Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa
File:                     cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa (raw, json)
Hash identifier:          tGdcmEZDpDIFFMS+bpF+KQpXbrvL5Dgw9BKgDUGX6Ho=
Subject key identifier:   7D:EC:21:D7:39:7E:92:00:CE:DF:2E:95:58:41:11:0C:3B:37:03:79
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7ECADE5403EB33A159BCFF8956128B675B13889F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa
Signing time:             Tue 21 Jul 2026 01:30:18 +0000
ROA not before:           Tue 21 Jul 2026 01:30:18 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06a:c020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ca:de:54:03:eb:33:a1:59:bc:ff:89:56:12:8b:67:5b:13:88:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 01:30:18 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=d53c096685859ea2c46e93a826779e23cc9f869bc9025fc9a5a3c233afada641, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:c1:b4:dc:95:01:10:42:bf:b7:ff:00:59:
                    d3:ee:38:67:65:19:c4:55:69:83:8e:2c:60:1b:9a:
                    05:06:8a:e4:56:51:b8:b1:45:97:ba:82:90:27:df:
                    99:ee:38:5b:f6:a9:24:eb:ad:20:02:f2:c3:bc:61:
                    c8:53:34:c6:4a:9b:76:5a:59:54:2c:a6:51:e8:3c:
                    54:d8:19:82:b3:06:93:f2:1a:54:fb:4b:a1:b2:84:
                    6b:70:a2:4a:7f:2f:b5:ea:8c:44:94:35:ac:95:87:
                    f9:2a:3b:ea:c5:c9:18:5d:ef:bb:bd:b8:40:16:84:
                    66:84:98:e1:01:65:f3:fa:64:23:fa:61:f6:e7:17:
                    01:08:fb:4b:7b:4a:16:e3:81:b3:c5:e9:84:48:ea:
                    8f:f0:a5:31:35:d9:d0:8a:41:f8:24:a8:bb:6b:fa:
                    44:91:5c:86:47:c2:1d:ec:6e:6e:49:88:cf:b8:57:
                    81:2a:d6:ba:b0:12:6a:85:cd:90:da:6c:90:33:f1:
                    ab:eb:81:d5:ed:36:86:32:ac:19:d2:8a:e6:16:7f:
                    3c:ae:e7:8f:b6:88:a5:ff:16:4c:ff:62:96:e7:26:
                    7d:91:a1:ac:b8:5d:9f:93:af:e5:61:75:eb:37:36:
                    8b:51:54:04:18:8d:9e:53:41:cd:68:94:64:f1:7f:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EC:21:D7:39:7E:92:00:CE:DF:2E:95:58:41:11:0C:3B:37:03:79
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06a:c020::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:a5:6c:36:22:a8:b2:cb:0e:ca:1a:c5:12:7c:6d:a6:36:9d:
         50:90:58:77:c5:f3:7a:31:03:06:62:cd:df:6b:16:62:ad:d2:
         4c:26:19:9e:c2:fc:7c:c9:54:7c:20:0d:73:8d:53:b4:da:d0:
         94:60:c0:7e:b4:9c:e7:9f:36:cf:17:f0:dd:69:ed:7f:fc:c3:
         b4:46:84:c6:17:23:ab:f9:ae:51:a4:2e:dc:6d:8b:7d:8a:d4:
         c4:2b:18:dc:20:76:12:c2:0b:de:eb:c0:78:dd:2b:9f:25:6f:
         21:18:2f:28:f5:a9:84:ea:b7:ec:90:cf:1f:c1:02:48:13:61:
         66:85:fc:57:4e:92:a0:f7:a7:64:20:54:7d:c3:ba:33:52:8c:
         69:d1:fa:86:8d:7b:3d:ef:8e:3f:32:01:e7:28:b3:ba:1b:05:
         c5:4b:71:53:12:30:fd:29:3a:00:0a:aa:4c:7b:b8:54:9d:57:
         3c:b3:5e:04:b9:a4:fe:1b:49:20:af:79:cc:52:f9:30:ad:71:
         5c:bb:6f:39:be:c4:81:f1:bb:af:ea:ae:e0:25:44:ec:c4:aa:
         d3:9d:46:c4:db:05:4e:af:45:f1:97:e8:57:2b:74:56:f3:db:
         d1:7c:e5:8f:10:ec:6f:9e:a8:59:20:26:73:7b:6b:80:55:cb:
         f2:87:f2:12
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfsreVAPrM6FZvP+JVhKLZ1sTiJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjEwMTMwMThaFw0yNjEwMTkyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ1M2MwOTY2ODU4NTllYTJjNDZlOTNhODI2Nzc5ZTIzY2M5Zjg2OWJjOTAy
NWZjOWE1YTNjMjMzYWZhZGE2NDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/UwbTclQEQQr+3/wBZ0+44Z2UZxFVpg44sYBuaBQaK5FZRuLFFl7qCkCff
me44W/apJOutIALyw7xhyFM0xkqbdlpZVCymUeg8VNgZgrMGk/IaVPtLobKEa3Ci
Sn8vteqMRJQ1rJWH+So76sXJGF3vu724QBaEZoSY4QFl8/pkI/ph9ucXAQj7S3tK
FuOBs8XphEjqj/ClMTXZ0IpB+CSou2v6RJFchkfCHexubkmIz7hXgSrWurASaoXN
kNpskDPxq+uB1e02hjKsGdKK5hZ/PK7nj7aIpf8WTP9ilucmfZGhrLhdn5Ov5WF1
6zc2i1FUBBiNnlNBzWiUZPF/mkMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR97CHX
OX6SAM7fLpVYQREMOzcDeTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2Q0N2E1YTItNWJiNC00ZmUxLWJkNTktN2Y2NGVkNGJmYTJiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GrA
IDANBgkqhkiG9w0BAQsFAAOCAQEAqKVsNiKosssOyhrFEnxtpjadUJBYd8XzejED
BmLN32sWYq3STCYZnsL8fMlUfCANc41TtNrQlGDAfrSc5582zxfw3Wntf/zDtEaE
xhcjq/muUaQu3G2LfYrUxCsY3CB2EsIL3uvAeN0rnyVvIRgvKPWphOq37JDPH8EC
SBNhZoX8V06SoPenZCBUfcO6M1KMadH6ho17Pe+OPzIB5yizuhsFxUtxUxIw/Sk6
AAqqTHu4VJ1XPLNeBLmk/htJIK95zFL5MK1xXLtvOb7EgfG7r+qu4CVE7MSq051G
xNsFTq9F8ZfoVyt0VvPb0XzljxDsb56oWSAmc3trgFXL8ofyEg==
-----END CERTIFICATE-----