Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/981c5588-0e4a-445c-a928-99c39b0f1ca3.roa
File:                     981c5588-0e4a-445c-a928-99c39b0f1ca3.roa (raw, json)
Hash identifier:          SChYJ6w+UuXZwQ2v8KyHyijpR4wfjM99oiQDQGueyGQ=
Subject key identifier:   1B:DB:AA:7D:EF:13:67:16:3A:BB:0D:3A:6F:27:A9:E7:08:C7:EF:FA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       676B019DC34BCD8EECF6E486F8491773875BC95D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/981c5588-0e4a-445c-a928-99c39b0f1ca3.roa
Signing time:             Fri 22 May 2026 16:03:31 +0000
ROA not before:           Fri 22 May 2026 16:03:31 +0000
ROA not after:            Thu 20 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d068:6040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6b:01:9d:c3:4b:cd:8e:ec:f6:e4:86:f8:49:17:73:87:5b:c9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 22 16:03:31 2026 GMT
            Not After : Aug 20 23:59:59 2026 GMT
        Subject: serialNumber=577a48fa284a8c1fa48c03913f85a850ed2eea4dae2ebcdb5f79fd9291248436, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:05:c9:72:d9:49:61:c8:04:1c:ff:0f:c0:
                    af:44:2c:23:11:09:05:f5:54:93:0b:8c:ff:b3:f6:
                    12:de:f3:09:73:66:88:16:63:8c:6a:b0:dc:b2:0e:
                    ae:0b:29:6e:29:8e:d1:20:e4:f6:59:7d:b5:9d:f4:
                    cf:85:07:f0:28:cc:d3:d5:21:31:3f:22:b8:7c:c0:
                    a1:a7:8a:e5:6a:71:10:cf:d3:0b:a6:ae:f2:e1:62:
                    ef:d1:d6:02:9a:85:aa:05:a7:63:ee:a5:e7:b2:45:
                    de:f2:78:fe:16:97:0d:f2:59:39:e6:d3:e9:31:57:
                    5e:bc:be:26:40:2c:41:11:1a:9e:00:fa:1d:c0:9d:
                    c7:56:49:11:31:02:09:c9:b1:aa:ee:52:13:a6:1b:
                    51:fc:31:67:09:97:7f:fa:b0:d6:32:47:22:73:38:
                    ba:2b:b5:b4:4d:89:8d:35:b1:3b:9f:e2:5b:4b:42:
                    80:fa:73:72:7f:2f:1c:a6:12:91:ef:d0:08:9a:8d:
                    d0:f6:43:93:67:15:4d:d6:64:ae:d7:e6:4f:11:40:
                    19:3f:4e:db:b6:b0:f2:0d:1d:39:1d:bc:72:88:c2:
                    7c:84:91:e0:0b:1e:94:41:f7:84:76:ed:21:ff:37:
                    91:8b:e4:db:31:85:66:87:df:48:c7:89:1a:fe:1b:
                    8a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DB:AA:7D:EF:13:67:16:3A:BB:0D:3A:6F:27:A9:E7:08:C7:EF:FA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/981c5588-0e4a-445c-a928-99c39b0f1ca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d068:6040::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:75:e0:40:20:52:f3:b2:9c:75:24:88:3e:4f:60:88:d2:
         de:af:89:d1:ad:c5:da:f2:3e:3e:dc:ec:54:0c:c5:bb:a7:fa:
         18:45:eb:d2:e5:ff:c2:dc:a8:d6:4c:f8:ca:49:ed:c1:cf:7a:
         5c:17:21:6c:5b:18:5b:8e:e0:1e:44:97:54:6b:97:10:b3:8a:
         94:09:6f:1a:1e:05:83:f3:86:2e:e0:7b:df:ea:83:35:bf:4a:
         c2:80:4e:bb:3e:6d:17:71:58:55:e2:cf:67:df:4f:0f:fd:33:
         56:c6:17:19:17:ba:65:76:95:23:5a:f8:43:9f:90:08:83:47:
         ca:49:7f:19:d2:39:e4:59:4c:c3:2e:29:fb:87:31:34:4b:ac:
         95:63:b9:1c:5f:88:30:e1:35:24:b9:ab:7b:0d:86:7b:cd:38:
         90:3c:5f:3f:55:ae:58:cc:3f:53:63:95:29:f0:b8:19:78:47:
         a4:60:e3:75:0f:7a:64:86:52:d3:90:d4:9b:c5:77:64:df:36:
         f1:6e:9e:93:c6:ab:9f:42:b7:ea:e0:df:c4:de:bd:56:52:0e:
         20:51:f5:c3:b3:12:e7:fd:a4:c6:0d:dd:e0:1b:67:ad:6d:74:
         18:11:0c:ea:88:0f:b2:cd:6e:80:67:d6:0f:eb:d6:19:70:83:
         a5:37:70:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----