Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa
File:                     1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa (raw, json)
Hash identifier:          zSF1J+q37mTQpFK3EmB9ZQ2eBfjdKeP9j5RmoZqVNPs=
Subject key identifier:   2F:D2:2E:45:63:94:8C:F9:06:4E:6C:86:8F:ED:50:DE:91:77:78:E8
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1C89C60E680C630D46FEFDD10766A3000ADDA9BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa
Signing time:             Thu 22 Oct 2026 03:50:16 +0000
ROA not before:           Thu 22 Oct 2026 03:50:16 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:89:c6:0e:68:0c:63:0d:46:fe:fd:d1:07:66:a3:00:0a:dd:a9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 22 03:50:16 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=2fecc7dcb85c58604a6e627cac4469fab4a23a2a0a87ecf9a4e6322870981aa9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bf:f9:21:7d:fc:1b:d8:26:59:d4:de:30:55:
                    50:a9:65:59:87:cc:98:49:70:5f:e6:9c:c6:0b:91:
                    0d:3c:3e:b9:62:1a:d1:5c:81:43:89:db:6e:0f:e7:
                    78:bf:9b:9c:a0:39:11:81:2f:47:75:c8:25:7d:77:
                    db:7b:3a:58:5b:13:f6:45:f1:4e:29:b2:09:bf:9d:
                    9e:aa:23:b0:00:ae:03:86:2d:2e:dd:81:f1:f6:13:
                    bb:3e:cd:f1:86:2a:03:c7:e8:18:d1:db:66:3e:51:
                    7f:2a:8e:3b:65:ef:a8:70:d9:52:9e:51:18:86:af:
                    16:87:10:40:38:9a:f6:f3:d2:a1:92:98:08:a8:34:
                    2f:a3:02:0f:f8:1a:5a:86:8e:5a:2e:51:18:06:76:
                    08:5b:4a:91:a5:5b:04:40:97:8d:a0:e3:ce:83:1f:
                    2c:dd:46:ba:bc:58:7f:6a:27:a3:1b:70:75:31:e1:
                    e5:84:b8:e6:95:56:5c:a3:ca:1a:2d:53:9c:9a:aa:
                    ba:20:db:7c:c4:dd:4c:95:93:fb:5c:08:9c:a6:41:
                    8b:ec:e8:a2:f2:eb:f4:ae:ca:11:19:8b:ae:5d:8f:
                    f9:f0:57:67:22:f2:8e:a4:e5:98:0a:14:c5:18:f3:
                    87:94:18:c1:1f:82:a4:b7:54:50:00:bf:b1:c9:c1:
                    32:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D2:2E:45:63:94:8C:F9:06:4E:6C:86:8F:ED:50:DE:91:77:78:E8
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:69:51:b0:01:e3:98:05:7d:f9:37:52:a4:1f:e9:a9:c7:5f:
         b3:a0:09:25:d5:de:6f:9a:43:0c:68:23:cf:d2:a5:33:cb:52:
         f8:e3:b8:a4:a7:f3:e6:ff:f8:19:cc:9c:84:d3:2b:f8:62:19:
         c4:36:cd:bd:e2:95:3b:7a:5f:92:01:4e:f6:dd:23:47:3c:c0:
         fd:57:53:17:34:6f:6c:34:6b:bb:4b:55:a5:00:e1:0f:24:cb:
         cd:fc:16:31:d6:4c:95:2b:96:70:26:19:9d:43:df:00:b3:d6:
         8c:e6:9d:0c:a8:50:51:06:f8:15:76:1e:67:55:05:f7:af:d6:
         f0:48:0e:5b:4e:4f:aa:b6:2d:90:c3:3d:c6:ca:77:3d:92:ba:
         eb:ff:d9:bd:02:c1:23:5e:a8:05:b3:50:61:ce:a4:d8:c1:ce:
         84:99:3d:49:aa:dd:ad:47:09:d3:04:a6:53:5e:41:b1:61:08:
         0a:5c:f8:02:41:9f:45:f1:c2:36:3a:49:14:1e:b5:33:a1:6f:
         4c:ab:6f:bd:7d:81:98:71:c7:b6:b9:8d:6f:7d:4c:d4:8d:91:
         26:08:31:45:b1:fa:51:87:8f:54:c3:bb:6d:07:a5:d7:85:06:
         1b:21:1a:a1:41:2d:3a:9c:85:a4:62:cc:72:4f:b4:cf:db:74:
         b3:a6:84:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----