Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f901e84a-60ec-41d5-8522-562de1706ecd.roa
File:                     f901e84a-60ec-41d5-8522-562de1706ecd.roa (raw, json)
Hash identifier:          DLmsfrKA4SYKsoqg/kmdzxXkj8BmctTL8yoPyBQ3scw=
Subject key identifier:   5E:77:C1:83:DE:9A:4E:E9:05:7D:B3:2A:4F:79:8D:73:F5:40:20:2C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2C64430F27C483FAE365A3AE388E9108DF435A96
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f901e84a-60ec-41d5-8522-562de1706ecd.roa
Signing time:             Sun 31 May 2026 00:30:17 +0000
ROA not before:           Sun 31 May 2026 00:30:17 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d05a:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:64:43:0f:27:c4:83:fa:e3:65:a3:ae:38:8e:91:08:df:43:5a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 31 00:30:17 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=64e658ba9492658aec751052b6b6137b963806bf3b69f64743a30a8dd8ed4baf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:4c:52:51:49:8f:3f:c5:1d:a4:20:8d:02:
                    6c:97:ea:fe:30:31:23:0f:fd:d4:f3:9a:7b:9c:13:
                    6c:a7:cb:0c:6c:61:ad:2c:4b:86:f6:fe:10:79:56:
                    d3:ff:f1:85:f5:98:77:84:3f:a4:78:41:a3:82:f9:
                    04:30:0a:b5:e6:91:6c:21:2d:51:bb:e2:23:de:39:
                    ea:85:b3:82:f2:27:da:30:6f:91:0d:4d:e5:c2:fd:
                    75:a6:bf:90:b4:03:87:b5:4e:8b:29:b8:e6:65:8b:
                    d2:24:07:1a:21:26:41:69:6b:6d:15:52:e3:c9:c0:
                    95:3d:2f:2e:ae:6a:31:c0:fd:39:e3:67:42:2d:09:
                    1d:a5:e9:dd:28:9c:4f:ab:a0:23:c8:a7:80:f7:a5:
                    8d:4c:8a:39:99:64:14:7b:2b:54:78:fa:eb:84:7a:
                    be:ce:78:cf:0e:00:8a:eb:16:46:0c:6c:23:e0:70:
                    a9:b2:86:de:8d:7b:22:9b:ee:a7:4c:16:cd:4d:c9:
                    87:b0:4f:ed:3f:e2:fd:06:93:05:27:07:5e:8a:7f:
                    08:ea:93:48:f1:35:b2:90:0e:8e:35:0b:bf:62:fe:
                    b9:1c:b7:e6:cb:90:11:70:18:c2:25:9b:4d:ff:da:
                    5b:b8:f8:c4:a2:a7:6d:d9:99:72:8b:c5:30:4b:3e:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:77:C1:83:DE:9A:4E:E9:05:7D:B3:2A:4F:79:8D:73:F5:40:20:2C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f901e84a-60ec-41d5-8522-562de1706ecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d05a:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:39:7a:f7:a1:42:37:ad:db:ce:95:6a:18:f4:13:50:b5:af:
         25:a7:19:a1:c8:c9:b9:3d:fa:e7:5a:33:dc:b5:f3:a6:02:72:
         6f:1c:1c:bb:08:bd:b7:d7:b3:b3:47:c3:58:71:5b:1f:39:c2:
         0d:f0:88:e3:b2:b5:88:8b:bb:cb:c3:8d:05:de:a4:6c:67:f6:
         8a:74:0f:60:87:a4:18:d8:f9:71:9d:82:a3:75:28:3a:e9:97:
         9d:a4:75:4a:98:e8:1d:2a:12:d8:ac:e7:5a:91:61:ba:35:a8:
         37:05:9c:04:bd:b6:79:91:41:ce:c8:df:d5:80:70:15:ad:ee:
         d0:66:ea:4b:27:c8:e6:1a:9a:6f:de:bf:61:cd:eb:8a:e5:4a:
         a9:7d:cf:2a:ad:f5:3f:99:81:5d:9c:55:18:4d:9c:14:93:4f:
         96:ed:dc:d5:a1:9a:8a:e3:c9:d4:ce:bf:1b:a7:eb:cd:76:e9:
         7a:fc:49:49:0b:35:24:36:ef:ac:53:30:b6:a6:30:68:d9:d6:
         a3:f2:2f:b1:e3:45:98:62:d3:d4:b0:82:b6:6f:ca:c3:b5:ed:
         e1:c7:e1:cb:a0:63:ba:1a:87:46:b4:7e:b5:03:ad:27:b8:f4:
         47:f7:b5:9d:3f:66:9a:17:2f:99:1b:8f:93:4c:c3:ce:3a:c4:
         c9:d4:ad:df
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULGRDDyfEg/rjZaOuOI6RCN9DWpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MzEwMDMwMTdaFw0yNjA4MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDY0ZTY1OGJhOTQ5MjY1OGFlYzc1MTA1MmI2YjYxMzdiOTYzODA2YmYzYjY5
ZjY0NzQzYTMwYThkZDhlZDRiYWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKPdTFJRSY8/xR2kII0CbJfq/jAxIw/91POae5wTbKfLDGxhrSxLhvb+EHlW
0//xhfWYd4Q/pHhBo4L5BDAKteaRbCEtUbviI9456oWzgvIn2jBvkQ1N5cL9daa/
kLQDh7VOiym45mWL0iQHGiEmQWlrbRVS48nAlT0vLq5qMcD9OeNnQi0JHaXp3Sic
T6ugI8ingPeljUyKOZlkFHsrVHj664R6vs54zw4AiusWRgxsI+BwqbKG3o17Ipvu
p0wWzU3Jh7BP7T/i/QaTBScHXop/COqTSPE1spAOjjULv2L+uRy35suQEXAYwiWb
Tf/aW7j4xKKnbdmZcovFMEs+lV0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRed8GD
3ppO6QV9sypPeY1z9UAgLDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjkwMWU4NGEtNjBlYy00MWQ1LTg1MjItNTYyZGUxNzA2ZWNkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FqQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBpOXr3oUI3rdvOlWoY9BNQta8lpxmhyMm5Pfrn
WjPctfOmAnJvHBy7CL2317OzR8NYcVsfOcIN8IjjsrWIi7vLw40F3qRsZ/aKdA9g
h6QY2PlxnYKjdSg66ZedpHVKmOgdKhLYrOdakWG6Nag3BZwEvbZ5kUHOyN/VgHAV
re7QZupLJ8jmGppv3r9hzeuK5Uqpfc8qrfU/mYFdnFUYTZwUk0+W7dzVoZqK48nU
zr8bp+vNdul6/ElJCzUkNu+sUzC2pjBo2daj8i+x40WYYtPUsIK2b8rDte3hx+HL
oGO6GodGtH61A60nuPRH97WdP2aaFy+ZG4+TTMPOOsTJ1K3f
-----END CERTIFICATE-----