Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
File:                     119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa (raw, json)
Hash identifier:          t5llKTxUGQU6tpUKBuwp72gldnWKL5xMYmlyh3L5GLo=
Subject key identifier:   33:C4:8C:4C:9A:01:3E:7C:9F:64:3B:DF:E1:3D:E2:CB:78:99:2C:80
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4D21379E7AC669E6B3E657E5315FD6DED2A6E3F2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
Signing time:             Thu 23 Jul 2026 15:20:26 +0000
ROA not before:           Thu 23 Jul 2026 15:20:26 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:21:37:9e:7a:c6:69:e6:b3:e6:57:e5:31:5f:d6:de:d2:a6:e3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:20:26 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=84aadcc8a3af79b164aeca8b13e212287556b0a34ce39e20622d1b2fa144d6f2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b9:d9:af:70:4a:15:33:87:a9:7a:cf:15:3f:
                    3f:9b:f5:0c:03:ce:f9:e1:46:58:4a:fb:0f:4e:87:
                    1e:02:17:27:55:91:80:7a:c0:fc:c2:5f:0a:45:51:
                    b9:e4:30:7a:c1:1c:a5:69:1d:b5:c5:5e:30:5b:6b:
                    82:5a:3f:00:1c:ec:c6:a8:a3:7c:47:6f:14:85:49:
                    5f:74:6e:98:fc:92:f3:9f:7b:3a:9f:5c:b1:93:94:
                    dc:66:77:57:6c:09:bc:8d:20:7e:e3:36:bd:43:6b:
                    99:d5:42:12:8a:22:c3:fd:05:99:d2:76:5c:a7:d3:
                    f5:59:96:d3:c4:1b:c9:b8:a7:b9:c1:f8:1d:58:ef:
                    7d:4e:71:45:58:96:f6:32:51:52:af:1d:81:78:08:
                    f7:fd:31:8a:5f:25:99:fd:29:c6:55:6f:22:e7:37:
                    2c:70:14:31:69:93:a9:89:0a:2b:95:38:b7:f5:22:
                    dc:96:8b:c7:e0:d0:3e:f8:c5:72:82:fa:13:66:85:
                    07:79:56:dc:69:71:90:99:6f:5b:0c:71:19:26:a5:
                    af:36:5d:9d:e3:96:7b:ec:d9:a6:e7:af:cb:f5:18:
                    4a:56:2e:91:9d:b9:93:0f:e8:6d:1e:49:c0:fe:63:
                    0c:0d:eb:cc:7a:c8:74:b9:3c:64:bd:f1:21:c1:df:
                    81:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C4:8C:4C:9A:01:3E:7C:9F:64:3B:DF:E1:3D:E2:CB:78:99:2C:80
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:6f:b4:87:08:76:9d:3f:33:91:f0:9c:98:69:bd:ed:97:4d:
         19:25:3d:4c:47:7c:29:9a:16:e1:ef:a5:67:6d:56:1c:c7:ea:
         19:7f:d4:c9:7e:27:14:99:b5:1f:9f:02:d2:ca:c6:2f:50:79:
         c0:3f:a4:9f:00:72:7c:81:4b:47:5d:8c:db:5b:62:d2:28:bc:
         39:38:63:94:02:74:55:84:93:31:92:ac:b7:64:a2:24:fe:75:
         ad:6d:21:e0:2c:ed:58:bd:3f:dd:91:8a:86:f6:f2:9a:a8:43:
         c7:62:31:a4:6f:58:29:7b:de:04:96:06:6f:38:50:5b:40:1f:
         5f:a2:1a:54:3b:a2:09:13:cb:07:23:21:13:6a:05:3e:ab:f5:
         15:e0:f0:f4:ed:5e:65:9f:5e:9a:01:52:c0:47:75:c1:0a:11:
         1f:5f:50:ab:55:fd:5b:bb:1a:82:60:ac:fa:b4:f0:e5:48:31:
         8f:0b:c4:fc:9e:ec:d9:44:98:2a:64:08:da:87:3c:10:ea:a6:
         32:11:35:0b:74:6a:50:bb:cd:43:d7:d8:56:4a:25:34:6f:72:
         b2:5c:16:25:69:3a:94:ea:2d:cf:08:7c:72:bd:21:6f:65:45:
         40:3b:6a:48:56:22:24:25:2c:fc:86:b6:07:28:7e:44:23:d9:
         f6:26:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----