Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e19327e-c6cf-454d-994b-aa031c9efdce.roa
File:                     4e19327e-c6cf-454d-994b-aa031c9efdce.roa (raw, json)
Hash identifier:          BsFSVbmvKiAuwdi1KeQYyMGZ7GjV3JLuBk3UgiksRa8=
Subject key identifier:   36:A4:1C:FF:41:30:B4:8E:D1:D9:8C:3C:01:2D:3C:CF:34:F5:FC:D7
Certificate issuer:       /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial:       3680E975EC08CC9DC54EEA419F5C9FDC214DC068
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e19327e-c6cf-454d-994b-aa031c9efdce.roa
Signing time:             Fri 11 Sep 2026 00:00:08 +0000
ROA not before:           Fri 11 Sep 2026 00:00:08 +0000
ROA not after:            Thu 10 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc7:3000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:80:e9:75:ec:08:cc:9d:c5:4e:ea:41:9f:5c:9f:dc:21:4d:c0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
        Validity
            Not Before: Sep 11 00:00:08 2026 GMT
            Not After : Dec 10 23:59:59 2026 GMT
        Subject: serialNumber=35cde8a3d49b04ed3714d2992189dc27450ab20b6c6d5082257687a833d16adb, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:a6:3d:60:08:e0:fc:86:de:d9:07:4f:95:
                    d2:cb:e7:d3:d7:17:c1:a7:7e:75:4f:fc:dc:05:42:
                    4a:03:e4:c1:cc:3b:e9:e0:21:03:c4:1d:08:d9:2c:
                    cd:f4:e2:cb:38:e3:66:8f:18:cf:66:06:0d:5a:1b:
                    2c:cb:02:84:5f:d9:77:93:a9:16:49:70:e3:59:c4:
                    bf:70:bd:bd:71:2e:fb:e5:ee:d0:ba:57:6f:43:73:
                    9e:af:95:0c:a7:e6:28:fe:71:d8:8c:7d:ac:6f:3d:
                    3a:0e:fa:77:d5:4b:f1:8e:69:94:ee:ce:48:c0:c4:
                    66:97:9e:3d:34:de:83:a4:5b:b3:a7:ed:4f:60:22:
                    42:2a:eb:a6:a3:cf:e9:7f:e4:50:6b:13:0e:00:f8:
                    c6:a6:1b:34:01:ef:1a:11:82:c8:eb:d1:88:9e:50:
                    8b:26:41:e6:bc:7a:48:02:30:9f:3d:8e:05:cb:40:
                    1d:df:00:8c:18:4f:37:02:bf:46:48:26:d6:0e:94:
                    14:db:79:08:be:de:0f:fb:57:25:cd:2a:cb:2f:8d:
                    3f:a4:57:92:9e:63:3e:84:10:5d:87:7d:b9:f4:4c:
                    57:27:01:4c:d0:c0:4f:e7:45:de:8f:35:60:5f:40:
                    12:cc:f7:f2:cb:cf:e4:98:ae:cd:28:8a:98:c4:12:
                    61:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A4:1C:FF:41:30:B4:8E:D1:D9:8C:3C:01:2D:3C:CF:34:F5:FC:D7
            X509v3 Authority Key Identifier:
                keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e19327e-c6cf-454d-994b-aa031c9efdce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc7:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:7c:e2:89:28:07:ba:5c:3e:b5:aa:a0:82:8e:3d:90:02:5c:
         af:4a:fc:a3:da:d6:9b:ed:24:fe:35:cc:b0:16:36:ab:19:2a:
         07:61:ee:f5:50:44:a6:d3:e1:07:88:ee:08:79:49:32:77:13:
         28:25:ae:13:b3:dc:4c:17:ac:fd:ba:21:76:f5:ce:46:b3:cf:
         64:2d:33:00:4d:cf:b3:c8:48:6e:42:a5:07:fd:0d:a0:10:9f:
         04:a5:be:3e:93:3b:a2:1d:41:4e:75:0f:9a:0f:e5:93:ce:ef:
         58:65:f0:d4:73:c5:c4:b6:6b:5f:d7:e2:65:e7:f6:f2:0e:72:
         ab:a6:e8:24:d0:1d:3b:a7:c3:88:27:d4:25:da:90:bb:66:4f:
         bc:08:6c:2c:f4:26:ac:86:6d:00:45:f3:36:b5:12:a6:27:76:
         86:17:00:54:07:f8:3d:16:60:f8:62:37:2a:51:c7:dd:7b:22:
         4e:c3:4c:53:ec:7d:90:5f:a6:92:52:54:ad:9c:43:8b:e0:44:
         9a:f3:0c:6d:58:41:ca:e7:e9:f9:70:b4:3b:40:83:30:26:82:
         c1:39:1f:0b:a9:aa:74:2f:5a:ab:91:3f:c8:b6:fa:df:ba:08:
         1c:bb:2f:28:7d:5a:6f:60:49:a2:67:38:34:e3:45:4b:ae:ab:
         5e:02:97:e5
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUNoDpdewIzJ3FTupBn1yf3CFNwGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA5MTEwMDAwMDhaFw0yNjEyMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDM1Y2RlOGEzZDQ5YjA0ZWQzNzE0ZDI5OTIxODlkYzI3NDUwYWIyMGI2YzZk
NTA4MjI1NzY4N2E4MzNkMTZhZGIxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALkPpj1gCOD8ht7ZB0+V0svn09cXwad+dU/83AVCSgPkwcw76eAhA8QdCNks
zfTiyzjjZo8Yz2YGDVobLMsChF/Zd5OpFklw41nEv3C9vXEu++Xu0LpXb0Nznq+V
DKfmKP5x2Ix9rG89Og76d9VL8Y5plO7OSMDEZpeePTTeg6Rbs6ftT2AiQirrpqPP
6X/kUGsTDgD4xqYbNAHvGhGCyOvRiJ5QiyZB5rx6SAIwnz2OBctAHd8AjBhPNwK/
Rkgm1g6UFNt5CL7eD/tXJc0qyy+NP6RXkp5jPoQQXYd9ufRMVycBTNDAT+dF3o81
YF9AEsz38svP5JiuzSiKmMQSYVcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ2pBz/
QTC0jtHZjDwBLTzPNPX81zAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NGUxOTMyN2UtYzZjZi00NTRkLTk5NGItYWEwMzFjOWVmZGNlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8cw
MA0GCSqGSIb3DQEBCwUAA4IBAQA8fOKJKAe6XD61qqCCjj2QAlyvSvyj2tab7ST+
NcywFjarGSoHYe71UESm0+EHiO4IeUkydxMoJa4Ts9xMF6z9uiF29c5Gs89kLTMA
Tc+zyEhuQqUH/Q2gEJ8Epb4+kzuiHUFOdQ+aD+WTzu9YZfDUc8XEtmtf1+Jl5/by
DnKrpugk0B07p8OIJ9Ql2pC7Zk+8CGws9Cashm0ARfM2tRKmJ3aGFwBUB/g9FmD4
YjcqUcfdeyJOw0xT7H2QX6aSUlStnEOL4ESa8wxtWEHK5+n5cLQ7QIMwJoLBOR8L
qap0L1qrkT/Itvrfuggcuy8ofVpvYEmiZzg040VLrqteApfl
-----END CERTIFICATE-----