Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d322170-f0d4-4cd2-98f4-e2f1db786c6d.roa
File:                     5d322170-f0d4-4cd2-98f4-e2f1db786c6d.roa (raw, json)
Hash identifier:          5flD+ky3bdCY+6cgn56Lr7OnEvwxzH/djYwvaUhY8ug=
Subject key identifier:   84:F7:FE:D4:23:41:14:6D:08:16:25:B2:2E:7C:C2:88:4B:3E:84:46
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7528EE70B87E517F3AB09FE8908DEDA3E4CFE7EE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d322170-f0d4-4cd2-98f4-e2f1db786c6d.roa
Signing time:             Mon 27 Jul 2026 03:20:07 +0000
ROA not before:           Mon 27 Jul 2026 03:20:07 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d059:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:28:ee:70:b8:7e:51:7f:3a:b0:9f:e8:90:8d:ed:a3:e4:cf:e7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:07 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=d75052a5b271d40d8571d3fd57b05abd1a3114f5c71fb08cbd3725d691fd0728, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:31:ad:a4:c5:e0:97:6b:ca:c0:d4:f4:c1:
                    9b:56:ff:45:23:a8:83:08:43:e7:c2:3b:04:29:f3:
                    c6:67:27:7a:2b:79:35:2d:78:fa:4e:80:16:fe:ca:
                    c9:ad:7f:d2:ee:cb:f2:26:46:64:61:53:ea:9c:ab:
                    94:2a:27:6a:22:a2:c3:d9:12:c9:1e:2b:6c:4a:ca:
                    28:df:71:aa:28:65:c3:97:f9:e3:4d:6a:f5:36:c4:
                    7c:ad:a8:37:7a:43:de:48:ca:ae:2d:99:b3:a1:e7:
                    a0:1b:67:90:c2:68:25:95:50:5b:fc:f8:6a:2c:11:
                    7e:b0:5e:e7:1f:6d:3e:93:c0:38:40:08:9a:8c:e0:
                    f8:31:04:b7:19:ee:ea:24:14:5f:c5:b8:4c:37:31:
                    1b:cb:11:5d:75:79:59:44:ba:d8:f1:79:a3:8d:0f:
                    f7:3a:56:b9:c3:4a:cb:3a:1b:9a:8a:2b:fa:d6:ab:
                    96:c3:7e:46:bc:86:1c:d1:df:0f:57:e8:b8:0c:22:
                    05:bc:a5:ad:1c:83:7b:ce:fb:50:dc:19:ca:76:5f:
                    54:ad:d3:09:80:e3:86:55:cb:c9:32:66:58:6b:cc:
                    8e:58:03:7c:a1:3e:2b:97:81:01:9c:a3:ce:29:af:
                    68:c8:45:59:40:d4:55:83:ac:de:ae:e0:dd:ed:c1:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F7:FE:D4:23:41:14:6D:08:16:25:B2:2E:7C:C2:88:4B:3E:84:46
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d322170-f0d4-4cd2-98f4-e2f1db786c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:13:4e:34:f3:0d:ab:fe:58:74:ec:49:c5:d6:7c:3c:52:
         ce:0e:ea:7f:4a:5d:ce:1a:f9:f6:b2:92:c0:21:37:0d:3b:a1:
         73:87:6e:3b:57:e0:5e:32:5a:b9:c2:a9:bb:e6:44:ed:e4:e3:
         2b:4b:b2:7c:a4:7a:36:9f:b8:82:2a:b3:d4:e0:6d:26:d3:5d:
         42:ad:d7:b8:d5:6c:76:0a:53:0a:5e:1d:95:6c:e7:c1:5f:ca:
         c6:df:c5:c4:4c:5f:22:d6:09:a0:3b:af:a3:28:70:cc:2a:0e:
         c3:d6:81:37:f6:97:31:2e:71:7e:8e:ce:56:a2:cf:db:70:67:
         1c:cb:f0:2e:52:00:42:8e:33:27:45:d8:b7:b2:5c:0c:98:35:
         0c:96:58:ac:89:8d:44:7f:fa:b8:64:2f:f9:3a:4c:8a:4f:39:
         e1:f9:da:b1:78:99:e4:f8:64:58:26:fd:e8:e1:d8:1c:05:4b:
         02:8f:fe:a5:5f:c9:d8:47:28:c2:09:30:8f:0d:7c:27:12:86:
         66:72:f6:8c:ee:8b:ad:aa:52:02:03:f7:c6:28:01:07:df:91:
         cf:78:e3:99:13:04:e9:e4:a8:0c:e8:87:bc:de:7b:e6:ac:66:
         8a:8a:36:05:c3:e1:2a:f7:22:da:3c:78:34:1d:70:7d:ad:fc:
         03:5e:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----