Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
File:                     9430d5db-5a09-4461-b80a-b9d755d346a9.roa (raw, json)
Hash identifier:          FqxLjVkxmMuSC2ASKCdY0QnUG8MRKu5YOpsm89WaRHQ=
Subject key identifier:   4E:19:C3:A5:38:36:5B:73:B8:77:0F:53:B0:4F:D9:97:74:D4:21:59
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       37D95207605D9F75591A25C4B596CC64C8CBB546
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
Signing time:             Tue 19 May 2026 05:10:37 +0000
ROA not before:           Tue 19 May 2026 05:10:37 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01a::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d9:52:07:60:5d:9f:75:59:1a:25:c4:b5:96:cc:64:c8:cb:b5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 05:10:37 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=06e45aa7acea5abe62f900ce45ee07a9efe95ef00fadcaa68b28e2957ebb80de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:c7:99:35:49:a1:6a:1b:00:02:48:31:f8:
                    3c:17:4c:08:53:30:28:3e:9c:01:87:25:c9:2a:3c:
                    cf:35:43:24:a5:38:84:53:31:59:b2:7b:8f:4a:0e:
                    01:f3:45:90:f5:18:9f:71:6f:71:09:de:62:44:55:
                    93:56:a4:62:ca:be:2d:58:0a:0a:3c:36:a0:d9:74:
                    f1:b5:41:32:26:20:92:db:7f:f5:27:23:b5:2d:26:
                    7c:61:b6:bc:f3:46:f3:a3:e1:76:b0:74:18:b5:fb:
                    a7:9d:09:24:e4:07:34:98:35:60:5d:aa:f0:44:6e:
                    82:10:61:3b:c6:da:ab:db:e1:d0:ab:60:85:b2:8a:
                    c7:3b:88:21:ce:53:f0:5f:3b:f8:ec:ae:c4:82:78:
                    48:90:ed:14:e1:35:6a:aa:b7:d4:56:4b:8c:b7:70:
                    a3:0b:e7:53:bd:e6:93:c5:a4:80:43:54:ea:90:d9:
                    95:e6:cb:12:f7:22:ed:0c:e5:37:4b:70:fa:4f:a7:
                    7b:cb:aa:4d:84:f1:ae:47:30:49:b5:79:f5:42:09:
                    9e:07:0d:88:ce:98:61:2c:e9:fd:c1:f1:99:23:3f:
                    84:28:6c:df:c3:81:bc:63:2d:5e:f1:da:09:cc:d5:
                    88:8b:61:f6:ea:9c:2f:f0:50:fb:38:e8:de:a7:b3:
                    e8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:19:C3:A5:38:36:5B:73:B8:77:0F:53:B0:4F:D9:97:74:D4:21:59
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01a::/38

    Signature Algorithm: sha256WithRSAEncryption
         4f:9b:8a:3c:7e:2d:df:5f:3f:96:f2:e6:3f:63:79:66:55:d4:
         2f:ff:93:93:2c:e9:07:9a:f6:f9:a7:dc:5d:37:63:72:71:5e:
         90:19:ef:75:ad:52:df:02:99:45:94:ea:05:73:fe:1b:64:24:
         60:e4:a5:6b:e8:5e:e7:d6:ce:7c:0f:17:c5:ba:fc:92:84:b5:
         3d:6b:23:c3:eb:7e:85:99:a7:a3:10:60:44:26:05:77:df:ac:
         35:77:eb:c6:a2:e4:74:2b:85:d4:09:e0:3e:82:74:53:2f:c6:
         03:07:05:52:b3:56:b3:ff:44:04:3e:26:bf:57:dc:d6:cd:da:
         d8:f8:23:39:54:1c:5d:6c:b0:a4:12:5c:eb:93:59:81:91:67:
         72:4a:15:43:01:8e:ac:6d:b1:cb:3e:24:db:39:76:af:57:67:
         e3:ab:06:03:e6:3a:d5:38:d3:12:df:87:c4:9a:59:ef:a0:0b:
         3b:4d:a0:5a:c3:ab:fe:4f:88:97:e4:2f:5b:e2:0d:19:8a:ce:
         aa:c8:50:d1:66:89:91:f6:78:66:44:53:9a:c0:19:f6:ae:a6:
         24:b6:ff:99:e5:15:6f:2c:db:f7:17:95:2f:f4:45:90:6e:13:
         10:98:5f:ba:91:5c:26:c8:c7:69:69:38:41:c1:05:d3:6a:d7:
         6d:2a:83:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----