Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa
File:                     d4a512a3-4257-431f-b201-8d747948cebb.roa (raw, json)
Hash identifier:          9QLJEaGd7JOlHEkhJnD/FcZNUaxKropuV/vX9s7sYI4=
Subject key identifier:   0E:C4:F9:C6:7D:28:98:26:D8:A1:07:1C:34:D6:DC:23:BC:9B:89:F8
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       12F55D63442827F29AD5F33C3A92D541838D550E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa
Signing time:             Tue 19 May 2026 05:00:56 +0000
ROA not before:           Tue 19 May 2026 05:00:56 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:c0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f5:5d:63:44:28:27:f2:9a:d5:f3:3c:3a:92:d5:41:83:8d:55:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 05:00:56 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=5bd06f2f1c57efb2406e2861fe09e07662e62a991bdae3aa8dd2f85526607dfb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:14:f5:e8:e6:39:35:01:ae:f5:63:13:ab:
                    9e:96:0e:7b:ac:ca:c6:f3:a3:47:a6:bb:8f:f9:60:
                    18:76:44:91:57:36:83:da:76:66:71:81:5c:45:98:
                    46:3f:fc:65:2a:3d:ae:bc:6b:11:74:ec:0f:c7:3f:
                    84:2b:96:c5:5a:75:05:bf:b5:a2:d7:30:df:6f:f6:
                    72:42:e3:42:1b:5f:5c:ff:a4:6c:61:e8:82:97:c8:
                    b9:8e:7a:55:95:00:aa:5e:49:57:5f:3c:57:84:40:
                    0d:17:f0:0b:cd:52:c2:02:78:06:df:83:17:be:d8:
                    39:1d:3b:f5:89:b2:92:c2:df:34:10:f7:97:f5:f8:
                    61:26:1e:9c:f0:96:ec:39:3d:44:46:88:6a:13:ce:
                    11:03:cb:02:4b:af:cf:3d:db:11:ba:54:f5:3b:5c:
                    a8:ed:fd:34:68:ba:7f:28:ce:ca:a9:9f:59:82:75:
                    6f:3e:38:b0:9f:1c:1d:22:b7:fe:cf:eb:d9:84:52:
                    73:7f:43:9c:24:57:cd:1d:e3:3f:cf:e0:fd:1c:15:
                    fb:3f:a4:54:6d:23:5f:22:47:27:5b:b0:4c:79:6a:
                    8c:4b:7f:c3:59:bc:ac:c7:eb:49:d0:d5:6f:21:e4:
                    b7:a8:b2:df:ea:63:d1:56:42:96:64:c8:05:00:2a:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C4:F9:C6:7D:28:98:26:D8:A1:07:1C:34:D6:DC:23:BC:9B:89:F8
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:c0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:93:26:83:dd:e5:87:fa:73:c1:b8:d1:89:d9:b9:28:a6:88:
         87:18:f6:7d:d5:0d:86:8b:b8:2b:a8:ca:ea:31:05:82:a5:f0:
         4d:f1:2f:de:3a:e7:74:04:02:5f:77:1c:87:99:f1:c8:07:b4:
         21:49:c1:ab:bb:58:bd:6d:5b:16:09:14:ea:4d:f3:59:61:ad:
         0b:79:87:b7:fa:f1:51:4e:51:f4:8f:00:b0:7b:e8:86:f4:03:
         0d:89:3a:75:98:6c:00:b7:7b:60:c2:6c:ef:55:43:f5:d2:15:
         77:25:bd:0e:ae:51:52:e5:7f:d7:29:3a:45:57:50:b8:ef:2d:
         4d:d3:c3:a0:88:94:aa:a2:cc:11:6a:5b:6d:4d:85:b1:2a:b4:
         d2:cf:7c:0e:55:58:c9:4e:d8:7f:e6:7f:48:7f:6d:66:2d:06:
         4e:1b:a5:ec:6c:f6:f6:64:6b:d7:f0:d6:3a:a1:00:6b:c7:cf:
         50:4d:cf:a9:e7:bb:98:af:44:52:c2:fa:db:44:e1:10:35:46:
         48:74:d5:c6:58:7e:4b:3f:a0:ac:b7:f3:01:5a:3c:0c:4d:da:
         32:ee:62:32:42:32:96:f4:33:26:ca:3d:38:57:4f:dc:42:82:
         23:3b:0c:97:1c:43:c9:dc:23:73:d3:5d:4b:66:d9:aa:86:98:
         72:98:f2:96
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUEvVdY0QoJ/Ka1fM8OpLVQYONVQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNTAwNTZaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDViZDA2ZjJmMWM1N2VmYjI0MDZlMjg2MWZlMDllMDc2NjJlNjJhOTkxYmRh
ZTNhYThkZDJmODU1MjY2MDdkZmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKH3FPXo5jk1Aa71YxOrnpYOe6zKxvOjR6a7j/lgGHZEkVc2g9p2ZnGBXEWY
Rj/8ZSo9rrxrEXTsD8c/hCuWxVp1Bb+1otcw32/2ckLjQhtfXP+kbGHogpfIuY56
VZUAql5JV188V4RADRfwC81SwgJ4Bt+DF77YOR079YmyksLfNBD3l/X4YSYenPCW
7Dk9REaIahPOEQPLAkuvzz3bEbpU9TtcqO39NGi6fyjOyqmfWYJ1bz44sJ8cHSK3
/s/r2YRSc39DnCRXzR3jP8/g/RwV+z+kVG0jXyJHJ1uwTHlqjEt/w1m8rMfrSdDV
byHkt6iy3+pj0VZClmTIBQAqKMcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQOxPnG
fSiYJtihBxw01twjvJuJ+DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDRhNTEyYTMtNDI1Ny00MzFmLWIyMDEtOGQ3NDc5NDhjZWJiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ADA
wDANBgkqhkiG9w0BAQsFAAOCAQEAqpMmg93lh/pzwbjRidm5KKaIhxj2fdUNhou4
K6jK6jEFgqXwTfEv3jrndAQCX3cch5nxyAe0IUnBq7tYvW1bFgkU6k3zWWGtC3mH
t/rxUU5R9I8AsHvohvQDDYk6dZhsALd7YMJs71VD9dIVdyW9Dq5RUuV/1yk6RVdQ
uO8tTdPDoIiUqqLMEWpbbU2FsSq00s98DlVYyU7Yf+Z/SH9tZi0GThul7Gz29mRr
1/DWOqEAa8fPUE3Pqee7mK9EUsL620ThEDVGSHTVxlh+Sz+grLfzAVo8DE3aMu5i
MkIylvQzJso9OFdP3EKCIzsMlxxDydwjc9NdS2bZqoaYcpjylg==
-----END CERTIFICATE-----