Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c60b75-8947-47da-9c6d-7045cbbbea55.roa
File:                     14c60b75-8947-47da-9c6d-7045cbbbea55.roa (raw, json)
Hash identifier:          nX5qynrceNW2uVy1nDBSgVHksih0gy7VwqIJgOXIwCU=
Subject key identifier:   86:D1:B3:13:CF:62:79:D5:CC:84:E9:08:46:2C:2C:08:CD:CC:1D:D9
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       67A2B431C1670F93C61AC8A5B2955B3395C5F8C7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c60b75-8947-47da-9c6d-7045cbbbea55.roa
Signing time:             Mon 26 Oct 2026 04:40:08 +0000
ROA not before:           Mon 26 Oct 2026 04:40:08 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06f:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a2:b4:31:c1:67:0f:93:c6:1a:c8:a5:b2:95:5b:33:95:c5:f8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:08 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=fefc04ec7486ec473f8e4761c9956f75eed0957c4d034e525e52a51ac7fad1ef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:b1:13:25:1f:2a:09:a3:10:63:84:91:c3:
                    08:be:a8:18:6a:d5:f8:6f:fb:32:4d:69:8d:4a:89:
                    b4:24:9b:17:07:e3:58:a3:18:a2:2e:8f:56:bd:3d:
                    48:82:03:3b:14:ab:43:de:39:c5:aa:e0:54:bd:c2:
                    0a:d9:04:b8:83:d9:f9:68:f5:d3:95:eb:bf:02:4a:
                    37:b8:97:8f:cb:37:c8:87:10:aa:fa:b4:7c:c9:b2:
                    79:8b:7b:fe:d8:e1:94:6e:2f:17:15:5a:27:66:f5:
                    82:c2:4f:04:fe:6a:97:a6:8a:a4:56:5e:93:db:9f:
                    27:9c:c9:9a:51:78:a1:ad:c5:38:c5:7b:8e:40:22:
                    50:c2:ef:d9:e2:cd:5f:8b:51:fc:a7:ca:40:07:0e:
                    41:5b:d4:80:46:35:5e:d4:12:a1:28:ee:fe:bb:61:
                    82:18:b0:68:02:1d:da:63:8b:86:ff:61:d6:b1:80:
                    cb:d7:db:95:30:f7:1c:19:2e:15:79:cf:3a:4d:33:
                    9f:43:57:1f:fb:3d:ed:8a:cc:08:9b:98:d0:39:ea:
                    da:75:3c:87:04:e9:ea:74:6c:9a:e2:a4:a4:5c:55:
                    b0:0e:f7:22:61:13:61:1b:e3:83:75:dd:f4:2e:2b:
                    26:da:01:62:06:f2:6d:9d:1c:7c:ce:e9:da:e2:e7:
                    da:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D1:B3:13:CF:62:79:D5:CC:84:E9:08:46:2C:2C:08:CD:CC:1D:D9
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c60b75-8947-47da-9c6d-7045cbbbea55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:5b:4a:fb:83:56:cf:38:26:52:64:b4:bc:aa:44:8d:18:
         ae:49:91:15:8f:8a:30:19:81:c8:c3:c9:9e:39:37:92:cf:5e:
         c3:6e:83:33:09:00:e7:d5:70:5b:0c:02:05:5a:d3:b8:16:51:
         3f:ec:32:aa:60:2d:1e:59:67:b3:6d:fa:01:ed:c0:b5:98:7e:
         32:6c:b3:9f:8c:ca:6f:56:91:8b:fd:6e:01:d1:14:24:28:09:
         93:82:0e:fb:63:5b:56:92:92:0d:bc:f0:b3:f3:42:67:69:42:
         06:b7:03:7c:98:87:41:81:1a:4a:95:ba:13:a3:19:f7:1d:a7:
         ee:e1:19:b5:79:66:b8:8d:ec:07:b5:21:9a:a1:7b:22:5e:e4:
         0a:bb:b8:98:ca:6e:4e:c1:84:96:6f:86:b2:dc:d6:d4:c9:77:
         19:55:b3:56:64:1c:f2:62:ca:4b:c6:ca:e2:5b:2a:68:09:25:
         73:93:e5:eb:70:d4:4b:76:01:9c:41:66:8c:13:54:07:d2:b5:
         7f:80:10:83:2d:91:95:ce:71:dd:79:bc:9c:79:31:5b:10:65:
         1b:73:a6:5b:17:18:55:a4:2f:e8:75:4a:ce:73:6f:8a:a6:5b:
         79:c5:c6:7d:f0:23:cc:21:98:83:4e:41:99:61:89:c6:8b:d9:
         3c:e7:8d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----