Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0215bef-6cb0-46f3-9f81-10739fae3dd8.roa
File:                     e0215bef-6cb0-46f3-9f81-10739fae3dd8.roa (raw, json)
Hash identifier:          3VmzRq9zYI8u+ILLEwxiscBiA79a/RUkWtNF2XKsvzc=
Subject key identifier:   65:71:C3:FA:E8:04:FF:2E:48:59:CD:B3:ED:21:11:1D:D9:40:3D:23
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       56DB4A3DC6A003556D49DC01EFBCD3A0309616EF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0215bef-6cb0-46f3-9f81-10739fae3dd8.roa
Signing time:             Sun 31 May 2026 01:10:08 +0000
ROA not before:           Sun 31 May 2026 01:10:08 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:db:4a:3d:c6:a0:03:55:6d:49:dc:01:ef:bc:d3:a0:30:96:16:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 31 01:10:08 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=52e6d6870d562d64fe0f38a600f8160c81fc59e2471535e79e7632e474a899f2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f5:52:e4:94:3a:4e:75:a9:12:c4:8b:55:fc:
                    35:bb:98:c3:c3:44:75:90:1e:c1:e5:5e:0b:15:74:
                    d8:e6:b7:ed:12:84:61:65:af:e0:7e:d9:46:b0:cd:
                    2c:45:ad:c7:bf:33:70:eb:31:fc:36:92:10:9d:37:
                    f9:df:d4:d5:22:7e:d0:76:0e:72:fe:3b:17:2a:66:
                    b9:94:ce:ee:79:11:ce:57:89:9b:57:52:0f:45:65:
                    f5:40:ec:01:47:9d:e2:a7:55:a5:1a:c8:e3:40:ff:
                    2e:5a:a3:a1:ce:d3:a9:41:68:7b:76:1a:8c:86:ca:
                    dd:60:41:80:02:fc:46:00:8a:8d:9c:8a:69:eb:3d:
                    74:88:8f:c4:47:d6:fe:e6:01:28:55:c9:0a:87:23:
                    f2:aa:46:87:ff:fa:da:e9:1c:7a:2c:40:81:91:d1:
                    66:36:9c:5a:ec:70:54:80:97:26:83:71:e5:2b:34:
                    10:c1:2f:2a:52:db:c7:c1:0e:db:10:c8:b1:60:d2:
                    5c:1a:93:84:35:f3:48:79:4b:4e:96:bc:96:8e:fb:
                    98:a9:82:15:9b:2b:58:9d:dd:9c:ed:4a:ca:74:2c:
                    37:8b:7a:96:92:b6:6b:e5:c2:3a:98:7b:87:a0:1f:
                    b9:7f:6b:6e:02:12:02:02:2e:19:8c:92:2a:43:c9:
                    c5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:71:C3:FA:E8:04:FF:2E:48:59:CD:B3:ED:21:11:1D:D9:40:3D:23
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0215bef-6cb0-46f3-9f81-10739fae3dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:9a:46:56:f2:24:23:c2:5e:15:7d:8a:34:9f:4b:cd:78:22:
         29:f0:2e:52:a2:37:0f:35:d8:97:c4:ff:9d:3f:cd:56:fb:c7:
         cb:58:c2:3f:1a:dd:c8:3f:14:0b:47:4c:1d:03:a5:6a:b2:d5:
         6e:96:36:d5:90:97:17:5e:c2:f7:3a:2d:fc:95:72:d8:85:27:
         b1:96:46:0c:ea:4f:e0:39:89:e5:c1:ba:4c:16:1a:2a:2e:68:
         b8:81:00:a4:7d:28:12:91:8d:fa:d4:40:8e:a8:c4:7e:80:fe:
         1a:9e:02:d6:56:d7:de:d6:39:2f:fb:14:5b:7e:7e:20:3f:d8:
         e6:9a:67:c3:53:cf:14:d6:30:f6:7c:7e:ee:33:3d:d6:d7:78:
         cf:bb:6b:03:83:96:f2:ec:cd:a5:c0:8b:e0:e0:70:cb:3a:a2:
         ba:e4:29:4b:1d:09:4c:0b:47:7c:c9:c4:06:b8:e1:f0:f5:33:
         85:50:06:c7:d6:93:7a:fa:9f:0a:71:42:8c:65:3b:4b:ee:bc:
         b4:59:b3:9f:88:31:17:27:e6:af:19:0b:13:ac:88:35:fd:e1:
         bc:6c:ad:53:4c:f8:8c:83:37:e6:74:96:11:77:40:4f:e5:36:
         df:a0:d0:9f:56:8e:87:57:e8:ed:2a:4d:5f:44:87:8c:81:5d:
         75:51:7d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----