Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa
File:                     adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa (raw, json)
Hash identifier:          SX9APn37QLJ3z4ma7aLknGfI1rFhYGbCXX7S3nj6yAM=
Subject key identifier:   88:84:41:4C:A8:51:3F:87:FE:5E:A3:90:6D:02:11:8F:E8:A7:B0:3C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1ABE201F3C1B5E402F12F81D8C97EBD133C29D32
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa
Signing time:             Tue 21 Jul 2026 01:30:22 +0000
ROA not before:           Tue 21 Jul 2026 01:30:22 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06a:4020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:be:20:1f:3c:1b:5e:40:2f:12:f8:1d:8c:97:eb:d1:33:c2:9d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 01:30:22 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=86ad084bbd4db219e2eb79920f947dc71f1d5e4f24bc181538cf5a959fd1a79c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a7:bf:3f:77:55:25:a8:4f:9e:8c:1c:2b:94:
                    e1:d5:f1:44:ce:80:74:b8:47:50:6f:87:90:26:66:
                    ea:8e:e4:67:ad:4c:37:e2:65:77:06:e4:22:55:59:
                    11:73:f5:d6:84:50:7d:88:3a:00:2c:3a:9e:8f:6c:
                    91:90:81:62:96:b6:57:69:a9:32:8c:c5:52:b8:9e:
                    0a:06:bf:59:68:81:fc:47:1d:e4:17:61:ee:1a:b5:
                    3c:e1:b2:dc:5d:ee:c7:8a:62:7f:25:75:0c:b4:a5:
                    93:50:c6:50:61:e3:3f:64:6d:5d:75:04:6f:0c:03:
                    97:03:d5:d5:98:c8:d4:d4:09:c3:fa:d7:79:14:c5:
                    44:b1:7f:3a:fa:0d:c6:86:14:94:91:a6:1d:d4:ea:
                    0c:85:b1:85:60:28:77:f6:ab:86:91:6c:4f:71:9e:
                    ea:d3:65:e0:4a:7b:6d:1f:d5:64:31:b1:57:e7:d3:
                    ca:2a:f1:a8:97:d3:9e:9f:4a:72:0d:b4:f1:02:46:
                    80:98:53:b0:ef:90:0a:77:7b:b6:ea:42:4a:23:c2:
                    91:94:ae:cf:a4:81:81:ce:b4:0a:5f:b1:a9:49:2c:
                    da:4a:ab:9c:21:fc:50:ee:5e:24:24:36:bd:33:9d:
                    9e:ce:ed:a3:a6:65:b0:a8:81:0a:47:d7:d2:6a:ae:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:84:41:4C:A8:51:3F:87:FE:5E:A3:90:6D:02:11:8F:E8:A7:B0:3C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06a:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:39:9d:6e:da:de:1f:a4:c1:dc:2d:04:69:27:43:77:0d:93:
         e4:7c:3a:90:44:c4:16:7f:1b:02:75:ea:52:8f:40:c1:c2:02:
         f9:8d:91:6f:0d:4f:92:98:1c:dc:fb:6d:44:21:a7:63:67:d9:
         b5:b1:ef:fb:e1:c8:87:29:bc:67:d2:29:ab:f0:15:d5:a5:36:
         df:33:4d:03:ea:42:d9:08:f8:cb:34:93:e7:ee:e0:23:fe:44:
         ea:ea:7c:a7:64:97:5c:2c:77:49:5f:5b:e8:2f:6d:b8:f3:2f:
         42:97:4b:0e:a3:5e:6e:65:87:b8:68:37:07:7f:dd:99:86:df:
         8d:f6:ff:db:28:99:83:5e:ba:0f:3b:a3:06:48:cb:09:8f:7f:
         83:0e:8b:1f:8d:c8:c6:18:75:01:ad:bf:5c:bc:c1:6d:d2:32:
         8a:b4:ae:2b:29:fc:e2:cd:84:4a:97:73:31:c9:7a:1a:83:4c:
         74:ae:d8:c7:47:6d:22:db:9d:a3:7c:eb:66:52:aa:62:09:41:
         b8:b1:a9:6c:bf:df:17:f9:ec:35:d0:92:fc:3a:50:24:c6:5d:
         24:c2:0a:3f:d8:f2:7e:0d:7c:ca:75:97:1a:4c:54:42:7d:d7:
         55:e2:dc:de:7f:e2:e3:b4:3f:e0:72:02:90:b6:a5:3f:9a:dd:
         02:80:a2:57
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUGr4gHzwbXkAvEvgdjJfr0TPCnTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjEwMTMwMjJaFw0yNjEwMTkyMzU5NTlaMHoxSTBHBgNV
BAUTQDg2YWQwODRiYmQ0ZGIyMTllMmViNzk5MjBmOTQ3ZGM3MWYxZDVlNGYyNGJj
MTgxNTM4Y2Y1YTk1OWZkMWE3OWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJOnvz93VSWoT56MHCuU4dXxRM6AdLhHUG+HkCZm6o7kZ61MN+JldwbkIlVZ
EXP11oRQfYg6ACw6no9skZCBYpa2V2mpMozFUrieCga/WWiB/Ecd5Bdh7hq1POGy
3F3ux4pifyV1DLSlk1DGUGHjP2RtXXUEbwwDlwPV1ZjI1NQJw/rXeRTFRLF/OvoN
xoYUlJGmHdTqDIWxhWAod/arhpFsT3Ge6tNl4Ep7bR/VZDGxV+fTyirxqJfTnp9K
cg208QJGgJhTsO+QCnd7tupCSiPCkZSuz6SBgc60Cl+xqUks2kqrnCH8UO5eJCQ2
vTOdns7to6ZlsKiBCkfX0mquCpMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSIhEFM
qFE/h/5eo5BtAhGP6KewPDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWRhZjM2NmYtYzk4ZC00YTBiLTg2YWMtNGU2YjZlOTVhMGI1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GpA
IDANBgkqhkiG9w0BAQsFAAOCAQEAyTmdbtreH6TB3C0EaSdDdw2T5Hw6kETEFn8b
AnXqUo9AwcIC+Y2Rbw1Pkpgc3PttRCGnY2fZtbHv++HIhym8Z9Ipq/AV1aU23zNN
A+pC2Qj4yzST5+7gI/5E6up8p2SXXCx3SV9b6C9tuPMvQpdLDqNebmWHuGg3B3/d
mYbfjfb/2yiZg166DzujBkjLCY9/gw6LH43Ixhh1Aa2/XLzBbdIyirSuKyn84s2E
SpdzMcl6GoNMdK7Yx0dtItudo3zrZlKqYglBuLGpbL/fF/nsNdCS/DpQJMZdJMIK
P9jyfg18ynWXGkxUQn3XVeLc3n/i47Q/4HICkLalP5rdAoCiVw==
-----END CERTIFICATE-----