Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04034306-aaa4-40c8-9c1b-c3f1cfc23d5b.roa
File:                     04034306-aaa4-40c8-9c1b-c3f1cfc23d5b.roa (raw, json)
Hash identifier:          MgAXFHzJH2hGzf92KBCokkiKc4lOl42NpD7EGvGHk6g=
Subject key identifier:   21:D4:B0:39:B7:DD:81:BE:BC:75:8E:70:70:9A:1C:32:2B:02:45:64
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1D71D7DDF755A4B3628206CF3D4B619EA0005D01
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04034306-aaa4-40c8-9c1b-c3f1cfc23d5b.roa
Signing time:             Thu 15 Oct 2026 03:20:09 +0000
ROA not before:           Thu 15 Oct 2026 03:20:09 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d059:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:71:d7:dd:f7:55:a4:b3:62:82:06:cf:3d:4b:61:9e:a0:00:5d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 15 03:20:09 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=68751b1756472775324263a600c4199cc3c25adbe74d4278934425b170e58e66, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:53:08:f6:de:34:cd:4e:f7:c8:d7:a3:c5:
                    0a:e7:c7:79:55:31:f1:f2:71:b5:85:56:ca:94:98:
                    4a:91:75:8b:16:4d:bf:e9:f6:24:d8:6b:82:11:27:
                    4d:fa:7a:a6:7b:08:da:85:e9:f8:2e:eb:d1:6c:7a:
                    25:86:d0:e7:c8:54:64:7f:e6:0c:90:7b:8e:14:7c:
                    d6:90:70:12:a2:74:ce:9e:f9:7f:02:55:57:93:ed:
                    50:a1:db:c1:e8:ab:72:fe:88:29:16:33:21:1b:b3:
                    a1:e1:d0:2b:3a:47:5f:17:cb:a6:58:ea:fa:43:57:
                    cc:54:22:22:36:22:bd:51:40:f4:e4:2d:f4:fb:6e:
                    63:d6:d4:87:59:9f:dc:76:9b:07:c9:7e:2d:1e:60:
                    1b:05:8d:ae:6a:51:be:06:6a:d0:a7:19:2e:d8:a6:
                    89:9d:07:46:9f:e9:ec:22:68:79:7f:cb:5f:83:f5:
                    92:d7:fd:8a:6f:0d:7b:48:c3:04:02:78:4e:6a:ca:
                    91:77:4a:43:0b:33:a4:a4:03:98:84:16:37:a4:9e:
                    69:9d:d9:a7:ba:57:cb:4e:9c:be:cb:ff:93:df:22:
                    68:25:46:e1:8d:ea:18:44:86:24:1f:d1:87:c1:63:
                    4c:40:7b:a9:dc:10:f2:32:9b:1d:e5:3a:9b:92:33:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D4:B0:39:B7:DD:81:BE:BC:75:8E:70:70:9A:1C:32:2B:02:45:64
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04034306-aaa4-40c8-9c1b-c3f1cfc23d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:ee:89:3f:ea:b0:89:c3:25:7e:3c:8d:53:c8:8d:3c:d1:
         3a:92:3a:6a:6e:ec:6b:58:4a:f5:90:a5:e7:9f:83:83:74:36:
         4a:e2:0e:b4:5b:41:44:c3:ba:e7:20:2a:5b:16:c9:68:c9:a0:
         f2:9e:d0:05:d3:a8:8c:28:d3:62:a4:fb:53:b2:7c:44:2d:a1:
         24:0c:57:ab:4b:7b:44:96:95:f6:e5:51:ef:7e:e8:57:5a:58:
         68:63:72:e3:1b:51:95:9b:2d:3b:e2:79:82:f1:44:9d:25:3f:
         fc:34:1a:fa:01:cf:c1:a3:fe:74:ed:d7:0b:4d:1c:71:e8:9f:
         90:16:df:b2:5f:fe:e6:78:72:99:f2:4e:f7:ae:ca:02:13:27:
         8b:a1:1c:ae:92:54:a6:5d:f0:fc:c0:67:9d:78:01:77:ec:ed:
         cf:f4:f0:e7:54:91:5a:15:79:d3:fb:5d:4f:b1:f7:00:2e:89:
         c1:06:ed:c0:9f:c6:fb:44:9e:16:54:c5:1f:0e:61:d9:5d:dd:
         fd:d8:58:19:63:21:1a:09:78:f3:81:98:4f:3f:59:c7:e3:81:
         26:92:e0:34:2f:1b:75:6b:c2:91:e9:7d:36:4b:34:0c:b1:e0:
         ab:30:d4:1a:fd:18:91:ed:e4:0f:2a:43:bc:fa:bd:85:d2:d0:
         51:af:99:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----