Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa
File:                     b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa (raw, json)
Hash identifier:          c7Qh/VzwC+iiLr88gIF3p8avPSok88UUtXjlpEHgR+A=
Subject key identifier:   A6:FE:61:29:7B:89:3D:4A:FE:63:81:E6:A0:ED:BE:89:1E:5D:E3:6F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       426694C16AAD28005E18FEECD36A4E582057CC5F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa
Signing time:             Mon 27 Jul 2026 03:20:38 +0000
ROA not before:           Mon 27 Jul 2026 03:20:38 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d059:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:66:94:c1:6a:ad:28:00:5e:18:fe:ec:d3:6a:4e:58:20:57:cc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:38 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=b7cfb4ca6b4a0754600f0e21b0b0e67c5e3e47158129af222d6f700512e59433, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:00:93:e1:5e:7b:70:41:b8:74:50:56:9e:
                    92:1c:94:53:dd:cf:6a:c8:cc:02:06:e4:a8:b2:0e:
                    34:0d:5c:17:e0:62:de:2c:bf:41:2d:59:1f:8a:4d:
                    3d:20:cd:8b:98:28:ce:bc:a8:3a:f1:f7:13:f9:a8:
                    91:a4:77:9a:89:1d:88:c8:5c:db:66:6d:73:e3:30:
                    be:c2:40:c3:c0:15:ff:b0:a5:bd:a3:cb:7a:b3:e4:
                    b8:9d:09:6d:82:42:87:07:b1:12:ed:fb:3a:8e:4d:
                    67:ae:e3:36:a5:3c:64:87:9b:91:ad:9a:87:e5:3f:
                    80:07:e7:9a:6f:5e:a2:c4:54:65:40:ec:43:1a:a0:
                    30:96:fe:d6:12:19:ae:6e:51:49:9a:7b:5d:93:94:
                    ab:01:8d:6e:b3:56:a5:cc:7c:63:02:61:65:f9:72:
                    0b:4a:c4:9a:a4:b3:93:07:77:95:40:16:86:f9:1a:
                    c2:74:fc:2d:af:2f:a2:f5:5f:50:14:14:82:e4:34:
                    60:27:7c:6f:15:8b:38:51:1a:54:9e:b7:e8:2e:7f:
                    69:41:a2:d0:44:d7:d1:79:18:ac:47:55:8c:18:d7:
                    b4:92:1c:bd:6c:bd:f8:16:c5:1f:a6:fa:0c:68:9b:
                    69:7c:de:76:0c:87:2a:03:9c:8c:12:23:c6:09:d0:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FE:61:29:7B:89:3D:4A:FE:63:81:E6:A0:ED:BE:89:1E:5D:E3:6F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:fe:e6:af:1a:ec:2f:fc:18:15:90:a9:c6:b0:83:26:e6:97:
         dc:a6:ae:30:fe:66:b9:bf:5e:bc:a7:a2:e7:76:4a:f2:73:e4:
         d5:32:a3:8d:14:69:68:92:29:16:33:e1:b8:ba:83:f8:2b:7c:
         76:ca:a5:e9:56:13:9e:b4:87:f2:0d:84:01:a1:d8:04:19:d2:
         fa:37:2f:9a:5f:5d:7f:83:89:48:91:47:3b:bc:64:6e:81:e0:
         61:bb:69:f6:b1:28:7c:8a:9e:1f:82:4a:b7:5f:a3:c0:0e:80:
         1d:a8:d4:fe:a8:db:a4:3c:96:14:d5:ee:38:26:17:84:b8:c1:
         d1:04:24:71:a8:63:3f:46:ce:f7:3e:f5:a9:ed:6a:a2:f4:d7:
         39:61:60:b2:85:22:70:40:b1:58:9b:d8:d5:0b:17:f0:61:44:
         30:f8:e0:f3:b3:1e:51:b8:f9:e5:ab:6b:69:3f:ef:b4:57:39:
         84:30:aa:f6:30:08:85:57:d0:9e:48:5d:5a:88:b7:3f:8d:8a:
         74:af:3e:50:b9:ab:cd:44:85:b3:80:5b:12:34:e8:de:b0:7f:
         7a:f6:73:05:f3:72:8a:df:df:5f:39:c6:13:17:44:09:eb:7f:
         02:95:88:1f:85:eb:91:75:77:6b:7f:90:f9:61:f2:1a:00:ce:
         73:cb:c9:34
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQmaUwWqtKABeGP7s02pOWCBXzF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjcwMzIwMzhaFw0yNjEwMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGI3Y2ZiNGNhNmI0YTA3NTQ2MDBmMGUyMWIwYjBlNjdjNWUzZTQ3MTU4MTI5
YWYyMjJkNmY3MDA1MTJlNTk0MzMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ9DAJPhXntwQbh0UFaekhyUU93PasjMAgbkqLIONA1cF+Bi3iy/QS1ZH4pN
PSDNi5gozryoOvH3E/mokaR3mokdiMhc22Ztc+MwvsJAw8AV/7ClvaPLerPkuJ0J
bYJChwexEu37Oo5NZ67jNqU8ZIebka2ah+U/gAfnmm9eosRUZUDsQxqgMJb+1hIZ
rm5RSZp7XZOUqwGNbrNWpcx8YwJhZflyC0rEmqSzkwd3lUAWhvkawnT8La8vovVf
UBQUguQ0YCd8bxWLOFEaVJ636C5/aUGi0ETX0XkYrEdVjBjXtJIcvWy9+BbFH6b6
DGibaXzedgyHKgOcjBIjxgnQrRsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSm/mEp
e4k9Sv5jgeag7b6JHl3jbzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Yjg5YjNjNWQtZTEyMS00NzY5LTlmM2UtMGQ0YzRmMDc4MGRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Flg
MA0GCSqGSIb3DQEBCwUAA4IBAQDB/uavGuwv/BgVkKnGsIMm5pfcpq4w/ma5v168
p6Lndkryc+TVMqONFGlokikWM+G4uoP4K3x2yqXpVhOetIfyDYQBodgEGdL6Ny+a
X11/g4lIkUc7vGRugeBhu2n2sSh8ip4fgkq3X6PADoAdqNT+qNukPJYU1e44JheE
uMHRBCRxqGM/Rs73PvWp7Wqi9Nc5YWCyhSJwQLFYm9jVCxfwYUQw+ODzsx5RuPnl
q2tpP++0VzmEMKr2MAiFV9CeSF1aiLc/jYp0rz5QuavNRIWzgFsSNOjesH969nMF
83KK399fOcYTF0QJ638ClYgfheuRdXdrf5D5YfIaAM5zy8k0
-----END CERTIFICATE-----