Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67337a3a-3355-4837-82d2-cf7e20d337c6.roa
File:                     67337a3a-3355-4837-82d2-cf7e20d337c6.roa (raw, json)
Hash identifier:          It3GqgRm9ctMzW6R5gWGqxuDAnucrSjGE9in5rbESQ4=
Subject key identifier:   87:E7:36:7C:AF:90:2C:E5:7E:7F:CA:5B:3A:CE:2B:5C:46:F4:6A:7F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2CD00A9D1414E1988F00EAE4F23079C448D6FECC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67337a3a-3355-4837-82d2-cf7e20d337c6.roa
Signing time:             Mon 22 Jun 2026 02:40:29 +0000
ROA not before:           Mon 22 Jun 2026 02:40:29 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06b:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d0:0a:9d:14:14:e1:98:8f:00:ea:e4:f2:30:79:c4:48:d6:fe:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 22 02:40:29 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=3dba22df7401c6c19dc1252c7f876c1764b8b6e20bc815105c7547913e891cbb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:55:0e:2e:b9:a5:28:0b:2a:2a:05:e4:21:
                    1e:7a:63:57:1f:7a:a7:d9:56:64:bd:d1:d6:a4:17:
                    f1:b9:41:97:6a:de:bb:be:20:17:29:ac:bc:ae:d8:
                    2e:a0:d6:73:db:ef:c1:2a:3d:98:ae:da:52:b0:48:
                    7c:c8:00:ce:46:40:64:24:46:c3:35:19:4d:c6:f4:
                    17:2e:5f:db:9b:dd:de:15:a8:37:32:85:b4:8d:68:
                    49:fc:ed:4b:b6:20:d1:39:2d:79:e0:a0:31:c5:c4:
                    37:43:f4:61:59:b1:df:9d:e3:16:b4:84:05:02:58:
                    6c:1b:36:b8:d9:1a:93:75:09:5c:7d:c1:ba:92:72:
                    fa:5a:97:65:55:0c:55:f1:31:c6:43:31:fe:f3:12:
                    53:5e:cd:9c:13:03:18:0c:16:51:a4:c4:70:1f:ed:
                    c0:5c:c3:60:4e:91:6e:01:36:22:cb:3d:02:37:81:
                    d2:48:47:e3:97:0b:33:7d:d5:a2:13:b3:8e:0b:14:
                    07:68:03:d3:09:f8:ec:de:8b:38:6e:48:cb:f0:53:
                    63:5a:24:cd:50:f6:4c:3b:37:85:1a:d4:18:3b:62:
                    ba:df:7f:4d:bd:0e:bd:4a:dd:6f:23:37:3e:ad:4c:
                    92:33:65:85:ac:d2:4d:59:a9:26:d5:fd:7d:5c:78:
                    b5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E7:36:7C:AF:90:2C:E5:7E:7F:CA:5B:3A:CE:2B:5C:46:F4:6A:7F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67337a3a-3355-4837-82d2-cf7e20d337c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06b:1080::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:9f:39:bc:9a:10:b7:52:49:de:0e:8f:24:0e:5f:8a:b5:9f:
         f8:04:57:9b:38:2d:4a:57:6c:5e:2a:2e:d7:07:b5:c4:4f:f5:
         a2:c7:e5:c5:48:96:5b:ba:9d:63:87:2f:45:33:7f:05:a8:a4:
         64:84:1c:46:22:d4:77:6d:10:42:b7:8a:22:58:ea:09:f4:01:
         7c:f7:00:e0:3f:85:95:2b:74:3d:82:61:7c:82:08:8a:3e:5d:
         fa:45:f6:94:1d:e6:60:a0:e9:26:4d:0d:86:dc:47:e3:bc:a5:
         c3:cf:d2:4c:37:c0:2e:0b:86:38:d5:e1:0a:cd:58:de:32:98:
         36:06:58:dc:3d:bf:64:29:8a:00:98:3d:1a:ec:79:1a:fb:cd:
         d4:53:37:0a:5a:af:2f:08:d1:99:27:2b:07:c6:89:6a:98:73:
         78:0b:ec:10:d4:e9:e3:c4:53:ac:8e:fb:44:b3:76:b3:61:78:
         af:18:c8:81:c6:8a:7e:c9:de:35:d9:21:f8:e3:ba:a4:34:4f:
         49:4f:e1:df:ac:cd:48:86:ec:28:16:25:1f:15:ad:73:a7:77:
         da:17:03:27:9e:e8:6f:b9:f3:95:34:6a:99:06:b9:e3:75:b2:
         3e:2a:6d:9a:70:dc:cc:90:67:4c:1b:ec:47:94:ff:9f:d7:02:
         94:e1:0b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----