Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c003c5ac-b21f-4a15-a460-19115830800b.roa
File:                     c003c5ac-b21f-4a15-a460-19115830800b.roa (raw, json)
Hash identifier:          c7vuBWbe7FOP2cohLPB74nsOEWW0m1d9r4OURmXmgo4=
Subject key identifier:   1F:7B:62:C2:5A:2E:A0:F1:3C:FC:A6:1C:B6:4C:47:04:6A:92:41:BF
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       56D0E733F6EA1431BB516108F9E1228F3562A903
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c003c5ac-b21f-4a15-a460-19115830800b.roa
Signing time:             Tue 21 Jul 2026 01:30:20 +0000
ROA not before:           Tue 21 Jul 2026 01:30:20 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06a:b000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d0:e7:33:f6:ea:14:31:bb:51:61:08:f9:e1:22:8f:35:62:a9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 01:30:20 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=49a2314c3187a8e709f6921a93a052cf2830663157dcf39c9560a1b76a7ae4ce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:84:ca:36:52:7b:93:11:1f:ab:9f:e4:7e:
                    04:05:42:ef:48:39:d6:2a:3c:62:2c:e2:5c:23:68:
                    fe:a9:68:25:da:23:09:0f:34:03:4e:f9:5b:37:ef:
                    a3:73:43:26:88:67:f3:86:8d:8b:d9:c2:f2:3b:88:
                    15:94:20:b6:4a:ca:b8:9e:4f:49:8c:d0:9e:68:ea:
                    9b:1d:4f:3e:1f:01:d8:86:a9:7a:f7:21:c6:c2:70:
                    d6:4c:33:c0:6f:bb:f1:e8:a1:52:88:5c:24:ef:ae:
                    3a:2c:22:ad:9a:fe:68:93:61:12:35:01:9c:b9:31:
                    53:51:1a:ff:4e:7a:8e:2c:94:0e:16:d0:9c:c2:59:
                    ff:16:f0:8d:9c:29:15:46:b8:f2:24:88:3e:18:85:
                    df:eb:dc:e9:f8:e8:10:be:59:28:ab:7f:0d:18:0f:
                    15:e0:07:85:e6:00:5f:cc:c9:e3:63:fc:6c:73:4c:
                    04:dc:5b:8f:d2:99:b7:8a:91:c6:e0:5b:2e:fd:a7:
                    89:38:2f:c2:2f:8d:61:3b:ed:70:8c:38:a4:23:b8:
                    95:c4:dc:6a:b3:fd:77:3b:03:c7:ab:4f:72:d5:f2:
                    02:71:8c:d2:c5:79:e1:0a:d0:da:99:3a:df:50:6f:
                    f2:44:ca:0f:09:9a:95:5f:d7:12:87:33:25:a1:dd:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7B:62:C2:5A:2E:A0:F1:3C:FC:A6:1C:B6:4C:47:04:6A:92:41:BF
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c003c5ac-b21f-4a15-a460-19115830800b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06a:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:fd:19:28:8e:d6:c4:1c:a8:1f:75:59:d8:dd:9a:9a:5d:f6:
         80:b7:d6:7c:0b:9d:cd:3b:19:32:7b:f6:27:ec:ba:b8:d8:ff:
         19:49:e5:02:48:0a:3a:98:82:a0:08:ad:40:9f:4a:88:68:12:
         b5:fa:6d:6e:72:e7:6b:ab:df:7a:05:ec:5d:09:f1:63:a1:c8:
         f8:8f:f9:79:36:06:71:14:7c:85:61:d5:1b:a5:8c:6a:0d:76:
         16:95:aa:a5:1d:2d:64:64:86:93:85:52:99:f1:c2:84:e6:58:
         69:c3:b8:c7:19:01:12:86:55:6a:a2:07:dd:48:10:b3:73:a7:
         10:5a:cc:da:b6:21:1d:2a:5a:b2:18:a9:ed:8d:50:4d:82:dc:
         26:cf:dd:e8:3e:df:a9:9f:99:b3:9c:64:ab:91:97:05:ac:62:
         48:43:2a:0c:3c:b8:50:f0:7b:20:c4:5e:62:ab:f6:9d:16:2e:
         df:0b:d7:69:22:e1:9d:59:46:ee:3b:fe:44:d1:c1:0c:45:3e:
         af:4e:01:0f:8e:b7:88:11:f3:1b:65:e9:c2:8b:fa:73:95:28:
         7b:3f:bd:38:5f:62:32:ec:d5:8a:c9:8f:01:d9:c0:aa:1b:6b:
         d3:6b:bd:38:cf:48:1d:49:df:8c:ea:92:36:13:25:0b:c5:eb:
         52:3e:ee:d9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUVtDnM/bqFDG7UWEI+eEijzViqQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjEwMTMwMjBaFw0yNjEwMTkyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ5YTIzMTRjMzE4N2E4ZTcwOWY2OTIxYTkzYTA1MmNmMjgzMDY2MzE1N2Rj
ZjM5Yzk1NjBhMWI3NmE3YWU0Y2UxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK32hMo2UnuTER+rn+R+BAVC70g51io8YiziXCNo/qloJdojCQ80A075Wzfv
o3NDJohn84aNi9nC8juIFZQgtkrKuJ5PSYzQnmjqmx1PPh8B2IapevchxsJw1kwz
wG+78eihUohcJO+uOiwirZr+aJNhEjUBnLkxU1Ea/056jiyUDhbQnMJZ/xbwjZwp
FUa48iSIPhiF3+vc6fjoEL5ZKKt/DRgPFeAHheYAX8zJ42P8bHNMBNxbj9KZt4qR
xuBbLv2niTgvwi+NYTvtcIw4pCO4lcTcarP9dzsDx6tPctXyAnGM0sV54QrQ2pk6
31Bv8kTKDwmalV/XEoczJaHdSCcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQfe2LC
Wi6g8Tz8phy2TEcEapJBvzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzAwM2M1YWMtYjIxZi00YTE1LWE0NjAtMTkxMTU4MzA4MDBiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Gqw
MA0GCSqGSIb3DQEBCwUAA4IBAQBg/RkojtbEHKgfdVnY3ZqaXfaAt9Z8C53NOxky
e/Yn7Lq42P8ZSeUCSAo6mIKgCK1An0qIaBK1+m1ucudrq996BexdCfFjocj4j/l5
NgZxFHyFYdUbpYxqDXYWlaqlHS1kZIaThVKZ8cKE5lhpw7jHGQEShlVqogfdSBCz
c6cQWszatiEdKlqyGKntjVBNgtwmz93oPt+pn5mznGSrkZcFrGJIQyoMPLhQ8Hsg
xF5iq/adFi7fC9dpIuGdWUbuO/5E0cEMRT6vTgEPjreIEfMbZenCi/pzlSh7P704
X2Iy7NWKyY8B2cCqG2vTa704z0gdSd+M6pI2EyULxetSPu7Z
-----END CERTIFICATE-----