Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa
File:                     7cde339d-568f-4b5b-98d4-9eca268d8a43.roa (raw, json)
Hash identifier:          Dz2Aj6uTDmwYG3MXaM41WVM7CxXE1mm4Mr9DTg0eUzY=
Subject key identifier:   A2:75:F3:A1:36:EC:3B:62:44:27:B2:7A:5C:F3:39:0A:A1:FA:A2:20
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       43E141EADD855A0A5FB7A767BB4B039D6C1205A3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa
Signing time:             Mon 27 Jul 2026 03:20:07 +0000
ROA not before:           Mon 27 Jul 2026 03:20:07 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d074:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e1:41:ea:dd:85:5a:0a:5f:b7:a7:67:bb:4b:03:9d:6c:12:05:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:07 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=ed1f2aab38bf72226ae4bb5819b2fc62e21ab69371a2478cfa64ee3b2cc7cbaf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:7b:56:82:9f:cb:72:72:0d:5e:a7:47:18:
                    9f:f9:02:4c:4c:30:92:18:dd:83:3f:a1:c8:bb:a3:
                    7c:91:2e:28:9b:f2:53:bb:a2:01:95:da:e5:8f:ff:
                    f6:c2:57:52:60:6a:07:36:fb:e6:99:22:e5:92:d1:
                    59:26:4a:5e:a3:a2:2e:e5:28:da:e3:71:da:8e:c7:
                    eb:f3:07:b3:bd:c2:ef:65:70:ae:7f:32:2a:f2:c2:
                    2b:23:bc:50:22:e1:70:70:3b:ee:17:a3:52:f2:97:
                    7c:3c:6b:04:f4:3d:32:7d:97:b0:38:60:f6:38:12:
                    d8:b9:c1:b9:8b:60:9c:da:84:5b:25:a9:6d:e7:ee:
                    c0:b6:55:13:50:c0:ca:3b:f5:89:e6:61:72:b1:58:
                    a2:36:65:9c:de:38:ef:6c:0f:3f:56:a8:ab:dd:b9:
                    16:6a:9d:c3:7d:6f:b7:86:a9:01:db:62:eb:4c:d0:
                    ce:f4:14:af:1a:32:f2:9f:2a:7d:af:b8:e9:c5:8f:
                    a6:48:58:8e:84:c4:a9:2b:cc:b7:ca:a5:4b:85:29:
                    e0:f3:2b:69:9a:6e:0d:80:7d:0c:cd:9d:a3:1b:cb:
                    cd:5f:26:84:fd:ca:c6:c6:74:5f:85:9d:8f:3d:cc:
                    39:03:64:1f:bd:36:23:52:59:01:59:c1:c5:07:37:
                    98:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:75:F3:A1:36:EC:3B:62:44:27:B2:7A:5C:F3:39:0A:A1:FA:A2:20
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:47:bc:d7:ca:98:e7:8b:c2:35:b5:a4:20:cd:cd:89:1b:32:
         07:62:2f:8b:56:8f:29:d8:9e:d2:de:35:ad:09:6e:fe:31:15:
         2b:84:61:80:dd:b2:72:d8:5f:44:61:a4:22:e9:81:fb:2d:b7:
         76:17:86:5f:f1:ff:f5:bc:b5:5a:df:76:82:5a:ec:bc:5a:e5:
         6e:a3:e0:bd:d5:dc:c3:b2:1c:9b:3b:8e:bf:2e:da:fb:2f:f3:
         8b:16:b4:1b:22:16:d1:fb:b9:37:62:4e:ce:ce:cb:15:05:06:
         da:38:bc:8a:1f:b8:20:c0:42:0c:e3:00:78:ba:c3:9a:60:6a:
         58:03:db:60:06:b8:9a:39:3c:be:35:7f:e9:af:f2:83:3a:02:
         7c:17:fb:04:56:e5:76:ab:41:06:f3:7d:10:3c:b8:2b:70:72:
         e2:98:5b:2b:8c:76:90:9e:a1:44:3f:56:3f:5c:2a:c3:99:a1:
         58:aa:49:0a:10:7d:1c:33:87:3e:7e:f2:8b:1c:4f:6c:16:cc:
         47:51:3a:ea:23:74:62:f3:a9:76:95:f9:0b:72:fb:62:18:05:
         41:4a:e8:fd:ae:8b:a5:0e:44:e9:55:78:f6:00:c2:55:81:d0:
         bc:43:0d:e3:6b:4d:6f:4a:ad:9f:65:b9:b3:ae:06:55:79:01:
         b1:8a:15:c5
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQ+FB6t2FWgpft6dnu0sDnWwSBaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjcwMzIwMDdaFw0yNjEwMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGVkMWYyYWFiMzhiZjcyMjI2YWU0YmI1ODE5YjJmYzYyZTIxYWI2OTM3MWEy
NDc4Y2ZhNjRlZTNiMmNjN2NiYWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAORGe1aCn8tycg1ep0cYn/kCTEwwkhjdgz+hyLujfJEuKJvyU7uiAZXa5Y//
9sJXUmBqBzb75pki5ZLRWSZKXqOiLuUo2uNx2o7H6/MHs73C72Vwrn8yKvLCKyO8
UCLhcHA77hejUvKXfDxrBPQ9Mn2XsDhg9jgS2LnBuYtgnNqEWyWpbefuwLZVE1DA
yjv1ieZhcrFYojZlnN4472wPP1aoq925Fmqdw31vt4apAdti60zQzvQUrxoy8p8q
fa+46cWPpkhYjoTEqSvMt8qlS4Up4PMraZpuDYB9DM2doxvLzV8mhP3KxsZ0X4Wd
jz3MOQNkH702I1JZAVnBxQc3mDsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSidfOh
Nuw7YkQnsnpc8zkKofqiIDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2NkZTMzOWQtNTY4Zi00YjViLTk4ZDQtOWVjYTI2OGQ4YTQzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HRQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCkR7zXypjni8I1taQgzc2JGzIHYi+LVo8p2J7S
3jWtCW7+MRUrhGGA3bJy2F9EYaQi6YH7Lbd2F4Zf8f/1vLVa33aCWuy8WuVuo+C9
1dzDshybO46/Ltr7L/OLFrQbIhbR+7k3Yk7OzssVBQbaOLyKH7ggwEIM4wB4usOa
YGpYA9tgBriaOTy+NX/pr/KDOgJ8F/sEVuV2q0EG830QPLgrcHLimFsrjHaQnqFE
P1Y/XCrDmaFYqkkKEH0cM4c+fvKLHE9sFsxHUTrqI3Ri86l2lfkLcvtiGAVBSuj9
roulDkTpVXj2AMJVgdC8Qw3ja01vSq2fZbmzrgZVeQGxihXF
-----END CERTIFICATE-----