Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ff479c7-35c9-43ea-ab99-712ce7537beb.roa
File:                     9ff479c7-35c9-43ea-ab99-712ce7537beb.roa (raw, json)
Hash identifier:          /ALYQWE54fhMJe7dXHLPl+I9mfDcGB0SA6OVpnQshW8=
Subject key identifier:   10:3A:35:53:86:8B:FC:17:39:21:AA:F3:44:A4:E2:76:84:B4:D9:CB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       77F48E3A9B8A01A8381E68A1EDF82CC77452C11F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ff479c7-35c9-43ea-ab99-712ce7537beb.roa
Signing time:             Fri 20 Feb 2026 01:50:10 +0000
ROA not before:           Fri 20 Feb 2026 01:50:10 +0000
ROA not after:            Thu 21 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d030:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f4:8e:3a:9b:8a:01:a8:38:1e:68:a1:ed:f8:2c:c7:74:52:c1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 20 01:50:10 2026 GMT
            Not After : May 21 23:59:59 2026 GMT
        Subject: serialNumber=a177f3326bc2da02531b3a471fbe0271452973f96fba46676260a62bd7e99b64, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:1f:aa:c4:52:9f:15:6a:88:12:9f:55:b3:
                    0a:e1:90:75:3d:e1:9b:e1:c2:c8:24:31:08:8d:ed:
                    8b:9e:3c:0a:78:56:5d:78:92:0d:80:28:ed:96:41:
                    14:4f:89:34:70:74:7b:d0:00:00:e7:b3:76:ca:c2:
                    fa:3e:d5:51:ed:8d:5d:d5:a6:62:28:a2:68:b8:48:
                    a7:8d:42:03:25:37:2c:9a:8d:22:10:50:d3:07:65:
                    2b:b3:96:a3:99:a6:d9:f8:1a:9c:80:b7:24:28:38:
                    45:2a:b6:1f:aa:74:86:90:f4:66:6e:e5:5d:14:b8:
                    90:0f:b3:96:59:fd:e1:df:e6:dd:2a:b0:61:1b:09:
                    16:a6:1e:a7:22:93:0b:24:49:9c:2d:ed:fb:8f:71:
                    c1:d6:6f:b8:b2:1d:65:c7:54:2d:0a:42:f2:1e:a7:
                    60:9e:52:c2:99:00:5c:74:a9:dd:c4:d8:d0:14:35:
                    4b:0f:5c:6c:5b:3f:65:1d:ae:cc:b9:1e:97:cf:92:
                    38:c4:d5:87:7d:d2:d6:94:cd:7d:0c:fd:08:49:3b:
                    19:90:bb:fe:d6:c3:df:59:c8:bc:8f:34:ef:50:1d:
                    70:35:eb:66:98:4e:ea:23:b7:42:89:40:d2:58:93:
                    41:b6:b5:96:d1:0c:c0:b6:c0:d6:c7:b1:69:21:5b:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3A:35:53:86:8B:FC:17:39:21:AA:F3:44:A4:E2:76:84:B4:D9:CB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ff479c7-35c9-43ea-ab99-712ce7537beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d030:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:ce:b5:75:c7:9c:cf:81:a2:28:6f:ce:d4:c1:bb:50:d9:1d:
         ea:ea:42:1e:f3:f4:f4:01:bc:52:b0:19:17:5a:d2:29:8a:d1:
         3f:b6:12:59:d9:0e:99:f5:f6:39:21:c5:a8:e4:56:32:8c:65:
         09:e6:68:d6:56:f9:d9:9e:16:70:c9:15:14:6b:31:d6:82:4c:
         81:d8:61:ec:c3:bf:d5:1b:a4:5f:8e:07:c4:0c:2b:53:ce:5a:
         8b:1a:fe:ba:c2:2e:69:45:4f:4a:1f:3e:f4:27:ee:5d:2f:56:
         8e:6a:d5:e3:82:46:89:ef:6d:9f:19:c6:6b:6f:53:54:e8:80:
         ae:ea:86:c4:4b:f6:39:b5:6e:37:69:e9:f6:76:5d:b9:83:aa:
         19:77:a6:df:5a:4e:f7:66:95:f2:23:81:e2:c3:58:df:68:31:
         83:13:57:9b:51:b1:10:74:f9:32:f7:77:d2:99:ce:ec:5d:4c:
         76:ff:83:59:c2:a4:9c:9d:cf:15:3c:aa:ec:b8:d1:a2:2f:90:
         b3:d5:23:e6:0f:88:a9:33:14:c0:84:ee:06:90:99:fb:84:20:
         3d:a3:ba:81:cc:27:c1:8c:b1:82:39:30:64:9f:f5:54:63:28:
         ce:d8:b8:d6:6d:79:10:6f:5b:d1:5d:90:b7:0f:1a:de:14:23:
         5b:9a:11:6a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUd/SOOpuKAag4Hmih7fgsx3RSwR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjAwMTUwMTBaFw0yNjA1MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGExNzdmMzMyNmJjMmRhMDI1MzFiM2E0NzFmYmUwMjcxNDUyOTczZjk2ZmJh
NDY2NzYyNjBhNjJiZDdlOTliNjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIuqH6rEUp8VaogSn1WzCuGQdT3hm+HCyCQxCI3ti548CnhWXXiSDYAo7ZZB
FE+JNHB0e9AAAOezdsrC+j7VUe2NXdWmYiiiaLhIp41CAyU3LJqNIhBQ0wdlK7OW
o5mm2fganIC3JCg4RSq2H6p0hpD0Zm7lXRS4kA+zlln94d/m3SqwYRsJFqYepyKT
CyRJnC3t+49xwdZvuLIdZcdULQpC8h6nYJ5SwpkAXHSp3cTY0BQ1Sw9cbFs/ZR2u
zLkel8+SOMTVh33S1pTNfQz9CEk7GZC7/tbD31nIvI8071AdcDXrZphO6iO3QolA
0liTQba1ltEMwLbA1sexaSFbBNMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQQOjVT
hov8FzkhqvNEpOJ2hLTZyzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWZmNDc5YzctMzVjOS00M2VhLWFiOTktNzEyY2U3NTM3YmViLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DAg
MA0GCSqGSIb3DQEBCwUAA4IBAQBLzrV1x5zPgaIob87UwbtQ2R3q6kIe8/T0AbxS
sBkXWtIpitE/thJZ2Q6Z9fY5IcWo5FYyjGUJ5mjWVvnZnhZwyRUUazHWgkyB2GHs
w7/VG6RfjgfEDCtTzlqLGv66wi5pRU9KHz70J+5dL1aOatXjgkaJ722fGcZrb1NU
6ICu6obES/Y5tW43aen2dl25g6oZd6bfWk73ZpXyI4Hiw1jfaDGDE1ebUbEQdPky
93fSmc7sXUx2/4NZwqScnc8VPKrsuNGiL5Cz1SPmD4ipMxTAhO4GkJn7hCA9o7qB
zCfBjLGCOTBkn/VUYyjO2LjWbXkQb1vRXZC3DxreFCNbmhFq
-----END CERTIFICATE-----