Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
File:                     4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa (raw, json)
Hash identifier:          /m30aPQIy9gULhDmyFeTO7YZPE2l6vrs+Eo42cJ0nMc=
Subject key identifier:   52:77:64:21:CB:FA:76:42:E6:EC:00:80:AE:D0:72:FE:18:C8:DE:F6
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       022CB262D274815913587916A52E7BBDBF7CF1F5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
Signing time:             Sat 28 Feb 2026 05:50:42 +0000
ROA not before:           Sat 28 Feb 2026 05:50:42 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06f:9000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2c:b2:62:d2:74:81:59:13:58:79:16:a5:2e:7b:bd:bf:7c:f1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 05:50:42 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=ab05e89ee7627d312c3a3001884a0e95ad5d9ef1125e7496faa0ff5b93f5d235, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:ca:1c:a5:bc:72:6a:ed:44:ec:db:b1:84:
                    c8:8a:6e:c1:c5:b3:65:1b:d8:df:97:88:2e:7b:19:
                    7a:12:7e:3c:3f:f8:38:e3:63:17:a5:29:86:e0:d3:
                    bc:6f:1d:95:72:df:1c:81:42:18:58:92:3e:84:0b:
                    14:13:c9:c1:9f:86:27:f9:25:ea:b2:93:b9:b6:50:
                    06:b5:22:91:20:6b:19:2c:0d:96:fc:90:a2:4e:f8:
                    93:43:d1:1a:b9:87:43:75:a8:97:db:55:40:b9:8c:
                    19:80:4d:14:8c:62:39:93:98:43:6e:8b:55:16:2a:
                    4a:7f:41:6d:de:63:34:bc:1b:a5:14:99:3f:cd:9b:
                    af:87:a1:99:9a:c5:f5:69:35:a4:ec:e5:da:d0:71:
                    9e:cf:25:2f:cf:aa:9a:eb:87:64:0e:02:04:cf:59:
                    c0:68:39:f3:97:d6:f8:93:d7:d7:a0:97:f4:e5:80:
                    72:c7:d0:0f:e2:38:72:53:fc:47:91:a3:45:55:d3:
                    1e:86:96:9f:ce:69:6f:1e:e5:46:5a:e9:d4:08:f5:
                    c8:66:40:0b:10:8c:26:78:f7:4c:c4:30:5d:59:10:
                    6c:d0:81:7e:7c:49:63:a7:f7:3e:40:11:ce:63:bd:
                    95:8a:a7:57:e3:f2:b8:60:48:56:ae:76:26:d2:46:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:77:64:21:CB:FA:76:42:E6:EC:00:80:AE:D0:72:FE:18:C8:DE:F6
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:18:8d:31:28:b5:13:27:3a:7f:4a:9f:0f:8d:f8:31:06:0a:
         ef:b6:d7:48:cd:84:a1:78:b9:b9:f9:2b:9d:dc:34:43:8d:de:
         f5:25:b0:a0:05:ad:65:ad:e9:b5:f5:c1:bf:96:30:29:a7:ea:
         07:d1:81:49:d5:29:23:0f:9f:d1:a6:23:54:88:0d:fe:01:ae:
         3a:a8:51:99:64:2c:01:1d:ab:c0:04:26:25:a7:2c:ed:aa:9d:
         d5:3d:93:f1:1a:85:6b:07:12:f1:55:cb:98:11:bc:41:57:1d:
         fc:e4:42:77:d7:a9:fe:8e:85:22:4a:81:d9:89:5a:25:ef:67:
         86:b6:ba:77:10:cc:d6:0a:78:2d:d7:da:bd:ca:9e:1f:d6:73:
         63:08:f7:6a:e0:cf:45:f5:a7:71:cb:61:03:36:2b:c4:31:d2:
         4c:39:fd:19:54:3e:91:23:91:91:0e:61:fb:27:5d:62:ed:12:
         df:0f:e8:e8:b5:19:05:d9:a6:ff:bd:1c:12:a1:47:96:75:62:
         fe:c4:7f:eb:22:7d:a1:92:3d:27:42:b2:13:53:31:6b:b4:48:
         0b:0f:31:04:56:9b:59:9d:6f:98:ee:6a:6d:d4:85:a6:fd:41:
         69:99:10:c6:53:58:b2:76:24:e1:5b:73:8a:8d:3e:5f:6f:df:
         bc:46:90:e0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUAiyyYtJ0gVkTWHkWpS57vb988fUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNTUwNDJaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQGFiMDVlODllZTc2MjdkMzEyYzNhMzAwMTg4NGEwZTk1YWQ1ZDllZjExMjVl
NzQ5NmZhYTBmZjViOTNmNWQyMzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMilyhylvHJq7UTs27GEyIpuwcWzZRvY35eILnsZehJ+PD/4OONjF6UphuDT
vG8dlXLfHIFCGFiSPoQLFBPJwZ+GJ/kl6rKTubZQBrUikSBrGSwNlvyQok74k0PR
GrmHQ3Wol9tVQLmMGYBNFIxiOZOYQ26LVRYqSn9Bbd5jNLwbpRSZP82br4ehmZrF
9Wk1pOzl2tBxns8lL8+qmuuHZA4CBM9ZwGg585fW+JPX16CX9OWAcsfQD+I4clP8
R5GjRVXTHoaWn85pbx7lRlrp1Aj1yGZACxCMJnj3TMQwXVkQbNCBfnxJY6f3PkAR
zmO9lYqnV+PyuGBIVq52JtJG3osCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRSd2Qh
y/p2QubsAICu0HL+GMje9jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGUwY2JiMTUtM2NiNy00NDliLTk1M2EtYjQwOTQ5YmRjMzJiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G+Q
MA0GCSqGSIb3DQEBCwUAA4IBAQCLGI0xKLUTJzp/Sp8PjfgxBgrvttdIzYSheLm5
+Sud3DRDjd71JbCgBa1lrem19cG/ljApp+oH0YFJ1SkjD5/RpiNUiA3+Aa46qFGZ
ZCwBHavABCYlpyztqp3VPZPxGoVrBxLxVcuYEbxBVx385EJ316n+joUiSoHZiVol
72eGtrp3EMzWCngt19q9yp4f1nNjCPdq4M9F9adxy2EDNivEMdJMOf0ZVD6RI5GR
DmH7J11i7RLfD+jotRkF2ab/vRwSoUeWdWL+xH/rIn2hkj0nQrITUzFrtEgLDzEE
VptZnW+Y7mpt1IWm/UFpmRDGU1iydiThW3OKjT5fb9+8RpDg
-----END CERTIFICATE-----