Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8518b81d-c700-4d3f-8ef4-5abe8d348d3c.roa
File:                     8518b81d-c700-4d3f-8ef4-5abe8d348d3c.roa (raw, json)
Hash identifier:          qX0/7ApiTTLWaOeAoAq8fp0rHAUykUE1X5CqFP+p+cE=
Subject key identifier:   5C:D8:D5:6C:29:B8:EB:31:E4:C6:4A:7A:C9:3C:E0:76:D6:F6:46:80
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       09870618A8C02C9B5B414A200F2834A8DAD20A9A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8518b81d-c700-4d3f-8ef4-5abe8d348d3c.roa
Signing time:             Thu 23 Jul 2026 15:21:10 +0000
ROA not before:           Thu 23 Jul 2026 15:21:10 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:9040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:87:06:18:a8:c0:2c:9b:5b:41:4a:20:0f:28:34:a8:da:d2:0a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:21:10 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=52d7fb3e08b197626d80c0a9881fec26f7744eb9666d5d65280661c6460ef895, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:32:2f:02:f0:fe:7e:4b:61:b4:67:ab:fe:
                    93:b3:ff:a7:02:b9:50:e2:0f:6b:b0:2f:c4:ae:fe:
                    9f:f1:c9:63:ee:15:3d:07:76:4d:70:53:0f:5a:e6:
                    d4:af:64:53:59:5c:ac:ed:4e:45:1b:6b:7e:76:f0:
                    fd:ba:f7:97:3f:24:9f:e3:d4:38:5c:dc:1c:9b:c0:
                    08:ba:68:a4:5a:20:7d:52:5c:10:68:4a:8b:e3:5c:
                    7d:c8:be:33:65:60:2c:78:0d:1f:2e:0e:62:ac:5d:
                    43:6a:95:a6:85:6d:c2:2c:ea:94:f4:66:28:7a:f3:
                    c4:af:f6:6f:80:23:5f:4a:b0:93:7b:e2:65:e5:87:
                    f2:d1:69:78:b7:70:3a:e0:e9:b9:74:5a:2a:21:4f:
                    4b:21:74:91:56:d2:c5:a0:62:f4:17:1a:1d:42:07:
                    76:bc:bd:39:b0:4f:8f:fa:48:eb:a8:48:40:1a:80:
                    28:fc:e4:3f:da:a7:dc:cc:99:e8:4a:4a:97:64:48:
                    24:d7:f0:c2:c1:31:76:d1:1b:ca:0e:29:64:63:36:
                    82:f4:9b:40:48:3e:7d:fd:35:bb:1f:bb:91:b5:39:
                    1b:fd:e7:56:f6:af:41:5a:e1:cd:66:2a:a0:bc:a3:
                    0c:de:12:af:e8:6e:a5:36:8e:82:3f:94:f6:27:23:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D8:D5:6C:29:B8:EB:31:E4:C6:4A:7A:C9:3C:E0:76:D6:F6:46:80
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8518b81d-c700-4d3f-8ef4-5abe8d348d3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:9040::/46

    Signature Algorithm: sha256WithRSAEncryption
         20:e7:fe:43:52:cb:07:22:d4:31:d5:b4:a1:e2:bd:c2:6d:57:
         d3:3e:e0:c8:12:ad:89:50:84:b1:9b:0c:bd:c5:86:87:37:44:
         cb:44:8f:e6:d3:c4:0f:73:10:fc:44:dc:1a:b2:25:ee:41:3a:
         9b:1a:e9:5c:28:ed:1d:9f:af:64:84:db:e1:ba:00:1a:fe:52:
         90:51:3b:64:47:eb:1e:50:6b:3a:12:74:1c:f2:e4:33:b6:64:
         b4:8c:48:1d:d8:45:9b:91:8b:64:42:f7:66:1f:3e:b1:9c:8b:
         a5:9a:68:0f:4e:25:b0:9a:ee:89:30:02:83:16:5a:b2:8b:5d:
         40:6d:25:24:7b:9a:95:5e:27:f5:fe:bc:0b:e9:d4:20:82:dd:
         92:f2:f3:95:88:bb:4c:f3:e2:ea:0b:7d:52:19:d0:a2:0a:ef:
         d1:56:98:22:5c:63:f4:70:98:c1:9e:db:5f:12:ee:69:95:ac:
         34:76:31:0e:8d:49:05:53:ff:5b:62:01:9d:72:30:39:7c:aa:
         db:84:c3:f3:5a:40:97:e6:e5:d2:5b:32:c6:02:63:ad:3f:f1:
         e3:86:b9:00:34:f4:a5:9b:39:9f:a1:cf:8d:9f:0b:c5:a2:72:
         9b:e3:7d:88:89:6f:38:f6:71:0f:bf:95:d3:0a:60:54:11:c3:
         69:c6:9b:ac
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUCYcGGKjALJtbQUogDyg0qNrSCpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjMxNTIxMTBaFw0yNjEwMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDUyZDdmYjNlMDhiMTk3NjI2ZDgwYzBhOTg4MWZlYzI2Zjc3NDRlYjk2NjZk
NWQ2NTI4MDY2MWM2NDYwZWY4OTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANdTMi8C8P5+S2G0Z6v+k7P/pwK5UOIPa7AvxK7+n/HJY+4VPQd2TXBTD1rm
1K9kU1lcrO1ORRtrfnbw/br3lz8kn+PUOFzcHJvACLpopFogfVJcEGhKi+Ncfci+
M2VgLHgNHy4OYqxdQ2qVpoVtwizqlPRmKHrzxK/2b4AjX0qwk3viZeWH8tFpeLdw
OuDpuXRaKiFPSyF0kVbSxaBi9BcaHUIHdry9ObBPj/pI66hIQBqAKPzkP9qn3MyZ
6EpKl2RIJNfwwsExdtEbyg4pZGM2gvSbQEg+ff01ux+7kbU5G/3nVvavQVrhzWYq
oLyjDN4Sr+hupTaOgj+U9icjr70CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRc2NVs
KbjrMeTGSnrJPOB21vZGgDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODUxOGI4MWQtYzcwMC00ZDNmLThlZjQtNWFiZThkMzQ4ZDNjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HOQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAIOf+Q1LLByLUMdW0oeK9wm1X0z7gyBKtiVCE
sZsMvcWGhzdEy0SP5tPED3MQ/ETcGrIl7kE6mxrpXCjtHZ+vZITb4boAGv5SkFE7
ZEfrHlBrOhJ0HPLkM7ZktIxIHdhFm5GLZEL3Zh8+sZyLpZpoD04lsJruiTACgxZa
sotdQG0lJHualV4n9f68C+nUIILdkvLzlYi7TPPi6gt9UhnQogrv0VaYIlxj9HCY
wZ7bXxLuaZWsNHYxDo1JBVP/W2IBnXIwOXyq24TD81pAl+bl0lsyxgJjrT/x44a5
ADT0pZs5n6HPjZ8LxaJym+N9iIlvOPZxD7+V0wpgVBHDacabrA==
-----END CERTIFICATE-----