Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b0f19cc-b646-49d7-a134-8b1c2659541a.roa
File:                     4b0f19cc-b646-49d7-a134-8b1c2659541a.roa (raw, json)
Hash identifier:          YumLb0Tu0SSBnpJAAm45yhWQeF8OlNz57xU1VihzIbA=
Subject key identifier:   1A:3F:B7:38:F5:A6:A0:20:10:A2:C7:84:B8:DB:69:7D:41:EE:45:77
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       48121EE9DC4F9E8F48EE155F342D12A43418E57E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b0f19cc-b646-49d7-a134-8b1c2659541a.roa
Signing time:             Thu 16 Jul 2026 00:30:19 +0000
ROA not before:           Thu 16 Jul 2026 00:30:19 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d06d:80c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:12:1e:e9:dc:4f:9e:8f:48:ee:15:5f:34:2d:12:a4:34:18:e5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 16 00:30:19 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=998fc91557e9854f79a466915d8c71170db5bd9e1a9e0fd3ef09f88170312f8e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c4:9b:19:aa:6e:6f:5a:6b:21:b8:f9:07:22:
                    f0:e8:f1:31:c7:f8:fc:4b:45:eb:47:66:5f:73:c9:
                    62:46:dd:fe:bd:47:5f:47:dc:0d:1c:c6:aa:13:fe:
                    29:b1:71:e3:1d:db:af:89:af:4b:e2:55:7b:8f:2f:
                    c0:7e:0c:6c:c3:cd:5a:bd:f4:da:2e:0e:6c:e4:ef:
                    f3:e4:da:55:13:38:85:9a:a4:40:f6:eb:fd:54:e0:
                    07:01:dd:b2:4c:81:6c:3c:36:7c:a9:7c:16:17:1a:
                    96:d2:da:a2:f9:44:77:85:42:d6:1d:c2:43:7b:b9:
                    48:fc:6a:93:43:f0:7b:54:80:4e:a5:70:2f:7b:61:
                    d2:39:d4:f2:73:c7:1e:66:8a:85:50:5e:7a:0b:ce:
                    22:12:23:62:65:92:de:36:64:83:bd:9c:5a:d9:bb:
                    0b:f2:fb:bf:8a:92:4d:f5:78:37:b3:bb:88:f5:ad:
                    76:c2:b9:1e:d2:ae:4c:77:06:a5:1f:44:c0:08:06:
                    25:f9:b8:a7:45:1a:28:ae:cc:52:36:bd:77:4a:5f:
                    1e:cc:56:aa:e1:13:0c:02:87:d7:e8:66:8b:91:7a:
                    37:12:c7:6a:f0:cf:5a:f5:08:d0:42:e5:f7:d1:56:
                    b3:e3:c0:48:91:73:49:59:97:61:11:57:93:25:eb:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3F:B7:38:F5:A6:A0:20:10:A2:C7:84:B8:DB:69:7D:41:EE:45:77
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b0f19cc-b646-49d7-a134-8b1c2659541a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06d:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:f1:c8:bd:c2:8d:2e:30:09:c0:c7:00:a1:78:71:87:91:7c:
         ec:48:1e:ff:3a:10:3f:34:7b:54:8f:8b:33:e4:78:ff:f4:2d:
         4c:ed:58:d4:26:d9:86:b8:83:90:4f:aa:ae:ba:2c:7a:d9:fd:
         85:3b:92:18:f7:9d:dd:7c:ed:54:7e:df:37:04:ba:0d:c6:49:
         c8:a4:a0:37:8e:73:4a:10:0e:bd:a8:fe:28:f7:9e:a7:9f:ca:
         63:c6:3b:3d:8f:14:1c:34:a2:16:56:8f:ef:2b:84:8f:4f:96:
         63:4e:d1:aa:7f:c7:65:95:21:f2:32:ba:9c:f3:91:c1:86:de:
         cb:0a:de:6c:c4:b1:50:d1:16:cc:ee:94:1a:4a:b9:2b:ae:fa:
         e8:b2:7c:f3:b8:a6:61:7f:87:7b:6e:bc:c3:5b:90:f8:e9:25:
         ea:f1:a2:88:2b:db:a2:67:b8:98:39:33:c0:99:37:03:f7:b2:
         13:b9:f5:60:fd:61:b3:b0:10:6d:bc:a3:d2:37:8c:49:d8:55:
         9e:76:6c:6c:aa:0a:91:0d:b7:a7:59:f2:0c:70:3f:07:1e:f0:
         f1:10:03:ac:e6:01:37:2b:18:70:fe:64:a8:38:18:b7:67:45:
         d8:b9:12:6e:39:ff:cf:95:c3:8b:8f:af:a4:6c:f7:98:2e:31:
         4e:05:dc:72
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUSBIe6dxPno9I7hVfNC0SpDQY5X4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MTYwMDMwMTlaFw0yNjEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDk5OGZjOTE1NTdlOTg1NGY3OWE0NjY5MTVkOGM3MTE3MGRiNWJkOWUxYTll
MGZkM2VmMDlmODgxNzAzMTJmOGUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPLEmxmqbm9aayG4+Qci8OjxMcf4/EtF60dmX3PJYkbd/r1HX0fcDRzGqhP+
KbFx4x3br4mvS+JVe48vwH4MbMPNWr302i4ObOTv8+TaVRM4hZqkQPbr/VTgBwHd
skyBbDw2fKl8FhcaltLaovlEd4VC1h3CQ3u5SPxqk0Pwe1SATqVwL3th0jnU8nPH
HmaKhVBeegvOIhIjYmWS3jZkg72cWtm7C/L7v4qSTfV4N7O7iPWtdsK5HtKuTHcG
pR9EwAgGJfm4p0UaKK7MUja9d0pfHsxWquETDAKH1+hmi5F6NxLHavDPWvUI0ELl
99FWs+PASJFzSVmXYRFXkyXrTAMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQaP7c4
9aagIBCix4S422l9Qe5FdzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGIwZjE5Y2MtYjY0Ni00OWQ3LWExMzQtOGIxYzI2NTk1NDFhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0G2A
wDANBgkqhkiG9w0BAQsFAAOCAQEAovHIvcKNLjAJwMcAoXhxh5F87Ege/zoQPzR7
VI+LM+R4//QtTO1Y1CbZhriDkE+qrrosetn9hTuSGPed3XztVH7fNwS6DcZJyKSg
N45zShAOvaj+KPeep5/KY8Y7PY8UHDSiFlaP7yuEj0+WY07Rqn/HZZUh8jK6nPOR
wYbeywrebMSxUNEWzO6UGkq5K6766LJ887imYX+He268w1uQ+Okl6vGiiCvbome4
mDkzwJk3A/eyE7n1YP1hs7AQbbyj0jeMSdhVnnZsbKoKkQ23p1nyDHA/Bx7w8RAD
rOYBNysYcP5kqDgYt2dF2LkSbjn/z5XDi4+vpGz3mC4xTgXccg==
-----END CERTIFICATE-----