Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
File:                     b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa (raw, json)
Hash identifier:          9JePQirXFTugs/OsbzhnFcCsvwEO8lAo/qWIf8hjSFY=
Subject key identifier:   63:26:4C:0A:DA:69:9B:C8:30:2A:B8:AF:ED:C1:82:A5:79:7D:2B:1E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       290BEA418709B1040EADABB103FB706BA190C0FA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
Signing time:             Thu 23 Jul 2026 15:20:25 +0000
ROA not before:           Thu 23 Jul 2026 15:20:25 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:4020::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0b:ea:41:87:09:b1:04:0e:ad:ab:b1:03:fb:70:6b:a1:90:c0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:20:25 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=f9c59eef6dd1af3335ab842187cb8ed9586b52d31b024c0218e02ef01ee0bef9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:a2:b5:12:c7:6b:10:84:69:f6:8c:6a:fb:
                    b4:a3:e3:8e:88:0f:8b:c2:20:dd:28:f7:23:3f:72:
                    f9:dc:4d:57:81:b1:7c:5a:c0:99:9f:e6:b6:eb:6b:
                    f2:a1:b5:a7:a3:e1:c7:f4:f9:0d:a1:66:d3:9f:83:
                    9c:c6:b3:fb:c2:a8:2b:f2:76:87:7e:17:60:2c:68:
                    bd:87:2d:48:99:e2:02:d1:1a:6b:a4:73:66:c8:d8:
                    01:0d:b5:ec:e9:3d:22:fd:bc:8d:e8:1a:99:b4:47:
                    01:9e:38:60:79:72:02:7a:6f:98:01:33:91:7a:21:
                    e7:14:f4:46:3f:0b:3a:b4:12:f7:3a:4f:bc:e1:8a:
                    67:bb:81:b9:a8:d3:a9:75:1b:14:ed:6f:51:8c:49:
                    cd:3c:bd:ad:b3:70:2f:91:6c:57:5f:41:7d:8e:03:
                    34:9f:d2:37:e6:d7:2c:ef:ad:09:54:77:c2:11:34:
                    b4:7d:0e:4a:94:b5:cb:c2:5d:de:0a:1e:62:36:e3:
                    07:db:1b:cb:ef:d5:07:2d:60:8d:d0:fe:8e:21:46:
                    d9:45:3d:c0:bd:04:81:e7:dc:7f:b2:19:3b:4b:f5:
                    38:0d:73:4e:a9:0b:8e:0c:49:55:56:e7:b5:ae:c1:
                    a0:27:85:81:9d:b0:01:b9:87:47:31:18:c5:9d:93:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:26:4C:0A:DA:69:9B:C8:30:2A:B8:AF:ED:C1:82:A5:79:7D:2B:1E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:4020::/46

    Signature Algorithm: sha256WithRSAEncryption
         1d:17:99:74:0e:51:df:e0:0d:69:40:aa:6e:77:0e:c1:37:d0:
         f3:4e:ab:87:d6:b5:fc:8f:e9:2d:e6:06:2d:d4:cf:14:e4:e2:
         ff:35:4f:4a:93:6e:95:26:55:f7:75:de:bb:ec:da:f0:6e:d6:
         c4:79:91:7e:05:fd:99:61:4b:52:0d:23:d8:5d:58:f6:89:0c:
         10:87:2c:3c:a4:f6:10:e1:76:c2:f5:78:ff:66:f2:43:aa:ee:
         07:e2:1c:76:02:ca:60:22:ce:22:6e:da:a1:a7:4a:22:7f:c9:
         b1:fe:3e:22:81:4f:64:e0:74:81:fd:c3:33:fe:4b:6c:45:f4:
         45:56:46:5f:b8:4e:55:e1:1e:22:2a:48:89:14:17:18:b5:27:
         a5:bd:06:9b:6a:92:d1:89:6f:90:1c:4f:d7:f6:8f:ca:ad:68:
         17:06:53:f3:b1:38:23:1a:55:d8:13:bf:31:91:61:1b:a9:b1:
         ca:de:07:39:85:d5:34:f5:44:76:06:da:cc:2e:f7:8b:fb:e4:
         84:f4:b1:c5:94:37:c7:60:ad:8f:e5:19:fd:9b:0f:96:ed:c2:
         3d:8e:89:f9:a6:42:7a:a1:c2:af:7a:d1:17:f5:45:9e:5e:ab:
         3c:42:cb:5c:2b:26:fb:ec:ab:73:5c:a7:65:ca:14:c8:2a:65:
         55:79:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----