Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8feef1e-9058-4b34-a7f2-24e5e044fea2.roa
File:                     e8feef1e-9058-4b34-a7f2-24e5e044fea2.roa (raw, json)
Hash identifier:          IuNQJVSrpgPvfiZLe6yT+Ra/Wr69bplDZzF+gWc5aXA=
Subject key identifier:   B5:D0:EF:11:8E:49:64:E9:2A:65:A7:CC:2F:E3:93:E9:6F:AB:59:50
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1BBEA8E4DFAB72B61739D2AC70AD64C4227A36C0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8feef1e-9058-4b34-a7f2-24e5e044fea2.roa
Signing time:             Mon 27 Jul 2026 03:20:39 +0000
ROA not before:           Mon 27 Jul 2026 03:20:39 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d074:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:be:a8:e4:df:ab:72:b6:17:39:d2:ac:70:ad:64:c4:22:7a:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:39 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=3581f00429d38e0cd2cc818955d6424ce6f20196d29e034558c5b83cd4ba4105, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:ae:55:6c:71:af:7f:86:cf:e0:0b:09:ad:
                    35:5a:9c:5b:80:d8:fa:e4:7a:b2:c9:b0:20:0b:86:
                    82:1d:2d:06:49:f1:00:de:8f:89:8f:46:7a:78:3c:
                    61:0a:a9:a5:5b:c2:61:f0:66:73:02:63:77:84:cc:
                    f9:46:6d:4b:fe:0d:b4:21:64:d7:cf:e7:32:d3:5e:
                    49:f3:59:b8:62:65:13:e7:5f:c6:55:17:18:47:9d:
                    8e:ee:7d:ae:93:db:15:ba:01:cc:35:9d:f3:ea:6b:
                    9b:a7:e6:35:7c:13:fb:62:6f:86:1b:4e:42:96:8d:
                    5f:ed:a0:74:d5:4b:e9:d5:50:a8:59:30:e5:62:57:
                    39:e9:f8:77:ce:5b:a0:8f:23:03:85:a0:61:c6:c1:
                    f8:24:a8:4d:b2:5b:ab:48:9c:bd:eb:61:d0:27:5f:
                    7f:1a:f0:4d:c5:c2:43:d0:41:b8:e9:29:de:95:05:
                    58:fb:5e:13:1f:7c:44:cd:95:04:fa:23:05:5b:98:
                    ae:b0:e9:3f:85:89:8c:be:b3:e9:07:92:98:ef:99:
                    b4:28:e7:a3:29:4e:90:82:b9:80:00:6e:1f:7d:a8:
                    27:ab:5a:f7:0d:35:b1:44:00:70:b1:0b:f0:ef:e9:
                    a0:68:57:44:e5:66:a5:fc:7c:41:d6:94:08:8e:a6:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D0:EF:11:8E:49:64:E9:2A:65:A7:CC:2F:E3:93:E9:6F:AB:59:50
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8feef1e-9058-4b34-a7f2-24e5e044fea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:fc:50:1d:b7:61:92:16:41:b9:97:38:8f:ee:04:cb:b9:fb:
         fa:ef:3d:6f:17:4c:8c:d7:b8:47:83:da:f8:80:ea:96:90:94:
         e4:d2:55:6f:c9:3a:c6:d1:2d:13:8d:28:e1:75:ce:46:bb:5c:
         e2:75:94:cf:4b:32:2c:e6:cc:0c:d4:e0:a5:70:ed:65:e5:65:
         7a:30:c1:25:7e:78:20:ad:f3:9f:07:97:34:2a:50:22:fa:d2:
         10:b8:d2:e4:45:9e:f2:6d:55:cc:8e:75:83:37:f7:3b:6c:0c:
         40:82:e8:33:d1:0e:75:df:44:06:f6:b1:b4:14:b4:7a:96:f3:
         db:bf:1b:4e:87:d1:d0:fc:65:80:c7:41:b9:4b:a5:bb:3e:a6:
         b8:51:d5:2e:64:f8:37:fa:6e:06:f2:3d:8c:8a:19:90:73:15:
         14:1f:f5:47:ca:51:9a:b0:9d:02:4a:1d:81:1d:f0:03:86:be:
         87:d8:da:94:1c:52:70:19:77:27:7a:05:fe:be:93:83:e3:8e:
         4f:9d:fe:b4:14:af:bb:f0:a3:b6:f4:9e:a5:f3:3e:dc:31:52:
         37:7a:34:e2:e2:d7:b8:b4:26:10:1e:2b:25:eb:ab:f6:94:4a:
         a4:77:47:52:fb:ed:b4:d1:32:22:9b:14:03:20:6b:58:9f:36:
         ed:8b:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----