Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b6c8e654-5d9f-4dfa-91f4-11949c5397e3.roa
File:                     b6c8e654-5d9f-4dfa-91f4-11949c5397e3.roa (raw, json)
Hash identifier:          Bl5hLqYgGfwn0L+JBTdD92LK3ieQK9SuxLyAZGIr2Nk=
Subject key identifier:   B6:CD:25:39:C2:B8:64:67:51:4C:54:AD:F2:99:2E:D4:18:60:8A:15
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       24688C1C090651D69FFE55B705A938DFEE378E2F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b6c8e654-5d9f-4dfa-91f4-11949c5397e3.roa
Signing time:             Sun 31 May 2026 00:30:19 +0000
ROA not before:           Sun 31 May 2026 00:30:19 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d:9040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:68:8c:1c:09:06:51:d6:9f:fe:55:b7:05:a9:38:df:ee:37:8e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 31 00:30:19 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=6da509e1e9df703886311c523626008aa9f0c004b2f435485808f77c49a48453, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:88:77:da:44:ef:73:9b:fb:1d:a4:82:a9:
                    64:80:fe:c2:35:6d:8a:b7:9b:dd:f6:87:52:b3:eb:
                    22:8f:6c:ce:f1:2b:c7:45:36:57:8d:fd:f0:6a:2a:
                    3e:cb:6f:29:91:73:50:ab:9b:a9:f1:9a:33:18:d0:
                    8d:ff:41:36:87:b3:a1:b6:21:b6:d5:de:62:b6:2b:
                    f3:5f:16:38:de:61:88:68:67:40:28:d0:7d:48:ca:
                    e3:0a:1d:59:1b:10:e5:80:9c:33:86:b6:66:d1:01:
                    ec:82:ba:6c:9d:47:94:ba:64:35:fe:12:72:98:25:
                    e0:a3:21:67:d7:a1:62:dc:22:c2:4f:56:17:18:d0:
                    7a:a9:e9:63:a3:4f:5e:3d:3f:c5:f2:6d:03:f5:0a:
                    e2:af:97:bb:98:b7:f1:9f:3f:10:5a:e8:a5:66:4f:
                    f4:34:98:1c:5d:3e:13:97:09:52:96:f2:ba:a9:a6:
                    2b:ae:2e:e5:97:85:a4:04:90:e6:1c:95:3f:3f:e6:
                    77:1d:6e:09:49:90:5d:cd:69:59:96:8f:a8:b4:5a:
                    70:65:16:e1:b4:ed:e2:83:96:f4:b9:d7:cb:04:ed:
                    1a:76:29:fb:ec:7d:97:d4:47:f3:86:c8:a5:8b:a0:
                    76:d0:6d:3f:03:03:53:d0:86:bc:84:24:31:02:ca:
                    68:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CD:25:39:C2:B8:64:67:51:4C:54:AD:F2:99:2E:D4:18:60:8A:15
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b6c8e654-5d9f-4dfa-91f4-11949c5397e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d:9040::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:70:28:20:07:60:8e:14:2d:92:65:4d:14:5a:f9:b5:2c:dc:
         96:7a:d6:1e:55:aa:a1:3d:9e:f5:ab:de:0b:b5:cd:c3:3c:d9:
         f5:68:cb:dc:b8:7f:ec:80:78:5b:37:2e:37:f1:4e:54:d6:08:
         13:e7:ae:35:77:e3:56:a9:e9:fd:bf:56:fc:82:cd:12:8f:90:
         82:22:46:4b:b9:af:0d:26:de:ae:ea:23:19:ca:64:13:68:07:
         79:0b:81:5f:c4:84:ac:26:20:28:36:3c:7d:6d:3f:2b:4c:c1:
         cb:b6:d1:ea:b0:af:82:a3:c4:f1:95:0f:96:76:9c:f7:9c:0c:
         e4:24:ff:55:9a:3e:ff:0d:06:2d:c3:de:0e:92:1e:b5:34:15:
         d7:68:f9:91:aa:e4:bc:f8:7a:34:8c:1e:ed:73:f9:cd:c6:5a:
         3b:12:9c:d5:47:d7:3d:76:d8:d7:6a:e5:d1:c9:e5:e8:80:f7:
         81:95:16:7f:fb:88:7e:bc:7a:9c:04:82:13:eb:d4:f1:bc:77:
         51:bd:20:68:11:24:25:7c:b9:66:79:f2:c1:35:34:0b:b2:65:
         13:f6:7e:ab:10:25:e8:62:78:9e:3b:9d:06:fc:44:cc:15:f7:
         11:61:1e:42:36:6a:1e:ff:d3:09:25:f6:29:1b:69:23:f2:6c:
         79:61:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----