Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
File:                     19a2984e-942a-4280-ac0b-904c9860af2f.roa (raw, json)
Hash identifier:          RwGyNtB024CpEkyKWcnws0+fJmFkguHyggOQ7vXc++I=
Subject key identifier:   8B:F4:A2:D3:90:3D:E2:57:2C:50:D1:88:23:5E:0E:F1:6B:71:2A:20
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1FFCE13B126BB394F6BB7D585CFB65EC8C656D74
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
Signing time:             Mon 26 Oct 2026 05:03:17 +0000
ROA not before:           Mon 26 Oct 2026 05:03:17 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:8020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fc:e1:3b:12:6b:b3:94:f6:bb:7d:58:5c:fb:65:ec:8c:65:6d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:03:17 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=ee9b45fc24147d6e9300a7a10a44c7571d1af63f3dd884a2933c1cf145b49672, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:c0:81:88:00:36:97:55:02:87:e9:d5:cb:
                    92:a2:0d:76:b1:84:00:27:18:93:67:34:62:4f:e2:
                    66:a6:6f:3f:86:a7:4c:5e:0a:4e:53:77:08:07:ee:
                    33:62:f0:c1:54:3b:05:18:29:9c:b3:57:9b:4b:26:
                    29:0f:23:0d:4a:e3:e4:4c:c0:9d:8a:cf:c3:b5:12:
                    13:6c:cc:f9:2d:3c:d9:a4:90:26:85:0a:d8:c9:f2:
                    0f:9a:c9:ea:57:80:e5:27:a7:f7:c0:b4:41:cd:67:
                    0d:76:2b:e3:67:c8:6c:2f:c0:45:7d:11:d9:54:d9:
                    0f:27:87:65:bf:22:dd:22:e4:de:3e:45:1f:64:58:
                    d7:35:68:63:b8:60:91:7a:0a:b4:cd:0f:f7:c8:32:
                    78:bf:23:4f:70:a9:12:52:36:d3:77:40:03:22:a4:
                    66:db:d9:48:42:43:bc:82:f7:d4:61:db:f2:99:1a:
                    b1:53:8e:d9:ae:84:0a:d7:c2:e6:e1:66:e0:72:e5:
                    aa:fa:54:7f:cc:b8:e9:38:29:ca:1e:5f:28:ec:1a:
                    a6:8f:9f:1c:97:2b:0b:67:80:42:15:72:5e:56:d6:
                    05:6f:a0:65:1a:91:10:6e:51:8f:52:cb:0a:39:eb:
                    d4:0f:83:2c:af:ad:69:68:e0:9d:8a:de:bd:1f:8d:
                    68:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F4:A2:D3:90:3D:E2:57:2C:50:D1:88:23:5E:0E:F1:6B:71:2A:20
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:8020::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:e6:a0:ab:cd:76:f3:f4:98:c6:95:16:59:55:50:c8:8c:6f:
         79:61:73:2f:b4:81:bd:85:f5:6f:8f:1d:19:a8:0f:97:41:89:
         d3:b8:a5:05:6d:fa:fd:1e:25:13:9c:0a:b8:c3:bb:f5:b9:cb:
         59:91:ba:f0:4d:4a:76:fe:86:53:d7:7a:7a:80:99:2c:95:ce:
         93:a2:35:0e:f4:8a:bb:82:cb:98:6f:b3:cd:49:07:7f:1e:51:
         95:b4:85:db:16:cd:fd:4e:c6:38:15:25:ab:a3:4b:96:42:87:
         72:28:44:d1:62:5d:fd:8c:81:59:4e:fb:a2:5a:00:30:9c:a9:
         a1:72:bd:7e:51:30:f9:9e:2a:6f:70:01:81:69:45:5e:a3:40:
         47:87:7f:a2:25:c7:cd:e0:21:22:e9:0f:aa:31:10:4d:4e:88:
         61:d9:ac:0c:d3:a6:d3:d3:2f:4f:69:ae:7b:30:2d:29:69:b2:
         24:31:3d:e1:06:f2:00:96:ae:1e:5c:41:78:f3:fc:21:64:1a:
         66:3f:40:99:00:fc:2b:5d:b4:e2:d4:99:71:bb:6b:20:91:b7:
         17:4b:84:26:8b:ca:b6:ae:18:45:9a:28:dd:3d:46:ae:89:23:
         9f:61:44:d1:a0:f3:de:50:d1:76:80:5c:39:c3:ac:5f:81:d9:
         66:e7:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----