Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
File:                     f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa (raw, json)
Hash identifier:          /8oBpWpny6mth9to7Px/OJY5ex5D7mE+j1BN0BVGfwo=
Subject key identifier:   6A:36:C6:B1:D7:4D:93:07:B3:09:49:ED:C6:25:DC:54:0B:E4:8E:E7
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3021297E13F3B5B53EEA35FECC7472AECE40B22A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
Signing time:             Sat 28 Feb 2026 05:51:28 +0000
ROA not before:           Sat 28 Feb 2026 05:51:28 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:5080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:21:29:7e:13:f3:b5:b5:3e:ea:35:fe:cc:74:72:ae:ce:40:b2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 05:51:28 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=b27f0ec76556fbe47c490f930e14482e27631704684e3ae02c36ed0ee8423adb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:13:51:cb:96:18:87:ea:3c:bb:15:b2:bb:0f:
                    59:4f:4d:46:3d:90:61:14:3f:87:d2:2b:47:cd:f8:
                    f6:69:3c:3c:8d:11:09:8c:55:c7:96:2b:2a:63:4e:
                    05:56:b6:9b:2f:cc:58:d0:b1:6e:70:11:b5:1d:af:
                    3d:a6:1c:8f:e3:28:0c:bf:f0:b9:47:c9:60:50:5d:
                    5f:31:48:f1:da:89:f5:21:1b:a5:e3:59:c0:4e:2c:
                    92:2b:9b:cf:0c:ea:e8:ca:7a:5a:62:01:e1:8b:61:
                    e9:ca:a6:bc:82:f5:04:72:40:f4:7c:3f:26:81:84:
                    43:76:24:f6:3b:f9:ed:15:2c:e3:36:82:2c:5f:77:
                    27:35:84:e9:c1:71:e7:7d:ac:cc:b2:7e:3a:e2:18:
                    fe:db:8d:37:96:39:eb:8e:9a:9e:e0:b2:ba:7d:3b:
                    a5:5b:7f:b6:cc:09:a5:20:4e:ee:bc:71:97:15:8e:
                    94:67:28:8b:3e:52:1e:31:9e:70:90:17:77:be:4a:
                    e2:aa:d9:4b:cc:5d:5c:b6:12:fb:88:91:fb:72:42:
                    e9:a0:4a:76:ae:84:18:22:13:03:02:7b:ba:39:b8:
                    09:1c:5e:2e:82:08:f2:10:4d:b8:8f:68:dc:58:e0:
                    89:5d:b3:7b:ac:af:ba:f9:a1:ba:49:2c:e6:e9:2b:
                    95:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:36:C6:B1:D7:4D:93:07:B3:09:49:ED:C6:25:DC:54:0B:E4:8E:E7
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:5080::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:d9:86:02:4b:fd:64:93:04:2d:de:fe:4d:88:72:1f:aa:b4:
         38:c5:9b:88:93:42:0a:fb:1b:81:57:ff:34:1b:e1:5e:7e:71:
         d4:66:6e:23:16:10:d0:04:ec:3b:ac:6d:19:87:0c:4a:0f:d3:
         85:9a:6b:a4:09:58:1b:78:a4:94:3f:ea:90:11:66:33:e9:ca:
         4b:29:b8:ef:99:16:45:d4:bc:83:bb:54:20:ed:6d:91:54:02:
         6f:4a:6e:a8:25:ee:01:74:56:ff:e5:37:a9:0e:ee:72:98:a6:
         a7:62:a7:96:48:d8:9a:58:57:c8:f9:0e:de:08:56:b2:ca:8b:
         a5:f4:5d:59:b7:cd:4a:f6:a9:24:41:d8:7b:b4:54:b7:17:82:
         d2:a0:3d:db:92:66:78:e3:60:f1:1b:9f:c5:3d:2f:85:d8:d4:
         5f:c1:0a:82:7e:14:e0:e0:7e:54:2b:49:7c:9f:73:99:1e:09:
         8a:86:c3:02:a4:f9:d8:76:c4:43:3e:60:49:d7:76:5b:2a:32:
         b9:ca:cd:82:a7:af:06:37:77:12:9f:b4:10:e6:34:87:7c:4e:
         58:f8:d9:9c:0f:b8:28:0d:2e:fa:80:c4:a0:ae:3c:93:57:93:
         b6:4c:36:4f:69:3d:8d:40:e9:48:0e:50:c0:0e:4d:f2:25:83:
         2e:11:d6:5d
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUMCEpfhPztbU+6jX+zHRyrs5AsiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNTUxMjhaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQGIyN2YwZWM3NjU1NmZiZTQ3YzQ5MGY5MzBlMTQ0ODJlMjc2MzE3MDQ2ODRl
M2FlMDJjMzZlZDBlZTg0MjNhZGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIYTUcuWGIfqPLsVsrsPWU9NRj2QYRQ/h9IrR8349mk8PI0RCYxVx5YrKmNO
BVa2my/MWNCxbnARtR2vPaYcj+MoDL/wuUfJYFBdXzFI8dqJ9SEbpeNZwE4skiub
zwzq6Mp6WmIB4Yth6cqmvIL1BHJA9Hw/JoGEQ3Yk9jv57RUs4zaCLF93JzWE6cFx
532szLJ+OuIY/tuNN5Y5646anuCyun07pVt/tswJpSBO7rxxlxWOlGcoiz5SHjGe
cJAXd75K4qrZS8xdXLYS+4iR+3JC6aBKdq6EGCITAwJ7ujm4CRxeLoII8hBNuI9o
3FjgiV2ze6yvuvmhukks5ukrlVsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRqNsax
102TB7MJSe3GJdxUC+SO5zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjE5NTFiZGEtNTljZC00YjExLWI3YTEtMTliMWY1ZDMyMTE2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAWdmGAkv9ZJMELd7+TYhyH6q0OMWbiJNCCvsb
gVf/NBvhXn5x1GZuIxYQ0ATsO6xtGYcMSg/ThZprpAlYG3iklD/qkBFmM+nKSym4
75kWRdS8g7tUIO1tkVQCb0puqCXuAXRW/+U3qQ7ucpimp2KnlkjYmlhXyPkO3ghW
ssqLpfRdWbfNSvapJEHYe7RUtxeC0qA925JmeONg8RufxT0vhdjUX8EKgn4U4OB+
VCtJfJ9zmR4JiobDAqT52HbEQz5gSdd2WyoyucrNgqevBjd3Ep+0EOY0h3xOWPjZ
nA+4KA0u+oDEoK48k1eTtkw2T2k9jUDpSA5QwA5N8iWDLhHWXQ==
-----END CERTIFICATE-----