Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff4816c3-2e55-42d8-a2fa-8e7ac7375d0e.roa
File:                     ff4816c3-2e55-42d8-a2fa-8e7ac7375d0e.roa (raw, json)
Hash identifier:          rACmTg+8IixN0Ai5Vh/p0kse/cvAARiEJRl8gKN+Wos=
Subject key identifier:   00:9D:EC:66:7A:53:D4:08:9D:05:FE:8D:14:54:31:C5:9E:52:AD:5C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4801822132A63E734A01535EEAFE53180D5D06D0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff4816c3-2e55-42d8-a2fa-8e7ac7375d0e.roa
Signing time:             Mon 27 Jul 2026 03:20:56 +0000
ROA not before:           Mon 27 Jul 2026 03:20:56 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d074:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:01:82:21:32:a6:3e:73:4a:01:53:5e:ea:fe:53:18:0d:5d:06:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:56 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=9845f39ef9440237443a74d279365a05c93e6d7be40c9b8fd8bd29d49ce61d88, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:e8:87:7c:13:47:6c:a1:01:24:8a:9b:b7:
                    97:1d:88:fc:19:31:85:8e:80:d6:c1:80:ed:27:9d:
                    72:fe:b4:3f:56:77:cd:9a:0d:56:7b:c6:12:92:91:
                    15:2f:21:4a:46:ce:30:e2:b7:45:36:a1:1e:ec:b9:
                    64:59:1c:d4:47:62:ab:fa:f1:ed:a8:25:e8:00:7b:
                    10:0b:15:bb:f9:92:92:b7:8e:b4:69:ca:7a:07:a6:
                    6e:e6:6b:c3:6d:70:36:da:a1:85:50:5f:ff:b7:d0:
                    c6:54:58:f6:38:67:bd:dd:cd:18:fb:c4:1c:ba:b2:
                    68:d8:4f:de:dd:64:76:62:32:48:70:fa:0c:12:cd:
                    6f:b0:3e:49:b8:0a:c7:e8:a2:50:26:43:8b:1a:84:
                    7c:fd:a3:e1:27:90:a2:74:3d:28:ca:38:61:5c:d7:
                    77:fe:45:51:92:0c:06:27:a4:8c:a5:de:76:d2:2b:
                    b4:81:b4:b1:c6:45:39:66:79:68:e3:0e:7f:d1:8a:
                    ba:6b:f4:fb:ca:3d:66:28:6a:0e:42:69:12:78:5a:
                    5f:2f:89:99:7a:81:a7:c0:4e:7b:05:d1:d2:c6:bf:
                    eb:7f:fd:6a:d6:31:08:17:23:d4:6c:93:83:34:4e:
                    8d:3c:16:a4:f6:e5:05:1a:53:a7:8a:5f:6f:1b:0e:
                    96:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9D:EC:66:7A:53:D4:08:9D:05:FE:8D:14:54:31:C5:9E:52:AD:5C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff4816c3-2e55-42d8-a2fa-8e7ac7375d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:a5:72:e8:ac:55:7e:84:16:ea:38:3f:07:cb:2e:13:ae:a4:
         b6:55:ba:ad:b4:e5:bb:3e:15:c8:00:08:d0:ec:e1:4f:07:8c:
         2c:84:60:35:fc:6c:a6:0c:69:00:04:ac:bb:95:16:1d:5e:a6:
         c0:0d:1f:83:33:b4:cf:73:bf:5b:81:49:54:5c:d4:14:2b:f8:
         a7:c8:f1:69:23:76:43:c8:72:49:2c:bd:56:8d:b3:7f:8d:01:
         cc:c5:a3:af:9e:8e:47:8d:8b:1c:41:5e:4d:db:31:87:0a:cd:
         ec:db:c7:d0:a4:88:49:48:95:6e:7c:89:6e:7a:0e:8a:99:1a:
         4c:3b:b8:be:23:fd:07:09:67:e6:0c:ad:0b:83:ec:b7:b9:4b:
         d2:ce:df:e2:74:9f:15:9d:c3:20:c3:b6:90:5b:ab:d3:2b:23:
         4b:73:92:ea:02:b6:55:95:0c:68:e5:8a:83:5d:cb:4d:55:7f:
         3d:01:1d:f7:ac:28:7e:21:14:81:f4:6d:02:ae:e9:ba:77:4e:
         48:27:44:b5:f3:af:32:56:8f:b7:0d:ab:8d:31:a1:06:36:50:
         9f:3b:d5:3b:fb:ad:b2:d1:7b:ca:97:cb:29:cc:66:93:8f:cc:
         fc:35:a9:e9:63:1c:98:33:ba:24:6c:eb:b8:5d:08:85:02:e5:
         7e:db:13:70
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSAGCITKmPnNKAVNe6v5TGA1dBtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjcwMzIwNTZaFw0yNjEwMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDk4NDVmMzllZjk0NDAyMzc0NDNhNzRkMjc5MzY1YTA1YzkzZTZkN2JlNDBj
OWI4ZmQ4YmQyOWQ0OWNlNjFkODgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALUP6Id8E0dsoQEkipu3lx2I/BkxhY6A1sGA7Sedcv60P1Z3zZoNVnvGEpKR
FS8hSkbOMOK3RTahHuy5ZFkc1Ediq/rx7agl6AB7EAsVu/mSkreOtGnKegembuZr
w21wNtqhhVBf/7fQxlRY9jhnvd3NGPvEHLqyaNhP3t1kdmIySHD6DBLNb7A+SbgK
x+iiUCZDixqEfP2j4SeQonQ9KMo4YVzXd/5FUZIMBiekjKXedtIrtIG0scZFOWZ5
aOMOf9GKumv0+8o9ZihqDkJpEnhaXy+JmXqBp8BOewXR0sa/63/9atYxCBcj1GyT
gzROjTwWpPblBRpTp4pfbxsOlusCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQAnexm
elPUCJ0F/o0UVDHFnlKtXDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmY0ODE2YzMtMmU1NS00MmQ4LWEyZmEtOGU3YWM3Mzc1ZDBlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HSg
MA0GCSqGSIb3DQEBCwUAA4IBAQCLpXLorFV+hBbqOD8Hyy4TrqS2VbqttOW7PhXI
AAjQ7OFPB4wshGA1/GymDGkABKy7lRYdXqbADR+DM7TPc79bgUlUXNQUK/inyPFp
I3ZDyHJJLL1WjbN/jQHMxaOvno5HjYscQV5N2zGHCs3s28fQpIhJSJVufIlueg6K
mRpMO7i+I/0HCWfmDK0Lg+y3uUvSzt/idJ8VncMgw7aQW6vTKyNLc5LqArZVlQxo
5YqDXctNVX89AR33rCh+IRSB9G0Crum6d05IJ0S1868yVo+3DauNMaEGNlCfO9U7
+62y0XvKl8spzGaTj8z8NanpYxyYM7okbOu4XQiFAuV+2xNw
-----END CERTIFICATE-----