Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17057de1-0841-47c5-9f52-f4f803d5e2d4.roa
File:                     17057de1-0841-47c5-9f52-f4f803d5e2d4.roa (raw, json)
Hash identifier:          /qLCq8HiIOhZXKJXG8xZDVduDc0Q3U6Kv79hE5Rjpqk=
Subject key identifier:   88:63:57:0E:03:F9:7F:8B:50:AE:9B:1D:C1:51:8E:E7:9B:5B:18:FC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6E82FF6692653C870595E16711730CF75F413094
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17057de1-0841-47c5-9f52-f4f803d5e2d4.roa
Signing time:             Mon 26 Oct 2026 05:02:35 +0000
ROA not before:           Mon 26 Oct 2026 05:02:35 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d03a:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:82:ff:66:92:65:3c:87:05:95:e1:67:11:73:0c:f7:5f:41:30:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:02:35 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=42ac868736465e338a343950311d7d91d63e4e1e20ca34834caeef8ccafb6f42, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:cc:3b:88:c6:ec:6c:6f:f1:2f:16:68:ca:
                    f7:ca:f6:38:00:99:57:73:1b:2e:5a:60:84:b4:e6:
                    47:1d:0b:66:bc:c8:f6:41:97:5b:3b:21:f8:f9:39:
                    7e:4c:18:9f:ff:6f:80:61:2b:c2:40:e8:ee:18:ff:
                    6b:3f:68:10:d5:c9:d6:a3:78:30:c0:d7:8e:a7:9b:
                    2b:01:fc:c3:51:1e:3f:c3:c8:18:de:9c:39:66:09:
                    bb:b0:56:1e:d9:f0:30:ea:6e:9d:b9:a4:21:ea:14:
                    24:8c:6d:17:5b:0d:45:0b:73:63:e9:56:d1:ca:db:
                    95:d0:2f:ef:7c:d3:27:5b:17:d8:ac:6b:45:8b:24:
                    63:3c:3a:66:11:7e:e5:1f:4e:09:24:c6:81:01:b0:
                    51:e2:fa:5b:28:33:f2:5e:fd:e3:7a:d0:b6:67:e8:
                    c2:aa:08:8d:6b:cc:56:41:ad:97:e8:76:de:ef:bb:
                    8b:ee:06:75:fe:74:b3:80:d0:d6:94:f5:57:a5:a6:
                    b0:0b:69:13:af:c9:74:42:e3:17:44:64:77:c1:50:
                    6a:d0:4e:46:73:e6:cc:e2:35:14:f0:bc:2b:d3:8b:
                    fd:40:ac:4f:96:9e:16:36:94:a8:01:b4:7b:4d:bd:
                    c2:42:a5:cb:db:96:36:9b:40:29:d8:16:67:d3:93:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:63:57:0E:03:F9:7F:8B:50:AE:9B:1D:C1:51:8E:E7:9B:5B:18:FC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17057de1-0841-47c5-9f52-f4f803d5e2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d03a:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:e3:1d:43:ae:a1:38:77:da:7b:93:65:f1:6e:ae:ee:27:63:
         ca:5a:fd:53:c3:f8:9d:af:25:43:ff:9b:ca:03:93:ce:15:2b:
         68:5e:c9:17:dd:2a:21:a0:d6:ab:b5:b5:b6:73:eb:9a:b0:64:
         1d:7d:15:b2:f3:fd:19:22:32:a8:5f:e9:a5:62:b0:10:f0:91:
         2b:83:e2:0d:bc:e6:14:91:3e:9f:b6:1b:18:a5:55:12:86:46:
         43:f4:75:89:9b:1a:42:7a:29:ed:46:35:7e:27:45:e1:69:83:
         41:79:51:8c:b1:0b:ab:03:bd:77:0a:fd:84:d5:41:da:c9:c0:
         0b:6c:f2:62:58:1b:7d:ca:ec:55:e3:1a:87:a0:cf:ab:04:58:
         5a:ac:0e:58:a1:3f:9e:03:3f:38:5f:b5:0f:c4:21:0b:e4:52:
         69:98:e8:76:c9:af:b6:4a:82:78:f5:d1:30:8b:a4:dc:47:b3:
         14:cd:e3:cd:8e:a6:1f:de:fc:bb:8b:a9:5c:56:64:cf:1f:49:
         db:63:e9:89:80:61:74:ea:76:b4:83:b6:c5:2f:93:29:52:3c:
         83:52:3f:4b:ae:62:52:fb:85:fc:1e:b1:af:bd:c6:8b:f2:3c:
         d6:32:ac:12:e3:26:a0:0c:83:51:e7:47:07:23:c1:33:84:94:
         bb:17:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----