Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93fd362d-5e7e-4f59-bdb8-e21b80ea7d5a.roa
File:                     93fd362d-5e7e-4f59-bdb8-e21b80ea7d5a.roa (raw, json)
Hash identifier:          pa1RJZVJ+dHNOnSTtMt84eV6x/YFSIUGVdgk9RP/000=
Subject key identifier:   50:55:26:7F:EC:B2:FB:BC:30:18:07:07:8D:61:8A:04:5E:D5:CB:1F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1893C6B0C6BC42BE8E16A4364E2E1A0796D6B8A2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93fd362d-5e7e-4f59-bdb8-e21b80ea7d5a.roa
Signing time:             Mon 22 Jun 2026 02:40:09 +0000
ROA not before:           Mon 22 Jun 2026 02:40:09 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06b:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:93:c6:b0:c6:bc:42:be:8e:16:a4:36:4e:2e:1a:07:96:d6:b8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 22 02:40:09 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=4531fbb6328872699b69d591541dd65fe13c96743608406e1d3b9041c92d2613, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:96:cb:8c:5c:51:47:d9:be:29:76:22:dc:
                    57:3a:08:59:a8:f6:86:84:be:3a:79:12:53:c3:f8:
                    98:ac:87:f6:33:fc:78:72:78:e8:84:67:0b:b5:12:
                    98:2f:9d:f0:7a:c1:90:62:68:3e:87:e6:e4:13:0f:
                    da:9b:70:53:01:ab:8a:a4:6a:ac:61:f1:a3:27:dc:
                    7c:c3:2b:2c:98:9c:24:0f:35:43:e0:16:74:6a:03:
                    dc:7b:fc:93:51:8f:84:f8:d0:1b:72:ac:48:24:72:
                    d8:1e:cd:de:47:83:00:90:bc:5f:f9:2d:bb:8d:6d:
                    e4:de:b2:12:57:4c:03:55:bd:85:69:29:f7:4a:15:
                    91:41:d3:b9:a2:cf:a8:a0:e3:af:9c:a0:e9:d2:42:
                    58:a6:d2:a9:9e:70:c8:5e:f3:58:72:63:4f:51:af:
                    5e:ec:0f:95:0f:de:de:c6:c3:34:a9:37:3a:c3:e5:
                    f0:8e:dc:0e:1e:f3:e9:5a:5b:e5:44:19:62:33:b2:
                    3e:9f:11:3b:44:2b:fd:73:db:55:b9:c7:90:bc:e4:
                    68:96:db:94:e1:46:75:90:12:b0:c9:f6:4b:e6:92:
                    48:b7:50:c6:39:af:13:7e:d5:44:a5:6c:9c:e8:f3:
                    f5:9a:0f:cb:73:94:3e:a3:6e:58:85:55:6a:4a:17:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:55:26:7F:EC:B2:FB:BC:30:18:07:07:8D:61:8A:04:5E:D5:CB:1F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93fd362d-5e7e-4f59-bdb8-e21b80ea7d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06b:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:31:6d:2e:17:c0:f9:c0:1e:87:2f:ac:32:fb:26:76:b2:57:
         4c:04:c8:2b:88:b5:78:d5:64:ac:9f:dd:66:61:17:4b:1b:95:
         93:81:4d:06:ee:e5:23:53:aa:d1:fe:7c:71:16:9a:a3:c5:7f:
         8f:b0:07:78:0c:7b:a6:1b:df:1c:2e:e2:bf:3b:dc:a4:68:b4:
         c4:1d:a1:a0:bd:20:3c:0e:74:a8:64:0b:3b:c1:25:17:5f:4d:
         23:7a:c8:f7:c5:89:d1:23:59:68:11:29:5d:c4:03:3e:e5:85:
         f3:25:92:7a:df:5a:d0:3f:8a:49:94:8a:76:57:27:d0:ce:4e:
         6a:75:6e:c0:5a:a8:87:c3:b3:83:81:9a:7d:cb:ea:d5:05:e3:
         5a:07:25:3e:52:fe:27:e1:b2:02:6d:55:81:d9:f5:65:5a:dc:
         22:c9:72:d0:d3:5a:ca:01:7e:9e:36:0d:29:87:07:59:6f:2e:
         2d:c4:4b:03:52:b1:bb:e2:a2:3c:46:00:28:fb:2a:05:ce:b7:
         96:66:b0:18:cf:8c:7e:b6:ad:81:04:58:d4:8c:c2:fa:f9:e0:
         26:eb:cb:4c:a1:90:72:c4:ae:ec:9d:46:50:e3:2e:59:f4:b8:
         01:9c:20:40:ea:f4:d3:c5:b0:69:79:f5:f4:aa:fa:c1:ad:32:
         ac:e0:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----