Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e3995b-4ceb-4baf-a74d-954e9f3c5d4a.roa
File:                     d2e3995b-4ceb-4baf-a74d-954e9f3c5d4a.roa (raw, json)
Hash identifier:          bQCnBRLEqDJ4Ltr7eXtbIubMbHufFcuaAqaR6pLMtpE=
Subject key identifier:   50:01:0C:61:A9:BC:01:7F:FC:3D:1E:00:ED:FC:71:C8:C7:F1:CA:CC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0CFA17A2411F44CE87769F4CBE61DE8C6421FB7D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e3995b-4ceb-4baf-a74d-954e9f3c5d4a.roa
Signing time:             Tue 21 Jul 2026 01:30:23 +0000
ROA not before:           Tue 21 Jul 2026 01:30:23 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06a:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fa:17:a2:41:1f:44:ce:87:76:9f:4c:be:61:de:8c:64:21:fb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 01:30:23 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=242d514f9bf5e14a55d1e8e21cdd600812989178ab07a992967088b2b88c1efe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2b:57:4c:c3:8e:cd:ad:52:d0:8d:2b:41:53:
                    19:bd:af:9b:f6:45:3b:7c:fd:ca:71:87:9d:56:77:
                    f6:01:b7:62:da:cc:83:e5:ee:56:6d:a8:d9:f2:b3:
                    29:72:26:50:d3:8b:1e:91:50:67:9d:71:29:aa:94:
                    9c:b0:e1:3b:08:ec:d2:4d:aa:3f:bc:81:72:56:fb:
                    7f:d9:63:6b:76:87:4c:5b:37:cc:31:bd:e2:6a:30:
                    55:59:9b:85:8c:80:71:12:48:e5:74:e7:a6:3b:56:
                    6c:04:51:7b:04:1a:0d:56:ea:ba:e7:42:72:18:f2:
                    e9:04:03:9d:a6:28:b5:65:d4:2f:fe:b2:64:18:a5:
                    1d:fc:f2:e8:73:ad:d4:ed:da:a5:d6:f6:8e:fe:2c:
                    ec:13:18:d9:35:77:f4:c9:f4:31:85:b9:2e:b8:ab:
                    b4:c7:f7:05:2f:d0:0a:08:ac:30:3e:df:9f:8a:fb:
                    5d:99:57:a4:73:18:8c:95:4c:1e:ef:4f:20:0e:3d:
                    be:e5:07:a2:ae:43:bf:9e:1a:d5:c6:5e:da:34:ed:
                    7b:1b:78:e3:ba:c4:8d:1b:4a:7f:b9:9c:26:2e:ed:
                    be:d9:9c:a5:f4:8b:96:87:b3:af:d0:35:0b:e2:03:
                    cf:2b:65:26:9f:d6:e5:6d:ce:27:74:aa:e3:f9:a6:
                    ca:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:01:0C:61:A9:BC:01:7F:FC:3D:1E:00:ED:FC:71:C8:C7:F1:CA:CC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e3995b-4ceb-4baf-a74d-954e9f3c5d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06a:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:d5:7e:a1:4f:a3:4c:c1:e9:b8:d5:b6:a5:4d:3b:a8:7f:29:
         f1:82:26:e9:6d:70:97:ec:dd:ff:53:cc:1b:93:d9:39:6c:77:
         54:a2:72:9e:08:33:f9:8b:bf:06:65:8a:06:ea:0d:37:61:fe:
         87:bc:b9:d8:db:35:db:a1:ce:e5:7e:ca:2e:04:a8:3a:83:1a:
         9d:ca:ac:80:75:e1:0a:64:54:80:7f:2a:2a:67:e0:2f:0d:e7:
         7d:c7:c9:4e:ad:dd:f9:15:60:62:42:fe:5c:3c:b6:54:ab:4f:
         ce:d7:d8:e7:ff:74:03:33:d9:9f:f6:28:00:00:10:31:eb:aa:
         7a:48:f8:16:bf:e1:fc:2e:8d:87:b6:22:45:5a:c3:70:02:d9:
         5e:67:b9:5c:73:68:d7:3d:26:3d:99:d7:fd:73:41:a2:6f:4b:
         e6:83:20:49:0b:10:26:59:a5:00:a2:7b:d5:91:80:ab:f5:7a:
         a6:8b:dc:fc:87:ee:ee:56:e5:10:3e:39:b4:4e:60:a0:22:dc:
         5b:7c:ac:75:3f:5d:14:de:87:08:af:0a:ee:95:95:42:e1:4d:
         80:ef:da:d7:17:8d:1b:fd:90:5f:6d:f3:0c:fc:ad:64:36:df:
         0c:46:0c:15:32:71:b3:02:c1:5b:c1:a1:94:82:e9:e9:58:94:
         56:a8:1f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----