Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e68fbde-eead-4e29-b902-4eed053693ac.roa
File:                     0e68fbde-eead-4e29-b902-4eed053693ac.roa (raw, json)
Hash identifier:          R5AibHvRFGcR8RsdQpKjifXTke+zM3nR9WWkLkqyn5M=
Subject key identifier:   A4:7C:5D:6F:3C:5C:68:C2:60:9C:B3:A0:24:4A:0E:47:79:AA:F2:3D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       04B526EFDD40ADB12BA82D37904D81EEDB855566
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e68fbde-eead-4e29-b902-4eed053693ac.roa
Signing time:             Mon 26 Oct 2026 04:40:55 +0000
ROA not before:           Mon 26 Oct 2026 04:40:55 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01b::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b5:26:ef:dd:40:ad:b1:2b:a8:2d:37:90:4d:81:ee:db:85:55:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:55 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=6f6adb497914e1775cde52df7dcb6f7178d0f6e06769e9691930e11cded79bef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:56:12:71:25:ba:ec:e6:ac:2e:b1:d5:a3:65:
                    60:7b:3c:14:77:48:26:85:73:9b:c7:58:48:cf:17:
                    43:3e:06:a2:1b:7d:ed:c5:ca:65:f4:93:71:ab:0b:
                    a3:47:94:b7:af:80:d8:29:3f:20:b0:f1:87:6e:79:
                    42:b7:70:a5:ca:7d:45:6d:76:3f:a5:67:ff:06:d9:
                    06:cf:e6:96:0b:b7:38:be:26:3e:34:08:09:50:82:
                    7c:6e:0a:e8:19:f4:62:98:2e:d9:29:c7:bc:2b:8b:
                    c4:59:75:02:5d:aa:2b:cd:db:da:68:3a:10:f2:3c:
                    ab:a5:ed:09:bb:f1:07:0c:4c:fc:af:2c:63:7b:2c:
                    17:6f:6b:0e:8d:cc:8b:f9:26:f2:79:0e:13:65:d7:
                    21:12:5d:a0:3f:ad:38:bf:42:35:65:9c:e8:90:03:
                    e2:60:d3:20:42:aa:4a:a4:b6:8b:2e:d1:34:a9:b7:
                    54:68:c1:98:59:49:44:ea:6f:8c:b4:2b:31:09:7a:
                    4c:9a:59:5d:c6:0c:55:d5:42:50:6e:f2:0f:31:b8:
                    dd:77:2c:94:7a:18:12:98:e8:d6:74:f2:a6:24:2a:
                    6c:9c:eb:0e:74:89:6a:f2:31:2b:aa:d8:bb:34:26:
                    c5:5d:47:37:5e:f3:f9:9d:87:94:d6:08:b2:8b:46:
                    24:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7C:5D:6F:3C:5C:68:C2:60:9C:B3:A0:24:4A:0E:47:79:AA:F2:3D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e68fbde-eead-4e29-b902-4eed053693ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01b::/36

    Signature Algorithm: sha256WithRSAEncryption
         23:cf:27:2c:82:0a:90:9c:0a:54:3a:b7:9f:2e:d7:cf:26:62:
         0d:3d:d1:17:42:5f:18:95:19:f0:eb:07:d0:78:a0:cc:8a:99:
         89:4e:51:85:62:2c:38:6a:aa:fa:ea:2e:a8:c7:f8:86:7c:cb:
         70:8f:f6:93:ef:74:0c:e5:5f:96:9d:d3:49:9d:5a:f8:f1:c7:
         60:0e:a2:e6:76:b9:2f:62:9c:04:c5:e6:46:54:d9:a6:28:56:
         b1:4f:58:1b:d5:67:6e:f3:59:c0:61:3d:da:31:a8:4f:56:98:
         d8:35:cc:d8:00:1d:b2:50:90:e5:c8:9c:28:05:2d:40:69:95:
         51:20:b1:55:a7:e8:f8:d7:8e:5d:39:3c:26:5d:1d:9c:64:57:
         6e:fb:2a:8f:fe:d7:15:e1:6e:2b:c9:35:55:cc:2d:42:4a:30:
         65:7a:fc:1a:d1:3e:3e:6b:1d:be:94:bd:32:63:ea:b7:4f:24:
         1a:c1:09:15:78:d7:05:e7:ea:6c:b1:12:5b:1b:97:3f:2a:f3:
         c4:74:7f:de:5e:11:ed:dd:ae:c4:0b:1d:6b:ce:8b:94:4a:81:
         50:33:14:34:fe:86:d0:ec:18:e1:2f:c5:86:71:b3:d0:2f:09:
         85:f5:73:ed:f5:76:21:63:1f:54:47:86:2f:f7:34:8c:32:a9:
         d0:82:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----