Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d62aaac2-f54a-4bc2-8155-22367e855165.roa
File:                     d62aaac2-f54a-4bc2-8155-22367e855165.roa (raw, json)
Hash identifier:          AXo14SsXU8kEzo+JdvNsLurj7XDO0dr1VjdfYervhbA=
Subject key identifier:   61:8D:42:78:30:44:E4:F1:4F:2C:9E:D3:AE:95:72:BA:24:61:F7:37
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0FD0B307DA6425AB9E2F528C3F50A0B6959AF753
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d62aaac2-f54a-4bc2-8155-22367e855165.roa
Signing time:             Tue 19 May 2026 05:30:41 +0000
ROA not before:           Tue 19 May 2026 05:30:41 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d032:b000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d0:b3:07:da:64:25:ab:9e:2f:52:8c:3f:50:a0:b6:95:9a:f7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 05:30:41 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=e1785bffadb7ec0278236156718a8d099007824430b4a2bfb01e7620e3dd7591, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:9b:b8:0c:dc:7a:0e:30:13:c9:fa:31:f5:
                    87:24:75:07:fe:0e:5d:62:4f:42:2b:8a:d3:5b:e6:
                    e4:26:37:70:f5:b9:b8:af:9a:7d:73:ab:1f:9d:77:
                    67:04:28:af:1b:9d:98:bb:ca:a2:89:09:f4:16:3d:
                    63:75:ad:38:d9:d4:67:f8:7c:66:1a:b3:73:86:4c:
                    60:74:7f:bc:4d:3b:07:07:c6:ca:e2:73:6e:d1:7d:
                    79:03:0e:61:c2:cf:fd:58:0a:66:46:61:81:32:84:
                    6f:d4:cf:2c:fb:08:5d:78:cb:1d:5a:15:41:2f:03:
                    6a:bb:2e:7b:99:4a:f0:79:88:17:64:d6:0f:79:7c:
                    c8:b5:ff:5a:1a:51:1f:69:c9:93:26:ac:ec:06:cf:
                    72:3c:f8:70:ab:77:7d:e9:40:e5:a3:ad:fc:71:01:
                    58:34:b5:df:b9:9a:d2:bf:48:24:cf:58:3e:ed:16:
                    fd:94:7a:7d:e2:93:cf:2e:29:69:eb:f4:22:9d:15:
                    a0:49:37:40:78:b3:91:b4:14:3b:7d:37:47:b0:f4:
                    c5:6f:0f:3f:e2:23:cf:0a:71:87:c2:e9:49:c7:26:
                    63:64:3d:19:08:7b:38:a2:22:75:cb:19:fc:c2:bf:
                    73:37:f9:4d:df:8a:0c:bf:3f:6e:a3:66:f2:60:6b:
                    6d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8D:42:78:30:44:E4:F1:4F:2C:9E:D3:AE:95:72:BA:24:61:F7:37
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d62aaac2-f54a-4bc2-8155-22367e855165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d032:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:0a:e2:4b:e1:a5:c7:da:84:7d:09:a8:49:59:08:99:7f:03:
         32:83:55:66:6d:1f:10:3e:a6:ef:ba:72:6a:c9:e1:ed:d7:46:
         53:d9:b0:d7:0a:28:3c:d4:cb:40:d6:15:20:e1:81:2c:20:4b:
         73:cc:7b:96:64:af:56:6b:35:56:e3:3b:cf:8c:d0:41:1f:f5:
         d1:b6:f9:3c:26:79:18:66:d4:99:95:c3:a2:13:49:18:f6:9f:
         7b:33:3d:3b:55:b3:62:b2:fd:74:eb:88:45:bd:6a:ab:ac:63:
         42:9e:16:cb:29:78:f3:e1:b4:f3:7b:0c:93:56:59:5e:45:33:
         c4:2d:89:b6:6f:47:ea:dd:94:d0:aa:00:49:dd:ad:e2:d9:70:
         8d:62:df:ef:64:76:17:c2:82:01:8f:71:db:a5:f2:0e:67:6d:
         6e:13:72:1f:8f:55:52:a8:fe:78:8c:59:de:c1:ce:19:18:ec:
         c2:9c:58:9d:d7:c2:0e:21:1f:2b:c6:02:47:05:49:05:f5:95:
         3d:0c:3d:2d:0e:b1:77:a5:e6:13:a8:e0:4b:cf:30:bb:59:1b:
         78:d4:95:0e:cb:8d:76:fb:00:b0:98:73:6e:81:15:8f:80:a5:
         d1:64:98:0c:8e:12:9a:c4:df:3c:d0:27:a4:8d:bf:ec:2f:55:
         7e:e7:aa:51
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUD9CzB9pkJaueL1KMP1CgtpWa91MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNTMwNDFaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGUxNzg1YmZmYWRiN2VjMDI3ODIzNjE1NjcxOGE4ZDA5OTAwNzgyNDQzMGI0
YTJiZmIwMWU3NjIwZTNkZDc1OTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALxOm7gM3HoOMBPJ+jH1hyR1B/4OXWJPQiuK01vm5CY3cPW5uK+afXOrH513
ZwQorxudmLvKookJ9BY9Y3WtONnUZ/h8Zhqzc4ZMYHR/vE07BwfGyuJzbtF9eQMO
YcLP/VgKZkZhgTKEb9TPLPsIXXjLHVoVQS8Darsue5lK8HmIF2TWD3l8yLX/WhpR
H2nJkyas7AbPcjz4cKt3felA5aOt/HEBWDS137ma0r9IJM9YPu0W/ZR6feKTzy4p
aev0Ip0VoEk3QHizkbQUO303R7D0xW8PP+Ijzwpxh8LpSccmY2Q9GQh7OKIidcsZ
/MK/czf5Td+KDL8/bqNm8mBrbZUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRhjUJ4
METk8U8sntOulXK6JGH3NzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDYyYWFhYzItZjU0YS00YmMyLTgxNTUtMjIzNjdlODU1MTY1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DKw
MA0GCSqGSIb3DQEBCwUAA4IBAQCMCuJL4aXH2oR9CahJWQiZfwMyg1VmbR8QPqbv
unJqyeHt10ZT2bDXCig81MtA1hUg4YEsIEtzzHuWZK9WazVW4zvPjNBBH/XRtvk8
JnkYZtSZlcOiE0kY9p97Mz07VbNisv1064hFvWqrrGNCnhbLKXjz4bTzewyTVlle
RTPELYm2b0fq3ZTQqgBJ3a3i2XCNYt/vZHYXwoIBj3HbpfIOZ21uE3Ifj1VSqP54
jFnewc4ZGOzCnFid18IOIR8rxgJHBUkF9ZU9DD0tDrF3peYTqOBLzzC7WRt41JUO
y412+wCwmHNugRWPgKXRZJgMjhKaxN880Cekjb/sL1V+56pR
-----END CERTIFICATE-----