Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c5687b2-1e71-41b5-a2fd-d6a8dd4b35a3.roa
File:                     5c5687b2-1e71-41b5-a2fd-d6a8dd4b35a3.roa (raw, json)
Hash identifier:          WXNxmMK3jHC1Xb9wLt6H06vLSxJTBXnkmLyl1kxLYfk=
Subject key identifier:   01:28:E0:E0:50:56:76:F1:EF:5D:1B:9F:0E:9B:42:ED:F4:81:F4:A4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4B0985F202675F9053D004754655ABA4339EBB6B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c5687b2-1e71-41b5-a2fd-d6a8dd4b35a3.roa
Signing time:             Fri 22 May 2026 16:03:32 +0000
ROA not before:           Fri 22 May 2026 16:03:32 +0000
ROA not after:            Thu 20 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d068:8040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:09:85:f2:02:67:5f:90:53:d0:04:75:46:55:ab:a4:33:9e:bb:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 22 16:03:32 2026 GMT
            Not After : Aug 20 23:59:59 2026 GMT
        Subject: serialNumber=e3ca4895dbf0c6616d9fc25cb8fb8e186730efb2584163db4d923c2d75828638, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:48:e3:ac:7a:f8:dc:c1:55:c1:61:2f:ba:
                    e1:9c:4f:1d:b4:17:2d:da:81:99:ce:6a:99:7e:4b:
                    e9:2e:ee:a4:ee:48:92:1a:6c:10:85:fb:33:39:84:
                    cb:90:a7:f8:ce:e4:04:e6:b8:0b:fc:1b:9d:0f:9d:
                    00:91:99:84:6f:81:80:9e:71:5e:94:b1:fc:bc:19:
                    8b:b1:97:03:24:01:f1:15:55:28:9f:a4:c1:5f:35:
                    12:03:db:2c:f1:20:cf:1f:80:96:72:8a:f9:cc:bb:
                    2e:50:52:96:38:93:8c:1f:6a:6c:92:1d:7c:45:6d:
                    e3:75:2d:f5:65:61:8a:a6:10:46:8c:18:ab:82:9c:
                    33:8b:35:b5:6d:76:61:3b:2e:b2:6a:da:ad:19:bb:
                    c5:5b:f5:41:62:8f:62:de:34:69:8f:64:65:33:11:
                    39:09:f3:3f:ce:bb:d7:58:07:33:ae:a2:15:7d:d3:
                    ab:0f:56:f8:c1:77:e5:3f:07:62:ab:7e:28:45:5c:
                    38:1a:cd:54:2f:1b:20:d5:17:83:a7:b6:55:39:91:
                    d5:d5:3f:c4:aa:c8:c3:ad:21:86:9b:aa:02:34:f5:
                    25:45:90:92:a0:e5:17:9c:1f:e1:47:e5:6a:52:39:
                    c7:aa:35:84:44:ad:45:4d:3d:f4:f7:9d:8c:a3:37:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:28:E0:E0:50:56:76:F1:EF:5D:1B:9F:0E:9B:42:ED:F4:81:F4:A4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c5687b2-1e71-41b5-a2fd-d6a8dd4b35a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d068:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:b7:03:a6:cc:95:58:44:bc:08:dc:d7:67:76:3e:8f:ae:43:
         94:ad:31:dd:4b:48:bc:3c:ce:26:63:cd:bc:d0:b7:19:38:91:
         07:54:71:6a:ae:bd:37:36:c6:a8:1a:09:3b:ee:08:c6:3a:f0:
         17:a2:16:01:5f:59:62:48:c4:7c:08:70:7b:64:bd:49:c1:c6:
         94:10:34:a9:39:1a:a7:4f:e5:b4:66:34:05:ff:0b:b7:08:3a:
         a3:b2:90:7d:3f:74:3b:98:6e:8a:f6:a9:e4:b9:e7:17:7b:00:
         23:45:58:0a:46:c8:a8:75:0c:47:3f:9f:88:e1:76:fc:9d:e4:
         07:11:99:b6:74:d6:7a:6b:73:21:f4:42:6f:4f:94:4b:59:28:
         23:c9:14:fa:88:a0:7f:0b:3a:c5:b1:df:11:00:52:72:d1:10:
         76:5d:27:4e:73:fb:0c:58:a7:63:3b:22:c0:48:7f:48:36:0f:
         36:4a:88:f3:24:c4:cb:e0:88:0c:3b:cc:c1:8a:42:d7:f6:11:
         c2:10:48:30:f9:db:9b:19:00:3d:63:8c:ae:c6:31:a4:d1:0c:
         a5:1f:9a:15:cf:81:2e:a7:b0:88:61:68:9d:b7:d9:50:3e:b0:
         fc:29:44:76:0f:23:3f:46:d3:2b:77:b4:d4:e4:1b:80:87:af:
         09:91:01:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----