Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e348b574-c707-42a9-9b58-f3215857ae07.roa
File:                     e348b574-c707-42a9-9b58-f3215857ae07.roa (raw, json)
Hash identifier:          DJEfLi97plpS2gxPPD5RmY1kmIfItRdPxPk0pMvE9j4=
Subject key identifier:   D7:C2:0F:04:A6:3D:F0:44:9F:7F:DD:30:9B:A2:93:01:E4:87:2A:C5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       74501E0E5A30C0988032AF3C65AFE90AFB1B4225
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e348b574-c707-42a9-9b58-f3215857ae07.roa
Signing time:             Tue 19 May 2026 04:50:51 +0000
ROA not before:           Tue 19 May 2026 04:50:51 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:a080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:50:1e:0e:5a:30:c0:98:80:32:af:3c:65:af:e9:0a:fb:1b:42:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 04:50:51 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=9b52bf427ba2880ba7d84916b45ce5915b05023478037c8c7fc83bb224355b26, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fe:d7:12:6a:c5:54:40:b4:db:a6:37:a5:ba:
                    1b:89:3f:25:be:32:47:fd:93:3f:30:88:58:7f:af:
                    cd:32:85:0b:1c:10:9e:c3:d6:37:6d:bf:f1:98:d2:
                    a8:f5:88:3a:df:97:fe:58:9b:0e:d4:5a:8a:5d:a9:
                    cc:df:99:fd:e9:72:44:a0:f3:4b:18:51:81:fa:32:
                    a2:b8:f0:16:1b:9e:fb:ab:43:80:6e:37:9c:63:1f:
                    8d:70:a0:95:6f:59:b8:8f:19:a4:2c:c6:d0:d6:6b:
                    f3:23:97:dd:2a:9e:f3:60:96:6c:d9:d2:18:9e:cb:
                    f7:34:dd:e2:55:80:c0:e4:b7:9c:79:52:3d:7e:2c:
                    27:68:63:d5:db:c7:56:38:86:48:f3:23:51:1f:66:
                    35:d5:7a:b8:87:66:2c:2a:02:b2:ce:c2:07:0c:bb:
                    80:a1:60:54:59:92:cf:05:aa:9d:c0:97:86:bd:2f:
                    ff:18:02:c2:0b:80:61:3e:cc:ee:e1:81:f3:17:64:
                    d1:de:64:72:7c:38:0c:73:ca:66:63:9f:4b:6a:0f:
                    38:06:e3:9f:4b:34:cb:20:c7:2f:7a:42:72:84:4a:
                    f0:02:1a:a0:cf:20:ce:51:f8:31:68:a0:2b:2e:b6:
                    05:54:fe:28:db:96:92:dd:7d:08:34:85:f2:b6:5d:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C2:0F:04:A6:3D:F0:44:9F:7F:DD:30:9B:A2:93:01:E4:87:2A:C5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e348b574-c707-42a9-9b58-f3215857ae07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:a080::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:bd:9f:84:56:7d:2f:d3:79:fa:31:ad:58:e3:fd:bb:49:6a:
         f9:63:e1:95:8b:85:88:2d:52:bb:fb:35:25:5c:74:aa:94:17:
         02:2c:19:a5:98:c0:83:27:15:c7:31:7f:0c:a7:4f:a8:0f:73:
         64:8d:c2:ea:d0:67:fe:cc:6d:d8:e9:aa:38:bf:49:f5:69:88:
         ee:a0:87:03:47:ef:18:7a:35:d9:87:36:2c:d2:df:59:0e:2a:
         40:a3:39:4c:43:5c:43:94:8b:25:9e:7e:a0:3d:b4:09:ab:71:
         f3:58:77:43:09:11:7f:08:68:76:ba:ab:16:70:0e:fe:69:ce:
         13:7d:1e:48:99:35:a1:7b:77:1e:2c:7e:bf:24:77:e7:8c:2e:
         b9:48:2a:ad:c7:23:b1:48:54:69:34:39:40:6c:90:a4:0b:c6:
         20:1a:bf:a4:b7:7b:ef:97:bc:f1:01:3c:55:95:6c:39:89:6e:
         23:b1:3e:78:c4:69:96:c7:62:f1:ad:22:28:55:91:02:e9:d3:
         e8:fe:8b:57:fb:11:f3:ff:7d:2d:ff:a0:80:24:35:cd:af:1e:
         a3:78:15:f5:9c:01:96:02:8a:93:51:c4:7c:19:4d:c3:75:1a:
         83:3a:04:d3:a0:6a:49:47:e8:c7:3d:8d:18:4b:3f:75:f7:7b:
         42:5e:e2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----