Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1d8b868-c959-421c-83d1-d5235f6ed47e.roa
File:                     f1d8b868-c959-421c-83d1-d5235f6ed47e.roa (raw, json)
Hash identifier:          HeMKTHWjZJaFlBSH6UhEhU1vPI6QavsAKExZugY+YEI=
Subject key identifier:   FF:45:CB:F9:3C:98:66:64:9E:7A:12:F7:53:5C:7C:33:86:F1:C5:7E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5181BD4E9AECAAFABBE88D59F516F4242BCD05BF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1d8b868-c959-421c-83d1-d5235f6ed47e.roa
Signing time:             Thu 16 Jul 2026 00:40:29 +0000
ROA not before:           Thu 16 Jul 2026 00:40:29 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d06d:60c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:81:bd:4e:9a:ec:aa:fa:bb:e8:8d:59:f5:16:f4:24:2b:cd:05:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 16 00:40:29 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=f44167792e79a0ef4e8d59a9db3346e17517e6d217cc52c57abe788ca191f001, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:4c:b3:a1:1f:88:15:9f:86:31:21:e4:61:
                    28:e4:c3:db:61:0c:69:8a:be:0c:b7:63:c3:f9:92:
                    91:10:c2:2e:bb:13:db:e6:c0:58:f2:4b:6d:b6:c1:
                    fc:85:b0:75:07:0d:9a:73:d4:77:81:3c:cc:7b:25:
                    dd:e1:83:cc:50:0c:c1:8e:2e:2f:9a:74:6a:5d:36:
                    4c:10:12:49:81:45:5e:20:85:d9:d8:bf:d2:48:d5:
                    bf:9c:cb:a1:af:4e:ce:33:30:14:d2:26:dc:90:bb:
                    46:ff:a0:c9:83:21:ac:45:ec:16:24:c2:78:c4:22:
                    7d:42:86:6f:2c:61:67:e3:a8:b5:d5:b9:41:2c:c9:
                    88:82:91:ee:50:61:b7:83:f2:da:bd:93:35:d0:ee:
                    16:c0:3f:1f:82:79:c1:e7:d0:5d:56:3e:7b:92:46:
                    ad:f2:7f:a8:2a:f1:93:5f:ed:7e:a6:d6:f0:8e:25:
                    92:ce:db:4f:b2:9b:4c:d8:5a:40:db:5e:c8:05:76:
                    1d:2f:b2:f9:25:d0:b1:1a:bc:fd:23:e6:d7:87:84:
                    ae:ca:00:a1:f0:c8:d1:fe:97:bb:fb:57:b7:cd:e3:
                    b1:f1:dd:bc:1d:4a:94:55:4f:ee:b0:46:a9:4f:a3:
                    e5:0b:65:27:90:56:07:15:cd:27:dd:90:3b:c2:32:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:45:CB:F9:3C:98:66:64:9E:7A:12:F7:53:5C:7C:33:86:F1:C5:7E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1d8b868-c959-421c-83d1-d5235f6ed47e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06d:60c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:0d:a1:6e:89:a0:e6:ab:0f:c9:e2:38:d3:82:ba:87:ad:65:
         70:8d:33:09:45:0a:b2:c1:78:27:ef:10:81:b1:e2:02:9d:33:
         50:fa:20:52:2f:f7:34:b0:1f:7c:7c:cb:3b:20:68:c8:c5:78:
         3e:7d:95:f4:b4:ac:76:84:fb:30:ea:d8:b0:5d:04:6d:f3:c4:
         33:9e:86:6d:b9:5a:6d:34:68:c2:ba:6c:f4:dc:7f:66:d8:5f:
         de:99:fa:ff:76:d1:bf:d9:21:2d:21:ec:90:6d:79:a8:43:a9:
         29:ee:9e:30:cc:63:e0:ec:04:79:c5:3b:fb:4c:ab:bb:26:ce:
         36:50:92:e2:58:35:2b:20:9e:87:75:e7:fd:e7:3c:5a:da:1a:
         a2:0d:1f:25:da:e9:81:5c:d7:04:2d:c6:9c:b7:72:4d:cb:42:
         be:33:e5:65:cb:e9:7a:9e:71:49:50:2b:de:55:57:e7:b0:03:
         e4:46:fc:ea:0d:80:3e:35:0e:7d:e7:7c:31:3b:ee:7f:43:a9:
         83:f8:89:c1:fa:46:c7:65:66:44:ca:0f:b5:2c:9d:80:85:04:
         f4:6f:37:41:48:2b:e5:90:c2:94:42:bc:d6:2e:6b:07:e3:04:
         69:24:7a:18:38:c7:54:e8:8c:c9:e6:29:69:55:63:67:53:cb:
         89:18:b0:94
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUUYG9Tprsqvq76I1Z9Rb0JCvNBb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MTYwMDQwMjlaFw0yNjEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQGY0NDE2Nzc5MmU3OWEwZWY0ZThkNTlhOWRiMzM0NmUxNzUxN2U2ZDIxN2Nj
NTJjNTdhYmU3ODhjYTE5MWYwMDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMGDTLOhH4gVn4YxIeRhKOTD22EMaYq+DLdjw/mSkRDCLrsT2+bAWPJLbbbB
/IWwdQcNmnPUd4E8zHsl3eGDzFAMwY4uL5p0al02TBASSYFFXiCF2di/0kjVv5zL
oa9OzjMwFNIm3JC7Rv+gyYMhrEXsFiTCeMQifUKGbyxhZ+OotdW5QSzJiIKR7lBh
t4Py2r2TNdDuFsA/H4J5wefQXVY+e5JGrfJ/qCrxk1/tfqbW8I4lks7bT7KbTNha
QNteyAV2HS+y+SXQsRq8/SPm14eErsoAofDI0f6Xu/tXt83jsfHdvB1KlFVP7rBG
qU+j5QtlJ5BWBxXNJ92QO8IyvxMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT/Rcv5
PJhmZJ56EvdTXHwzhvHFfjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjFkOGI4NjgtYzk1OS00MjFjLTgzZDEtZDUyMzVmNmVkNDdlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0G1g
wDANBgkqhkiG9w0BAQsFAAOCAQEAEg2hbomg5qsPyeI404K6h61lcI0zCUUKssF4
J+8QgbHiAp0zUPogUi/3NLAffHzLOyBoyMV4Pn2V9LSsdoT7MOrYsF0EbfPEM56G
bblabTRowrps9Nx/Zthf3pn6/3bRv9khLSHskG15qEOpKe6eMMxj4OwEecU7+0yr
uybONlCS4lg1KyCeh3Xn/ec8Wtoaog0fJdrpgVzXBC3GnLdyTctCvjPlZcvpep5x
SVAr3lVX57AD5Eb86g2APjUOfed8MTvuf0Opg/iJwfpGx2VmRMoPtSydgIUE9G83
QUgr5ZDClEK81i5rB+MEaSR6GDjHVOiMyeYpaVVjZ1PLiRiwlA==
-----END CERTIFICATE-----