Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04503b16-d14e-46c1-93ab-4dafd21d6078.roa
File:                     04503b16-d14e-46c1-93ab-4dafd21d6078.roa (raw, json)
Hash identifier:          +dsUwP8YanNexABASsvpPcNP9vaTbg7Hc6Go+Cd5eoo=
Subject key identifier:   E9:6A:50:3D:AD:F6:D5:1B:26:B1:41:AF:48:DE:E0:B4:01:28:E9:60
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       57A1DFD4241566734D332B48922A5C434CEF1F15
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04503b16-d14e-46c1-93ab-4dafd21d6078.roa
Signing time:             Thu 23 Jul 2026 15:21:12 +0000
ROA not before:           Thu 23 Jul 2026 15:21:12 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:a040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a1:df:d4:24:15:66:73:4d:33:2b:48:92:2a:5c:43:4c:ef:1f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:21:12 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=02720f09dae4bc172631cc45768fe9547d22e69fbd5421c3e4d523edbe8def49, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:1f:ae:89:d0:12:4b:78:5a:a6:05:3c:bd:
                    fd:34:c1:38:5a:9c:9e:ff:ed:f0:da:9c:97:76:2e:
                    35:c0:f3:98:b2:a8:c6:50:45:fc:99:db:46:6f:48:
                    3f:2b:fb:96:0b:0d:0b:8e:ad:42:b5:9f:a3:36:aa:
                    b5:b6:ac:30:41:33:33:1b:e8:46:d1:33:13:4d:5c:
                    2e:8c:40:ab:f5:30:ae:7a:93:ef:72:d8:e3:29:bf:
                    c6:1d:88:a0:db:42:ef:e1:33:bc:4b:86:2b:8f:b7:
                    1c:a4:7b:a0:da:02:7b:de:1f:0d:57:08:e7:c4:ad:
                    3b:6e:63:fe:3d:2d:b6:f9:48:10:37:98:de:c7:bb:
                    1b:78:cd:f8:97:6d:c6:32:fc:63:cb:e2:5e:f9:a8:
                    45:86:4f:b9:d0:2d:27:08:a7:35:43:35:2e:71:62:
                    e3:0e:74:00:94:fd:1c:be:39:e8:46:6a:67:83:7d:
                    f5:a3:74:d1:a3:fa:60:53:a5:5c:8a:68:26:ba:5f:
                    57:dc:b4:99:52:fe:e0:24:45:99:b1:1c:53:c4:f2:
                    74:46:41:f5:d0:bf:a8:a7:41:d4:83:90:fe:21:de:
                    bd:83:f7:0c:86:0b:33:e3:a8:b3:2b:aa:21:78:d8:
                    cd:f0:71:13:97:56:39:b0:f0:cf:d1:36:c4:82:92:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6A:50:3D:AD:F6:D5:1B:26:B1:41:AF:48:DE:E0:B4:01:28:E9:60
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04503b16-d14e-46c1-93ab-4dafd21d6078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:a040::/46

    Signature Algorithm: sha256WithRSAEncryption
         58:80:fa:cf:4f:66:90:78:9d:ec:c7:4f:e6:ad:24:42:0e:22:
         dc:36:35:cf:89:bb:a1:ed:49:c8:3e:bc:1b:26:8b:25:32:19:
         03:c5:2b:49:1c:5c:8d:89:69:52:5c:85:4c:e1:64:f6:18:2a:
         5d:9e:56:c2:57:fb:00:61:87:b9:2f:50:60:0b:50:e5:6a:9a:
         9f:12:ef:94:9c:3f:0b:ff:ad:e8:8c:70:b3:bc:7d:40:7f:b0:
         ab:77:e7:a7:96:b9:a8:b7:59:27:06:fa:54:5c:26:bf:0c:75:
         74:89:aa:7e:6f:5e:e1:40:a2:c9:8a:c5:56:b9:06:e2:1c:e8:
         9e:fa:d0:64:a9:6b:91:72:1a:b7:7f:12:2a:9a:a2:a6:ca:ef:
         5a:b7:4f:1c:61:46:b1:4c:c5:42:e7:17:b2:0d:63:91:12:52:
         76:80:e5:54:50:2c:86:e3:83:c2:8a:b5:63:82:17:f0:c0:03:
         99:d1:42:e0:62:86:4f:64:7b:b5:6a:85:df:e5:de:9f:b2:37:
         0c:d9:d3:b5:04:4d:58:49:52:15:bb:14:3a:46:aa:57:ec:a3:
         68:0d:02:88:dd:f8:29:d0:7b:16:1e:66:0f:ae:2b:96:3b:0a:
         4e:97:d6:fa:d4:f2:e8:5c:93:8b:65:bf:ac:5f:f0:80:05:cb:
         24:98:63:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----