:5f:
                    e4:81:c5:0c:7d:54:7b:a9:dc:12:d9:18:e8:af:f4:
                    00:36:db:f0:3f:cd:ee:62:1b:9d:23:61:04:55:ab:
                    79:6d:a8:95:8e:73:4e:48:2f:9a:01:98:5c:38:73:
                    30:04:86:9d:37:b6:4e:73:f1:14:63:31:c0:7f:fe:
                    97:7f:4d:49:15:e9:fd:c9:5d:c4:1d:a1:fc:7b:c2:
                    a0:e6:b6:44:6b:c8:c5:03:80:15:00:3c:a1:4e:4d:
                    d8:d0:a3:72:f1:79:6c:75:59:8f:9b:78:93:5f:e6:
                    74:69:3d:3e:e1:be:77:1b:46:1b:8d:e2:2b:80:f5:
                    8c:25:9b:b1:65:fb:1a:cc:3a:e9:d6:7c:9f:cb:6e:
                    d5:a8:e3:12:d6:4e:b7:6f:5a:ac:3c:a3:6d:1f:35:
                    51:2c:28:68:26:84:ca:fd:c4:ca:81:ac:7d:a4:bd:
                    33:39:22:84:26:21:1b:c2:03:65:b6:71:7f:7c:8f:
                    72:00:aa:f9:ed:70:68:a2:b4:d2:c0:29:67:2c:9c:
                    18:80:eb:d7:94:2f:72:98:d1:76:53:fc:7c:1e:d0:
                    49:b1:44:cd:0b:5c:14:bd:d5:9d:f5:90:34:e1:ca:
                    63:8b:7c:03:cd:8e:36:42:f7:55:66:86:96:f4:aa:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D6:79:FC:BD:CB:FF:82:86:14:D9:14:23:55:DA:74:F3:73:55:F9
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f9d48f9-40ee-4724-93e7-c046a9c2d277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:12:e9:f3:5f:43:df:bd:da:a9:86:5c:1c:0a:e4:09:b3:d8:
         ab:c4:80:1d:12:5c:52:97:7f:2e:14:5e:44:65:32:91:88:5e:
         9a:f1:49:5f:36:24:e3:c2:14:57:3c:1e:7c:e8:eb:ed:26:0d:
         ff:5d:b1:ee:ec:09:3e:66:d5:96:44:11:65:53:7b:8c:45:d1:
         68:ea:a2:10:60:65:78:e2:75:21:91:e3:37:19:4f:06:3e:26:
         f1:aa:85:d1:06:b5:e2:19:54:65:09:c5:3f:b0:94:9e:db:61:
         9b:d8:0f:b9:f2:e0:dc:22:3c:c9:e6:91:1d:eb:58:77:32:09:
         1f:8c:61:5d:76:e7:40:33:4e:57:69:39:10:6f:5e:a4:56:fa:
         5d:dd:eb:53:16:d5:c2:ad:bc:25:91:23:6a:3a:c3:ac:1d:b4:
         cd:e8:90:26:68:36:af:2d:dc:87:7d:3c:a4:b8:df:d5:f8:08:
         89:a8:2c:85:a1:2a:ca:d2:ce:15:3e:a3:cd:03:62:8f:eb:8b:
         1d:1a:54:a6:61:f0:ad:bd:9c:e2:db:2a:7f:83:c8:2a:00:8c:
         f6:87:6d:d8:bd:10:bd:85:1e:e1:6a:85:92:c4:05:a0:1b:fc:
         e6:e1:e1:34:e7:99:50:22:9a:c8:42:a7:26:9b:ae:11:1e:8b:
         d1:eb:4e:c3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUBDdmjsa1WznHTHv08Koqd3jRqZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjcwMzIxMDBaFw0yNjEwMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGFjMTNiYTIyNDQ2MmUzZmE1NDQ3NzZjZWU0YWVkNDVkMzE0MDQ0NTU3ZmEx
NTVjMDA0NzM0MDQxNjQ3NDZlODQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJT+PRCNNxP6OxUbUdBf5IHFDH1Ue6ncEtkY6K/0ADbb8D/N7mIbnSNhBFWr
eW2olY5zTkgvmgGYXDhzMASGnTe2TnPxFGMxwH/+l39NSRXp/cldxB2h/HvCoOa2
RGvIxQOAFQA8oU5N2NCjcvF5bHVZj5t4k1/mdGk9PuG+dxtGG43iK4D1jCWbsWX7
Gsw66dZ8n8tu1ajjEtZOt29arDyjbR81USwoaCaEyv3EyoGsfaS9MzkihCYhG8ID
ZbZxf3yPcgCq+e1waKK00sApZyycGIDr15QvcpjRdlP8fB7QSbFEzQtcFL3VnfWQ
NOHKY4t8A82ONkL3VWaGlvSqua0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSW1nn8
vcv/goYU2RQjVdp083NV+TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2Y5ZDQ4ZjktNDBlZS00NzI0LTkzZTctYzA0NmE5YzJkMjc3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Fmg
MA0GCSqGSIb3DQEBCwUAA4IBAQAuEunzX0PfvdqphlwcCuQJs9irxIAdElxSl38u
FF5EZTKRiF6a8UlfNiTjwhRXPB586OvtJg3/XbHu7Ak+ZtWWRBFlU3uMRdFo6qIQ
YGV44nUhkeM3GU8GPibxqoXRBrXiGVRlCcU/sJSe22Gb2A+58uDcIjzJ5pEd61h3
MgkfjGFddudAM05XaTkQb16kVvpd3etTFtXCrbwlkSNqOsOsHbTN6JAmaDavLdyH
fTykuN/V+AiJqCyFoSrK0s4VPqPNA2KP64sdGlSmYfCtvZzi2yp/g8gqAIz2h23Y
vRC9hR7haoWSxAWgG/zm4eE055lQIprIQqcmm64RHovR607D
-----END CERTIFICATE-----