Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa
File:                     14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa (raw, json)
Hash identifier:          XY9oLzEfqWoQMwXEKBv+fCIhFYd55I2d852rCaZ9354=
Subject key identifier:   99:3B:4B:E4:41:54:C4:D2:EB:E5:2A:A4:E9:A3:44:87:8C:FA:20:D0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0BB44B4E8542823D93ED28BE630F17594DEDFFC6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa
Signing time:             Thu 23 Jul 2026 15:20:29 +0000
ROA not before:           Thu 23 Jul 2026 15:20:29 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:c020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b4:4b:4e:85:42:82:3d:93:ed:28:be:63:0f:17:59:4d:ed:ff:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:20:29 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=700ffc84b75b165a0131391a84550e08778de74c015bac5f265063b1ed5d9007, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:84:49:85:76:1b:19:d3:fa:0a:d7:0c:4c:
                    8a:37:e8:0a:64:df:a2:d0:e3:f3:d8:ea:2c:a3:15:
                    17:4e:c5:ca:99:f1:32:3e:19:f9:25:80:bc:58:60:
                    98:fd:57:e7:9e:56:cf:4a:d8:8b:b8:83:7f:a6:7f:
                    e5:90:22:3f:d8:60:e7:57:fd:e0:1b:ae:49:f0:35:
                    fe:c5:dc:06:d2:40:1b:14:24:b4:46:f9:1d:a1:4a:
                    7b:e8:19:47:85:8c:53:e3:08:7e:1c:a8:7f:6f:b9:
                    a7:89:b3:8f:1a:51:5e:27:1a:68:40:9b:19:ba:01:
                    d9:9a:57:bb:28:bd:58:b3:79:ea:aa:b8:f6:0a:8e:
                    69:f2:0d:f4:e6:96:48:00:b3:59:4b:2f:3d:4c:1f:
                    6d:a1:f7:ba:bc:cb:e9:b1:b3:51:7d:53:2f:c7:5d:
                    fa:bd:18:c1:1a:86:01:c4:26:b9:ab:77:9f:53:98:
                    1d:85:d8:dd:9b:33:60:12:e3:4c:5c:61:e4:8a:2b:
                    fe:82:98:2c:e0:a5:f0:ab:ee:50:d8:d6:f4:19:30:
                    cf:87:f3:4b:e2:eb:61:c3:e9:99:d1:ec:26:85:c0:
                    64:59:32:88:9d:0a:86:1d:fb:2e:d4:76:fa:ab:fd:
                    55:aa:22:b5:5e:41:eb:15:b8:76:af:75:ef:3a:a2:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3B:4B:E4:41:54:C4:D2:EB:E5:2A:A4:E9:A3:44:87:8C:FA:20:D0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:c020::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:44:7a:25:44:a0:2c:0c:ca:a7:9e:38:07:69:ed:8a:cb:
         68:f7:c4:77:4c:d3:1b:f4:43:74:8e:46:a7:3e:fc:a4:4a:61:
         5a:d2:15:15:05:f4:a4:40:d9:37:36:2e:1d:d0:8b:94:fc:a3:
         1b:b5:2e:ee:23:ea:57:8a:d9:ce:11:ae:fc:2d:49:64:20:a6:
         3d:98:e8:dd:d3:c7:75:6a:3a:a7:51:cf:5d:97:54:97:5d:81:
         4b:e9:7f:81:11:f0:c3:ce:7c:81:cf:a4:54:ad:b3:50:9f:94:
         45:f3:ff:82:6b:d1:88:80:a2:d0:64:73:4a:b1:cd:8b:9a:98:
         3a:77:eb:95:7e:c1:3d:88:86:9d:97:e1:0c:4e:e6:bc:53:ab:
         c9:80:d8:7b:2d:61:50:9d:bc:ac:8c:9b:59:da:4c:26:6b:c9:
         0e:cc:f5:11:b8:09:b0:22:54:ca:9d:67:ba:4a:ff:20:c0:95:
         54:8e:13:c3:96:07:1e:b2:fa:01:b3:7e:f0:c3:8c:6b:43:6b:
         b4:8f:88:9d:1f:6b:f9:06:76:32:3d:05:ae:27:5f:7d:e1:08:
         a8:e4:85:dd:c1:9c:9a:84:fd:b8:c2:08:74:68:84:9b:c1:f6:
         d7:02:e2:e4:53:10:4e:ee:ee:ff:b8:a9:38:e3:34:df:0c:d2:
         e7:17:46:1d
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUC7RLToVCgj2T7Si+Yw8XWU3t/8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjMxNTIwMjlaFw0yNjEwMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDcwMGZmYzg0Yjc1YjE2NWEwMTMxMzkxYTg0NTUwZTA4Nzc4ZGU3NGMwMTVi
YWM1ZjI2NTA2M2IxZWQ1ZDkwMDcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALMHhEmFdhsZ0/oK1wxMijfoCmTfotDj89jqLKMVF07FypnxMj4Z+SWAvFhg
mP1X555Wz0rYi7iDf6Z/5ZAiP9hg51f94BuuSfA1/sXcBtJAGxQktEb5HaFKe+gZ
R4WMU+MIfhyof2+5p4mzjxpRXicaaECbGboB2ZpXuyi9WLN56qq49gqOafIN9OaW
SACzWUsvPUwfbaH3urzL6bGzUX1TL8dd+r0YwRqGAcQmuat3n1OYHYXY3ZszYBLj
TFxh5Ior/oKYLOCl8KvuUNjW9Bkwz4fzS+LrYcPpmdHsJoXAZFkyiJ0Khh37LtR2
+qv9VaoitV5B6xW4dq917zqidQECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSZO0vk
QVTE0uvlKqTpo0SHjPog0DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTRjOWU2NDktZWVlMC00YTBhLWE0ZjMtNzE2YzUwODJkNmVhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HLA
IDANBgkqhkiG9w0BAQsFAAOCAQEAHcBEeiVEoCwMyqeeOAdp7YrLaPfEd0zTG/RD
dI5Gpz78pEphWtIVFQX0pEDZNzYuHdCLlPyjG7Uu7iPqV4rZzhGu/C1JZCCmPZjo
3dPHdWo6p1HPXZdUl12BS+l/gRHww858gc+kVK2zUJ+URfP/gmvRiICi0GRzSrHN
i5qYOnfrlX7BPYiGnZfhDE7mvFOryYDYey1hUJ28rIybWdpMJmvJDsz1EbgJsCJU
yp1nukr/IMCVVI4Tw5YHHrL6AbN+8MOMa0NrtI+InR9r+QZ2Mj0FridffeEIqOSF
3cGcmoT9uMIIdGiEm8H21wLi5FMQTu7u/7ipOOM03wzS5xdGHQ==
-----END CERTIFICATE-----