Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6876b754-8507-46c1-9acb-e5620665b9d1.roa
File:                     6876b754-8507-46c1-9acb-e5620665b9d1.roa (raw, json)
Hash identifier:          EYIe1zTzzBpqBalsXApSylH6Zy+Ruz/i4kj1fl4szmA=
Subject key identifier:   09:5D:07:A7:F9:4D:BD:2D:83:FA:DC:28:75:3D:3C:47:9C:4D:83:ED
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       08E453C837C33EC1AACDBB15FA279E72720604AA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6876b754-8507-46c1-9acb-e5620665b9d1.roa
Signing time:             Sun 31 May 2026 01:00:53 +0000
ROA not before:           Sun 31 May 2026 01:00:53 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d033:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e4:53:c8:37:c3:3e:c1:aa:cd:bb:15:fa:27:9e:72:72:06:04:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 31 01:00:53 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=f5e772cf927b016e750f78811f318e3e0e1e8ecd62a153d8c4bc65f0a2c8099c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:76:1b:8e:11:69:3d:98:96:57:49:79:0d:09:
                    f0:9f:ef:3d:1b:54:69:c3:d9:88:d7:79:9b:74:c4:
                    e6:56:ab:60:78:6c:11:a3:b0:c3:c6:af:10:0b:95:
                    e3:86:c9:42:fc:37:d6:0b:26:0f:d5:67:f7:06:48:
                    0e:60:a8:6a:65:12:74:04:37:ff:00:1a:f2:7f:b6:
                    f8:86:95:9c:23:15:64:fd:de:67:f9:36:fe:03:16:
                    66:fb:2d:8f:39:b2:ef:44:bc:41:0c:d0:eb:1b:84:
                    52:d0:b1:b8:22:8d:b9:4a:ad:df:69:01:d6:f6:39:
                    d7:92:2b:73:76:63:ae:46:db:b9:aa:6e:65:db:c0:
                    1e:10:7a:59:69:31:9a:fa:b7:e7:6d:26:dc:e4:b4:
                    4a:e5:47:5d:65:f2:9c:e9:d1:8b:cb:88:d1:9d:bc:
                    f1:e2:93:ba:e6:3b:4d:a5:6a:1e:66:53:6c:29:a7:
                    e6:85:46:a8:b9:83:d2:06:48:1f:44:a8:f6:a0:22:
                    73:f2:90:1a:98:8f:e4:9a:75:75:b1:87:6c:5a:bf:
                    6e:24:bf:56:24:1d:05:87:53:73:47:fb:73:1a:2e:
                    c0:89:52:26:4c:a3:b8:f9:7f:8e:6f:05:29:74:82:
                    0c:7a:06:b1:47:f6:44:a9:f0:d6:8b:61:58:db:8b:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5D:07:A7:F9:4D:BD:2D:83:FA:DC:28:75:3D:3C:47:9C:4D:83:ED
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6876b754-8507-46c1-9acb-e5620665b9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d033:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:26:18:76:9e:30:21:4a:8a:46:4f:dc:1c:53:90:e9:d4:c4:
         e9:d1:74:a4:fc:4b:3f:c4:c4:85:f0:6a:29:4c:c6:c4:af:aa:
         d7:44:2d:76:3e:05:a0:ea:ad:2f:cf:17:bd:82:9e:99:42:b8:
         5b:06:2b:9c:2f:6f:3d:b1:55:0a:24:40:e5:f0:49:7f:98:12:
         8c:77:16:1b:ad:3d:bc:e2:ba:b8:44:2d:67:b9:e2:29:5c:e4:
         99:0b:b1:f9:ee:7b:c3:32:ad:61:db:91:44:b7:91:59:11:51:
         c7:29:5b:97:68:7f:5c:4e:1b:78:29:8b:c8:14:c7:be:89:ef:
         f0:51:ea:45:1a:01:1b:80:b1:87:65:5f:58:4e:6f:1e:8a:19:
         b5:ae:63:0b:3d:b6:ed:73:21:fc:f0:bf:88:c7:7d:d9:56:d5:
         ea:63:0f:11:23:a5:05:52:f7:4f:12:6c:c4:11:1b:f9:3a:fb:
         91:51:6e:8e:e4:46:6c:05:dc:7a:a5:be:6a:ca:32:17:6d:54:
         64:ee:0d:4a:c4:a9:8a:ce:8e:36:d1:ee:0d:4d:22:05:01:12:
         0f:f7:ae:d5:b3:f8:cd:f3:b7:65:ee:b8:cb:5a:7f:73:44:be:
         05:fd:93:0b:bb:3a:cc:ec:3e:cd:31:ee:f9:3a:34:54:87:4d:
         a4:98:8a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----