Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97822d0c-c384-4da9-b1f7-c1f2c2133aec.roa
File:                     97822d0c-c384-4da9-b1f7-c1f2c2133aec.roa (raw, json)
Hash identifier:          J8geH0t9MVfXOOqP4ylt5vnFoe5RomqR9djXgBXJNCQ=
Subject key identifier:   89:B5:08:C5:24:2D:8D:DF:09:4C:C6:4C:14:3B:61:80:64:5C:F2:EA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5C58E5CF5509124303F7EA2EA737437FF5EFB3DB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97822d0c-c384-4da9-b1f7-c1f2c2133aec.roa
Signing time:             Sun 31 May 2026 01:00:07 +0000
ROA not before:           Sun 31 May 2026 01:00:07 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d:1040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:58:e5:cf:55:09:12:43:03:f7:ea:2e:a7:37:43:7f:f5:ef:b3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 31 01:00:07 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=2ae28670ebcca03664fba02437bd2fadc3940ae5867f4eb36cc170ce8420de83, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:06:89:52:7b:82:ea:a4:ab:4c:46:65:66:
                    e8:2e:f2:77:41:54:0e:ee:ed:f4:f0:02:c2:05:16:
                    20:e7:72:f9:df:71:95:4f:eb:6b:84:cc:c6:86:1a:
                    0f:03:52:43:d8:38:0f:71:31:d1:c3:4f:fd:99:23:
                    9a:56:3f:0e:72:1f:84:ef:f7:8a:82:15:c3:f6:74:
                    e3:c6:aa:6c:db:6b:70:a1:bb:67:f6:b5:df:cd:50:
                    a0:2c:40:90:f6:5c:04:bb:11:67:20:a6:15:24:ff:
                    36:02:01:c1:8a:1e:6e:17:9b:26:0d:51:89:d0:6e:
                    26:ba:ec:bc:0f:4e:06:22:b0:c9:90:1c:3a:2e:b9:
                    78:8c:0f:07:ba:f6:11:bd:dc:c4:2c:41:f9:8d:95:
                    4e:39:d2:b9:df:39:a4:ca:6d:ad:d1:ee:1e:a5:fc:
                    30:f0:f9:4a:ae:94:b0:79:31:1d:cc:e5:48:a7:2d:
                    24:8a:d2:a2:8c:d5:13:38:b3:97:00:8c:d5:b5:e8:
                    12:c6:f3:aa:94:f8:61:99:7a:d7:21:43:73:12:62:
                    27:76:7b:d9:c6:c2:61:c5:09:49:08:c7:30:13:3a:
                    c9:42:88:60:07:dc:cf:70:ec:0e:38:16:99:28:25:
                    79:98:b1:fd:01:91:ff:44:94:2b:85:22:1b:d9:f5:
                    67:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B5:08:C5:24:2D:8D:DF:09:4C:C6:4C:14:3B:61:80:64:5C:F2:EA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97822d0c-c384-4da9-b1f7-c1f2c2133aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:82:a7:91:39:cc:1e:d0:66:91:4a:38:b9:c0:01:8b:55:a9:
         b3:76:88:cc:e2:f0:8b:33:0d:37:4e:ad:fa:02:e2:c2:f9:33:
         47:35:0d:72:14:80:7e:bc:05:b8:4e:c9:78:4f:cd:96:4c:cb:
         20:ca:61:6d:24:66:b5:fc:78:07:bf:4c:eb:19:a7:44:53:a1:
         aa:33:21:c0:30:93:5d:8b:57:c5:f8:71:d0:ce:ff:fa:36:41:
         ef:f3:81:27:27:eb:8e:a2:af:2f:db:8b:61:7b:ad:00:2b:2d:
         08:44:eb:26:52:33:37:e5:dd:2f:b9:a0:1d:d1:5d:5c:fe:04:
         89:bf:14:23:72:a3:da:1d:80:4d:12:df:17:e3:5d:65:ec:bb:
         65:b0:82:78:d9:c9:4b:7c:53:72:58:64:3c:91:5f:5d:a2:fb:
         10:58:6a:b1:6f:e2:d9:de:06:5b:e1:bc:46:3e:37:9f:f0:c3:
         56:8e:db:aa:a1:a3:98:3b:fd:60:07:cd:98:3a:f4:12:83:64:
         a3:44:ea:87:6f:fe:34:dc:56:08:11:3d:f6:28:5d:cb:cc:84:
         95:73:9f:34:7b:16:df:11:37:af:b0:fe:33:e7:1d:d7:e6:0c:
         e9:a6:23:9f:04:0f:ff:0f:cc:c8:b4:5d:2e:66:f8:7f:21:02:
         ec:3b:38:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----