Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa
File:                     aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa (raw, json)
Hash identifier:          9E3Rhk6IcVPgmNJhcVv8B/cpNwNfiQoS16adKLJ/1dI=
Subject key identifier:   B4:04:1D:7E:E6:FE:0D:0D:EA:C1:6C:DD:C5:23:BB:DD:7B:0D:34:17
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7F720521D8461ACEF604533B3C33E075CE62A50A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa
Signing time:             Fri 20 Feb 2026 01:51:10 +0000
ROA not before:           Fri 20 Feb 2026 01:51:10 +0000
ROA not after:            Thu 21 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        176.34.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:72:05:21:d8:46:1a:ce:f6:04:53:3b:3c:33:e0:75:ce:62:a5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 20 01:51:10 2026 GMT
            Not After : May 21 23:59:59 2026 GMT
        Subject: serialNumber=31f25f49db4b27ebf3a610874c99ef7d5f33108e9b518f2d531ee8860cf7ce0e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:39:dd:4f:cc:7c:b2:37:b9:38:14:cc:2f:
                    14:be:8c:51:5b:53:7c:1a:d4:16:16:bb:18:55:18:
                    54:d1:21:e8:47:36:6b:ee:d7:b2:6c:2d:fa:41:58:
                    8e:94:91:e8:24:2f:d3:23:94:2c:6d:21:2c:ad:99:
                    f1:5f:d0:59:4e:3d:9e:b3:ec:1a:5e:08:ba:ec:bb:
                    d6:fe:a3:e8:79:46:72:2c:e0:0c:ca:7f:4f:16:76:
                    b4:cc:b0:3a:d3:7b:81:61:52:91:5e:b7:bf:7a:b3:
                    46:8e:a1:fb:88:e0:18:6c:dd:20:84:ae:22:b0:2b:
                    2c:eb:67:c3:8e:db:7e:05:3b:bc:96:43:26:49:01:
                    b6:89:86:21:03:46:67:83:d2:7d:90:01:1b:92:15:
                    31:f2:b0:c5:14:e9:b4:c0:70:a9:1d:7b:0b:42:8d:
                    a0:12:e0:34:68:49:b7:70:58:dd:17:ae:00:05:f0:
                    bc:f4:90:00:7f:0a:a1:7c:e4:11:31:9e:ad:3c:76:
                    d8:0b:a6:87:84:97:13:5d:f1:5e:d4:c6:de:ab:4e:
                    70:01:5b:19:e4:f4:14:b0:37:c5:cc:82:2d:36:09:
                    92:01:ec:6b:96:0d:8f:7d:5f:c4:52:5a:a4:17:17:
                    3a:02:1a:4e:86:ed:29:11:50:d0:f3:aa:12:94:22:
                    33:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:04:1D:7E:E6:FE:0D:0D:EA:C1:6C:DD:C5:23:BB:DD:7B:0D:34:17
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.34.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:ce:7b:93:6d:28:d0:09:e2:4f:26:be:b9:e4:f8:6d:c2:e4:
         61:ca:0c:34:19:f9:58:00:e3:c6:fc:c7:ab:01:72:24:ca:1e:
         44:35:cc:61:f7:7f:af:0d:13:81:ef:13:7d:d1:e4:e2:89:15:
         92:ab:7d:30:01:b9:41:91:4c:89:c2:77:2e:11:ec:2d:f7:54:
         52:ea:3d:f0:3f:6d:ad:24:2d:8f:e2:8b:dd:1a:a1:8d:5c:84:
         56:2e:c4:9d:8b:bf:b3:5c:c6:92:4e:b5:bd:b1:9a:e9:bd:f1:
         64:90:bd:86:f6:cf:ca:c1:9b:90:3a:56:18:c6:02:3f:0a:ef:
         ce:43:dd:91:9e:39:cc:70:0f:de:f0:c3:9e:dd:96:de:1f:18:
         3b:d7:22:de:1f:1d:86:66:56:91:a4:ab:12:14:91:28:5e:6e:
         2f:3e:67:b9:cf:fe:cf:3b:56:2f:98:b3:92:06:25:c3:85:56:
         90:d4:05:67:cc:e9:13:23:0a:cf:36:c9:41:24:e2:a7:4c:ad:
         77:2a:2d:c4:f1:18:9a:dc:a3:8e:d8:ec:59:35:a8:ea:79:dd:
         99:a9:b6:f8:29:22:5e:6b:18:a8:6c:fb:b8:cd:9c:b6:40:84:
         4d:0e:80:3f:ae:b4:94:de:2b:62:54:fd:6e:83:56:93:06:56:
         4d:08:78:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----