Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa
File:                     1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa (raw, json)
Hash identifier:          mRCSAM7H4cXpd1FF6w62jTG6pUf8UO5igwqsF0faqRc=
Subject key identifier:   67:59:6E:B7:6C:10:C8:25:19:E0:8C:31:26:0B:1E:1A:C4:D0:65:4A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       47BE98918C88D56F41FF82DF7E6A50C1D64BD58B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa
Signing time:             Mon 26 Oct 2026 04:50:50 +0000
ROA not before:           Mon 26 Oct 2026 04:50:50 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:be:98:91:8c:88:d5:6f:41:ff:82:df:7e:6a:50:c1:d6:4b:d5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:50:50 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=d370a6bcc86a0ca7f54934f47138de89d256b2b14b27e781654fbd0b4980d3de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:f8:8a:f3:ea:fc:6f:6d:31:7d:3a:f3:2d:fd:
                    0e:7c:db:a8:cc:3a:09:f0:09:56:86:28:67:6a:87:
                    73:0b:19:a6:25:2f:68:0d:52:32:8d:4f:3a:c3:03:
                    64:ff:23:0f:56:52:63:d0:86:7d:8d:e1:fd:75:62:
                    88:95:d4:d9:d5:c1:69:b3:90:3e:eb:fc:fc:0b:da:
                    73:c1:2c:39:2a:61:3c:57:bf:92:37:2c:b4:2d:c9:
                    8c:00:eb:2c:92:a9:48:45:44:0a:47:29:d2:74:b7:
                    4d:4d:3b:75:5a:01:1f:26:75:6d:b8:90:60:b6:05:
                    1f:9c:13:5a:75:26:4e:be:51:a0:78:0d:49:7a:7e:
                    27:18:7f:31:fd:c8:31:66:db:b4:bd:83:80:29:ff:
                    74:de:5a:6d:49:33:78:ba:a3:1b:f4:f8:77:cf:02:
                    1c:f6:42:f3:53:00:0c:60:e9:64:1a:15:de:ab:63:
                    7e:a1:14:39:ed:ca:32:f2:92:88:25:fb:d0:37:b5:
                    93:fe:6d:25:71:b7:b2:43:65:0d:94:aa:e8:e6:2c:
                    16:eb:09:6a:d5:af:7d:36:12:78:e4:45:f1:42:41:
                    8e:19:58:d0:07:0f:a8:44:78:02:b5:e2:77:ea:cb:
                    d6:3d:6d:1c:83:03:d5:db:03:07:f2:78:bc:28:28:
                    13:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:59:6E:B7:6C:10:C8:25:19:E0:8C:31:26:0B:1E:1A:C4:D0:65:4A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ca:25:02:42:f3:76:42:75:ce:e7:0a:f5:c0:2b:d5:23:36:c4:
         09:d3:72:d3:93:c9:5a:e5:a7:2e:72:6b:b2:3d:c7:33:d5:4b:
         25:f2:1c:d4:f2:c6:d2:3b:ca:fc:3c:6d:8d:2a:89:bc:8a:04:
         27:05:ee:d3:d0:36:07:86:20:e6:0d:0d:11:16:e6:26:52:c9:
         2f:fd:a4:b4:b2:20:8e:32:d7:e8:d0:35:e3:08:b1:41:c9:dc:
         88:f5:7d:66:64:79:ac:9b:03:9e:5b:f9:bf:a8:e6:af:58:e3:
         e3:53:fd:12:74:44:96:56:41:7e:75:95:22:04:81:86:f7:b9:
         22:08:12:1f:06:14:82:a4:a6:0e:7e:f0:fd:21:50:06:a3:e7:
         eb:93:8b:8a:1f:c8:0d:ff:8e:eb:ad:17:c0:c8:1b:1b:77:b6:
         b7:ee:56:75:f7:e3:e0:39:4e:2c:7b:e6:23:e0:b9:1b:ea:32:
         04:e9:ab:d1:d6:d5:f7:10:9e:32:7a:ff:b3:27:f1:5b:62:1d:
         98:35:e9:18:3f:bb:be:35:9c:27:2c:20:4c:72:76:f0:99:ce:
         c9:6b:23:58:79:ab:c7:c5:00:e3:5a:a5:2b:7f:27:99:59:b1:
         69:57:f8:f5:ba:78:42:31:fb:41:b3:99:4f:98:13:56:be:76:
         77:cf:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----