Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/248ea861-facc-4167-976d-1e65c556b074.roa
File:                     248ea861-facc-4167-976d-1e65c556b074.roa (raw, json)
Hash identifier:          rcrtP8O9erqKVDc+fxf90INYfBPko+Npr4rrdbLRUUs=
Subject key identifier:   53:28:BD:E2:D8:94:4A:F7:18:50:1D:37:D2:FB:FF:02:EB:8C:9E:7A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       57C3D3CF563B3C78E968D3AFB9F87D524B4DCD44
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/248ea861-facc-4167-976d-1e65c556b074.roa
Signing time:             Mon 26 Oct 2026 05:20:07 +0000
ROA not before:           Mon 26 Oct 2026 05:20:07 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d036:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c3:d3:cf:56:3b:3c:78:e9:68:d3:af:b9:f8:7d:52:4b:4d:cd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:20:07 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=50b1aaa630af0b2cc9e262e4047419e36a84b4218001b12fe729a3c813e1366b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:aa:de:ba:0b:7a:11:3b:bb:81:35:b4:99:28:
                    f6:35:b5:45:2f:2d:15:e7:c1:9c:55:85:da:06:67:
                    fd:9e:ec:20:21:67:a1:19:cf:af:2f:0d:d0:67:d7:
                    22:8d:d4:fa:30:ac:3a:e5:20:fc:48:ae:13:0d:db:
                    aa:b9:46:55:b1:ff:bf:07:49:42:4b:02:8a:93:54:
                    9c:87:33:1b:17:4b:9e:f6:5d:1d:03:1f:01:f1:9b:
                    d8:74:b3:be:af:13:17:4d:8d:a8:a0:b1:c2:83:d6:
                    59:0b:7c:b9:fd:6c:ee:a2:c9:74:eb:15:31:04:e6:
                    7a:e7:8b:f0:b5:73:98:61:25:33:e9:2f:b1:4c:77:
                    2c:95:31:8b:2b:9f:a3:02:20:bb:d3:f4:fd:97:fe:
                    8f:dc:87:2e:b0:54:a3:98:56:fa:e7:2f:7a:ed:25:
                    97:d4:c6:e0:6b:ce:b8:fb:a6:c2:b0:d9:8e:c2:6c:
                    73:7f:4d:bf:65:33:24:b4:7b:25:8d:d6:03:24:b8:
                    35:1d:33:67:35:63:23:8d:c1:4f:3c:cf:fe:5c:76:
                    49:d1:d0:1c:df:b8:bb:4f:10:c7:d5:44:ab:4f:41:
                    e5:cc:9e:5e:de:39:8f:10:8d:c8:41:4d:8d:70:2c:
                    a8:59:a9:8e:83:85:a4:ca:8f:4d:3c:c4:9d:4f:9c:
                    eb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:28:BD:E2:D8:94:4A:F7:18:50:1D:37:D2:FB:FF:02:EB:8C:9E:7A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/248ea861-facc-4167-976d-1e65c556b074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d036:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:99:11:35:dd:d8:25:8b:d3:cb:2b:4b:37:7f:8f:02:c4:75:
         2d:ce:20:38:4b:18:6f:6f:e3:df:35:4c:78:b2:5c:98:de:aa:
         00:0d:cc:38:78:a2:56:03:b9:da:15:35:02:0a:77:bf:46:af:
         a6:1e:cc:4f:12:25:8a:87:e6:64:9c:64:b1:f8:26:ba:4a:89:
         12:f5:58:dd:f1:30:97:6d:76:c8:c9:09:7b:75:52:31:f0:fc:
         c3:3f:ea:1d:f7:5c:e8:65:cd:27:22:a6:9e:74:fc:39:9f:3a:
         d1:24:e4:9c:5c:d8:42:d4:4c:0d:69:69:e8:72:0c:85:e1:ca:
         b6:1f:6c:a6:0a:e2:3b:78:cd:21:74:95:55:e9:23:93:f4:18:
         dd:f8:56:85:62:19:cb:c3:9c:21:56:e3:68:14:9b:29:69:29:
         d3:85:50:48:9e:d4:1c:2d:1f:5d:0e:9a:42:5e:41:41:92:0e:
         6b:5f:c0:24:e7:41:4d:b9:be:13:b0:f1:ef:9c:ee:56:c2:dd:
         88:cb:18:58:b6:e1:38:30:c2:55:a2:91:a5:77:3f:96:6f:f4:
         ed:cf:97:6a:e9:b1:43:15:14:c2:3e:0c:07:98:20:31:a9:05:
         ef:0e:5b:66:34:43:a7:af:54:e8:20:c0:9b:04:83:3d:6c:d4:
         7c:7d:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----