Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dec4a7df-5727-45ab-92fb-7078e26fd54d.roa
File:                     dec4a7df-5727-45ab-92fb-7078e26fd54d.roa (raw, json)
Hash identifier:          RlquVaZFUB3t4fjUq+FJ4mAdioJZn0Wf8CHsIg+F6zE=
Subject key identifier:   4B:42:BF:12:CF:4E:55:F9:BD:99:8D:B3:2F:71:28:52:EF:1D:33:F9
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2FBABA1FE59BA12CDA54C2CC08C7502B9B76FC39
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dec4a7df-5727-45ab-92fb-7078e26fd54d.roa
Signing time:             Fri 20 Feb 2026 01:50:06 +0000
ROA not before:           Fri 20 Feb 2026 01:50:06 +0000
ROA not after:            Thu 21 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d076::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ba:ba:1f:e5:9b:a1:2c:da:54:c2:cc:08:c7:50:2b:9b:76:fc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 20 01:50:06 2026 GMT
            Not After : May 21 23:59:59 2026 GMT
        Subject: serialNumber=623f440a223e285744e4352102d394e7b015aa3ad864597f0c95995a9f42a66e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:67:21:61:1e:c0:c5:00:41:f9:dc:ef:94:
                    9d:68:32:31:84:f7:f5:64:32:fc:11:f6:9a:4c:b2:
                    ed:f8:3f:d5:98:7f:11:fe:8e:47:c1:e5:5b:dd:71:
                    93:5e:e5:23:3d:8e:4c:88:0c:11:3f:98:6f:ea:76:
                    69:a3:a5:2f:3c:95:7f:99:6d:e8:b0:3a:07:65:47:
                    b9:5c:5a:f8:f1:90:ce:83:45:7d:ec:2d:96:8a:33:
                    2c:61:65:8f:47:23:19:60:f6:63:84:19:c8:25:84:
                    ba:d9:94:c4:00:d7:56:97:5f:99:d3:d1:db:e3:c9:
                    e7:da:43:0e:42:4c:86:aa:12:f1:42:7b:d1:a8:e7:
                    57:e9:9f:1d:aa:a7:4e:d4:e6:61:c6:19:38:9b:74:
                    7f:28:d6:6a:39:ff:3d:77:47:eb:e6:eb:58:d6:4e:
                    47:2a:2a:25:5a:39:8c:a6:d3:b1:97:1a:3d:8b:27:
                    bd:74:4b:6a:2d:67:38:f9:e3:ef:1a:80:4a:45:a1:
                    f3:b7:f2:0a:9b:a4:e6:61:57:92:11:ad:59:0b:c5:
                    5a:da:a3:12:13:a1:c6:3f:cf:d3:4c:85:57:5b:56:
                    1d:f8:85:29:b8:02:af:eb:e0:2b:4c:28:85:94:ba:
                    9e:b1:08:30:73:35:d8:45:07:c2:64:33:79:73:b7:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:42:BF:12:CF:4E:55:F9:BD:99:8D:B3:2F:71:28:52:EF:1D:33:F9
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dec4a7df-5727-45ab-92fb-7078e26fd54d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d076::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:22:05:51:12:c9:dc:89:a2:f3:7c:78:31:eb:73:e4:14:91:
         4a:09:af:c8:d6:96:a8:97:fa:15:c3:0c:c3:e4:da:61:a3:7e:
         85:41:73:5c:74:ae:c4:e4:fd:c6:aa:b2:13:c1:82:cb:db:ef:
         68:e2:f9:15:09:70:41:7d:58:f7:23:2a:ad:35:79:73:7b:2f:
         ca:8d:86:fd:da:64:f6:da:df:49:9f:8d:89:f7:64:41:2a:32:
         0f:7a:2a:c5:b9:6c:f8:ca:d5:7f:49:ef:76:7b:26:b7:01:d8:
         a2:ee:3c:76:20:8e:74:20:67:93:73:46:da:ad:7e:a3:82:87:
         17:a7:9d:c5:a9:4e:0d:fa:6c:0b:ce:2f:92:00:88:2f:12:90:
         1c:67:b4:5a:d5:6f:de:b6:d8:90:50:e2:a9:9b:a6:ad:a8:56:
         2b:00:c3:c1:b1:6e:ff:a0:e6:16:36:3b:d3:ed:ba:ba:32:5f:
         09:19:6f:88:c2:df:ec:97:0e:7b:06:59:43:0e:fb:e8:bc:d3:
         2d:0f:66:cf:c6:10:95:91:0c:2a:99:d8:17:d9:c0:1c:7d:81:
         31:fd:3d:4b:a7:90:c9:ca:ba:2c:47:f0:74:f2:df:2e:0f:03:
         9d:34:fc:f3:ac:06:a2:cd:8c:51:df:88:83:32:5c:bb:9a:8a:
         f1:d0:34:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----