Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6738fcad-f4a2-497d-8234-1ac95dadb03d.roa
File:                     6738fcad-f4a2-497d-8234-1ac95dadb03d.roa (raw, json)
Hash identifier:          62NtrrV9rbkYbeUk3s4tLTZch4wN7lXyhx4TltEXiqU=
Subject key identifier:   93:38:8F:AF:9E:96:BB:77:51:C1:B5:C4:8F:77:A2:A6:D1:4A:D0:B7
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       69FE99525B812B9003F8136A285B6F5809FD2B5E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6738fcad-f4a2-497d-8234-1ac95dadb03d.roa
Signing time:             Mon 22 Jun 2026 02:40:24 +0000
ROA not before:           Mon 22 Jun 2026 02:40:24 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06b:2080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fe:99:52:5b:81:2b:90:03:f8:13:6a:28:5b:6f:58:09:fd:2b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 22 02:40:24 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=d10d59d42e4d7982ef98d2000268611414e8a41367d73838f023658ecda2dddb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d8:89:2a:51:3d:04:37:dc:4b:6f:b7:40:17:
                    ca:9c:a9:9e:fc:f9:d4:47:89:5d:ef:16:af:c4:19:
                    c8:4e:7b:24:1f:b9:be:93:be:46:db:12:54:47:87:
                    bd:0c:1b:9d:74:a1:86:27:70:54:de:d3:5f:89:36:
                    9b:a0:2a:f7:e6:69:cf:59:40:28:2d:5b:eb:d1:d0:
                    8c:da:da:5b:9c:84:33:1d:db:d8:1b:9d:7a:df:4a:
                    8e:fb:a1:9b:72:43:b2:dc:4a:79:37:da:cb:6a:79:
                    ad:fe:45:69:bb:b6:63:cb:47:1b:a1:33:f3:28:ca:
                    9e:9e:a5:a1:60:eb:68:d6:ae:87:f5:58:b6:65:23:
                    70:2f:3b:f2:9a:79:86:2c:f9:16:94:50:48:0a:27:
                    93:93:2f:63:e6:db:14:0d:b2:84:39:b4:ec:4a:df:
                    b6:89:9b:b2:14:61:db:be:93:b6:81:44:a9:62:d2:
                    62:ac:ec:76:f7:de:c6:aa:cb:b3:67:92:5a:1b:96:
                    0a:16:07:e0:b3:93:3a:0a:9c:1c:1d:89:83:be:53:
                    29:5b:3e:6a:81:2e:ca:54:1c:71:5c:f2:ac:9d:f3:
                    a4:90:b5:cc:32:14:98:7a:ca:24:37:1e:e8:e4:14:
                    21:d9:33:41:32:28:74:34:2d:65:8d:7c:f9:bc:15:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:38:8F:AF:9E:96:BB:77:51:C1:B5:C4:8F:77:A2:A6:D1:4A:D0:B7
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6738fcad-f4a2-497d-8234-1ac95dadb03d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06b:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:44:3b:c2:36:0e:2f:a0:d0:43:96:ac:00:b0:97:a9:3d:
         ef:f1:ff:5e:ae:7e:2d:aa:92:a0:c2:5a:e7:0e:65:30:c8:7e:
         c9:22:6a:20:74:31:bf:7a:2e:a3:a3:c2:be:48:45:cd:6a:98:
         c3:db:bf:24:be:2e:fe:45:75:a9:c9:d5:7a:39:9f:6b:1c:ba:
         56:a1:80:38:0b:7f:a4:af:28:3f:fb:81:63:a9:5b:88:52:c9:
         fb:44:18:8a:f4:b8:87:42:11:8d:d1:de:ed:b4:9b:84:a2:c2:
         25:2c:c7:47:49:ba:0e:cc:dd:41:27:d1:e8:0e:66:6c:74:8f:
         87:88:10:7f:ef:25:24:89:e6:39:f1:13:46:f3:c7:80:ca:9a:
         84:5b:81:d6:f8:1d:8e:b7:b9:11:39:47:09:c4:cf:7c:2a:e4:
         6f:e4:35:5d:1a:b6:56:1b:e9:79:53:bd:1b:56:49:b7:b5:9b:
         dd:e7:77:98:dd:db:ee:7e:34:90:27:7e:76:a2:6f:b8:b9:b3:
         7b:3e:76:75:0b:91:4b:21:4f:19:78:c4:d5:f4:b3:1a:cb:52:
         85:38:5c:59:85:41:62:71:49:81:e8:90:14:15:3f:4a:f0:d3:
         24:b6:2c:02:f0:c4:28:6f:af:95:fc:fc:eb:f1:f2:1c:bb:76:
         6b:68:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----