Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/130bb518-ca36-43ed-b8dd-0345f5c1b3b1.roa
File:                     130bb518-ca36-43ed-b8dd-0345f5c1b3b1.roa (raw, json)
Hash identifier:          ehpAaM3DBuxJgz1fabp9KNZO70GhgoO88fSDLiMN/HA=
Subject key identifier:   A9:E8:A1:BF:29:1B:69:CA:E2:7B:D0:83:D2:AF:E9:43:27:02:07:B2
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       329FA7D3795EFF9B0FC3CB78C3267A946520B3C3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/130bb518-ca36-43ed-b8dd-0345f5c1b3b1.roa
Signing time:             Thu 15 Oct 2026 03:30:31 +0000
ROA not before:           Thu 15 Oct 2026 03:30:31 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d059:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9f:a7:d3:79:5e:ff:9b:0f:c3:cb:78:c3:26:7a:94:65:20:b3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 15 03:30:31 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=9ec0d0278669a598ee59a3726bc494f3ee74e62f822b06e54ddf026401e5ce00, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:a6:61:c2:55:66:7c:12:63:46:f6:29:e9:
                    5c:8d:63:81:c0:40:06:fe:a5:ee:25:25:dd:2d:a7:
                    31:38:f5:7b:97:35:48:83:5f:58:dd:6d:be:f3:85:
                    e6:82:e7:56:1b:69:71:16:ed:60:88:2a:d5:f7:2b:
                    bf:89:3a:86:b0:37:cb:58:1d:69:2a:fc:4b:ed:0d:
                    d2:9c:30:af:64:81:7a:73:46:3a:cc:34:93:c0:aa:
                    fe:35:14:c4:20:8c:06:48:e0:c4:43:ec:7e:a8:4f:
                    66:77:4b:45:b0:8b:93:88:b5:19:f6:92:4a:0d:f2:
                    ad:e7:36:1d:5f:f9:f5:f4:39:33:89:2b:2f:29:eb:
                    00:f8:14:f7:17:79:57:43:58:f2:fc:84:2a:50:f8:
                    f1:f3:b2:e1:c5:f8:9e:31:8e:e0:1c:70:27:dc:e9:
                    34:08:b7:a6:6a:64:58:48:19:e4:4b:bb:23:7b:0c:
                    22:ea:96:a2:60:ce:30:b9:ac:f1:a7:48:03:30:9a:
                    c5:25:ac:8d:9d:64:4d:d2:7a:2a:bd:f4:fb:35:78:
                    49:ed:15:44:8b:dd:8f:de:bc:9a:2f:51:ba:8e:04:
                    41:96:8e:4b:8f:2e:4a:89:af:c6:9f:8c:bf:8a:e3:
                    2d:de:47:75:06:42:e3:2e:a2:93:b1:b2:5d:1c:1f:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E8:A1:BF:29:1B:69:CA:E2:7B:D0:83:D2:AF:E9:43:27:02:07:B2
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/130bb518-ca36-43ed-b8dd-0345f5c1b3b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:4e:fe:87:bd:6a:af:45:4a:9c:3e:0e:93:11:b8:2d:2b:b7:
         df:42:af:79:19:a9:8e:69:a9:cb:a2:72:06:ef:50:d3:2c:d5:
         26:bf:7a:77:41:ed:d9:6c:79:fd:88:b3:a9:66:25:35:e7:7a:
         7f:68:36:8b:4e:d3:d2:3f:09:43:03:f8:ab:f8:e3:47:07:6a:
         4d:b5:2e:65:f2:2a:da:cb:7f:80:69:41:3b:b3:ae:63:70:95:
         c7:0a:ea:f1:86:e6:cc:87:2c:04:fb:df:15:7c:12:fb:71:7d:
         52:96:d4:bf:c1:e1:67:1a:ff:c2:d1:20:38:89:45:84:7a:a4:
         c4:76:f6:eb:d5:2d:1d:f0:14:c6:38:a5:50:63:bc:25:40:b3:
         cc:b1:69:f8:07:ca:b3:8e:37:c3:fd:49:05:43:3c:d9:71:15:
         d3:fb:fb:93:6c:3c:82:05:35:68:2d:7a:e2:f0:4e:33:91:be:
         45:00:82:1b:78:48:b7:1f:64:ea:54:ec:ad:32:4e:74:ef:59:
         ee:8e:be:94:f2:b9:87:cf:75:cd:e4:a3:8f:ef:ac:25:6e:a8:
         9c:33:13:cd:7a:c8:f1:4e:40:b1:21:a6:35:aa:3a:85:42:eb:
         7c:c5:0d:7a:78:65:a4:ff:3d:df:95:4e:65:ac:9b:c5:0e:b8:
         1e:a8:8a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----