Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/220ed56e-a45d-4873-82fb-e87af8afefc6.roa
File:                     220ed56e-a45d-4873-82fb-e87af8afefc6.roa (raw, json)
Hash identifier:          +aTHyKnQB5B7grs6U0K98bIJ4ppzTqGhiiABWK45i4A=
Subject key identifier:   8D:61:CE:07:0C:A1:6B:FB:D5:BD:1B:AF:CE:9D:47:ED:8B:2F:79:97
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       69C4B57B822E05B5BE869237A61750F4B094F3C1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/220ed56e-a45d-4873-82fb-e87af8afefc6.roa
Signing time:             Thu 29 Oct 2026 00:50:08 +0000
ROA not before:           Thu 29 Oct 2026 00:50:08 +0000
ROA not after:            Wed 27 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d068:80c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c4:b5:7b:82:2e:05:b5:be:86:92:37:a6:17:50:f4:b0:94:f3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 29 00:50:08 2026 GMT
            Not After : Jan 27 23:59:59 2027 GMT
        Subject: serialNumber=9f0d7c739c81f99fb46d5bccc59960560630d63bcd3d380474290e8abf598feb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:09:0c:88:1a:6c:7b:db:4f:c0:e4:b7:39:
                    07:54:b9:f5:0d:8f:2d:c3:a4:9d:e0:1f:de:0d:6f:
                    e6:2f:43:74:16:2e:a2:47:64:06:20:9a:70:64:61:
                    ed:2c:f5:18:c5:36:10:b0:34:83:fb:3e:dd:dc:07:
                    84:a9:28:69:9e:d6:57:ae:d8:2f:bf:b3:a7:b0:ef:
                    91:b8:41:20:b0:01:08:74:d8:d3:e1:3d:34:df:a4:
                    4f:a0:73:04:9d:47:1d:f6:c3:b9:d3:12:eb:2c:24:
                    d9:52:a2:a6:29:f3:49:0c:76:56:70:45:f8:34:51:
                    84:b0:86:1d:04:b9:ed:c0:2d:c6:1c:0b:5b:75:2d:
                    a6:96:1d:5a:47:49:5b:eb:1a:93:36:d9:a0:bb:a0:
                    45:ea:3c:7c:75:78:08:14:4c:25:26:ee:b4:b3:5b:
                    d8:36:1e:54:f1:f9:ff:d6:d4:23:0c:3d:11:ea:33:
                    16:46:1c:a1:3e:23:01:8d:04:61:0a:cc:66:d5:0a:
                    df:ca:05:af:44:a0:ee:ca:c4:d1:b8:69:aa:74:a1:
                    19:65:9c:79:f3:1f:07:fb:7a:83:39:ae:33:bc:f9:
                    a9:99:cb:9a:3f:9d:de:3c:7e:dc:d9:f1:58:22:6e:
                    ba:10:55:f3:64:5c:2f:ef:f8:27:8c:11:93:78:5d:
                    f7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:61:CE:07:0C:A1:6B:FB:D5:BD:1B:AF:CE:9D:47:ED:8B:2F:79:97
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/220ed56e-a45d-4873-82fb-e87af8afefc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d068:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:bb:ec:ee:da:d8:1f:a0:d0:b1:b4:ca:9b:00:2f:4d:b6:60:
         17:14:0c:b9:97:33:b2:1d:13:c4:5b:cc:55:21:a6:73:30:80:
         37:1d:e5:e1:12:87:c2:39:ad:12:79:a5:16:dd:bd:58:56:22:
         04:82:82:2e:b9:88:7d:34:31:ae:89:c5:93:cc:23:12:15:27:
         1c:25:40:b8:42:fb:e2:7c:a9:fe:14:8e:b6:bc:9a:c0:8d:60:
         23:11:68:b1:93:35:3e:b4:cf:44:c1:b7:aa:13:53:55:39:c1:
         7a:3b:1c:24:34:eb:f9:0c:e5:f5:77:04:bb:c0:bb:96:74:f3:
         a5:f7:ff:26:7e:90:d0:05:d2:f6:cf:4f:f5:fd:55:e8:32:1a:
         36:bb:58:cd:81:fa:bc:6b:16:09:b4:11:5c:67:48:b8:c2:0c:
         3d:1d:44:5b:51:28:78:77:86:8d:1c:70:9f:df:95:4c:12:85:
         ee:3a:b5:cc:90:b1:6c:6d:71:3e:60:2f:93:36:e6:1c:a7:d0:
         00:4c:d6:0b:32:19:83:00:46:9b:d5:5b:de:e5:fa:31:9b:49:
         58:7b:c3:b3:67:00:ea:8b:ff:bb:c5:0e:6a:12:bb:11:79:18:
         45:8e:61:db:62:2a:56:66:15:7a:dd:4b:bb:de:d4:3c:be:8c:
         2d:e4:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----