Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2524dc34-377e-42bf-b736-c56fd507a64d.roa
File:                     2524dc34-377e-42bf-b736-c56fd507a64d.roa (raw, json)
Hash identifier:          r3wCWXYVAOf89iPbhz9VTQk29hvNdcMqUgs0PPIUDUE=
Subject key identifier:   07:DF:AC:9C:7E:8B:6C:95:89:47:52:A6:1B:65:D2:28:5A:2F:20:84
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7CA33482CFFE5C81785E8440CCCA1E834240C285
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2524dc34-377e-42bf-b736-c56fd507a64d.roa
Signing time:             Tue 18 Aug 2026 18:12:54 +0000
ROA not before:           Tue 18 Aug 2026 18:12:54 +0000
ROA not after:            Mon 16 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d033:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a3:34:82:cf:fe:5c:81:78:5e:84:40:cc:ca:1e:83:42:40:c2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 18 18:12:54 2026 GMT
            Not After : Nov 16 23:59:59 2026 GMT
        Subject: serialNumber=2822f968356b105a663f85ebc7e8508944c86890f7823eb4dba1f06e61a3f761, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1d:ac:a5:a2:7b:73:e9:02:40:36:6b:47:38:
                    48:97:48:3d:ca:a0:e1:66:23:56:91:5b:64:a6:eb:
                    c5:02:a8:32:67:40:5a:fb:d1:b9:9d:77:65:13:c1:
                    12:55:a2:b1:b0:0e:0c:fc:4f:ae:0b:59:bb:31:0d:
                    e9:cf:3f:de:51:22:b4:d3:c2:4d:af:20:01:be:cf:
                    d0:80:a5:75:5e:1b:63:73:42:66:14:8e:c6:6d:b4:
                    3c:99:b4:37:b6:58:c5:f3:40:a1:b9:8c:c4:c7:dc:
                    50:18:b5:5c:4b:0c:ea:90:f6:c7:2e:48:cb:24:12:
                    10:79:69:b5:e8:85:6d:53:1b:93:24:c0:f4:8b:5c:
                    ea:8b:07:91:9f:5d:e2:ee:d6:37:b3:d1:da:87:e1:
                    33:4c:3c:07:c9:93:70:38:ab:26:ec:ce:11:3f:ca:
                    7b:e1:b1:1e:2a:f4:a7:88:23:5d:21:00:09:5b:07:
                    33:e9:79:cb:21:73:82:63:5c:2b:40:40:bb:ba:9a:
                    93:10:82:19:bc:0c:1e:ce:16:c6:47:7b:ad:68:0a:
                    ef:7b:b5:36:f7:f1:89:aa:ba:27:f1:40:96:e2:19:
                    14:e4:46:e4:ee:67:12:d7:07:68:62:1d:d0:bf:3b:
                    4a:b6:e2:f7:b7:ba:83:d3:6f:12:4f:6f:2c:17:48:
                    6e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DF:AC:9C:7E:8B:6C:95:89:47:52:A6:1B:65:D2:28:5A:2F:20:84
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2524dc34-377e-42bf-b736-c56fd507a64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d033:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:8e:4c:8f:42:97:8f:8a:55:ba:52:06:66:d1:17:4a:ed:4a:
         8f:86:06:f0:ab:24:2c:b0:18:62:67:72:61:5e:1f:ee:98:97:
         57:69:6c:6b:fa:3e:45:2f:25:db:ff:f8:75:5a:3a:67:62:7a:
         a0:ea:26:e4:66:71:8d:d7:77:83:0c:e5:54:53:b9:2a:ea:0a:
         eb:b2:f9:eb:3a:85:ea:41:94:d8:2d:b9:01:0f:a7:20:25:0a:
         82:59:5e:af:29:70:8c:c8:6f:8e:a2:84:b4:df:1e:bf:6b:86:
         62:4c:b1:3e:cf:49:5b:cf:62:ed:f4:61:d2:cb:f4:1c:6b:88:
         93:b4:76:2b:e2:aa:09:6d:7d:a8:d7:aa:c0:98:c0:0d:a7:d8:
         33:87:f9:fd:ab:73:61:07:a2:00:38:ce:7f:49:35:e2:1a:ee:
         89:28:a5:5f:c4:ee:e6:df:15:b0:cb:bd:c8:0c:aa:e6:10:4d:
         7a:0c:4d:7a:a5:9b:26:b1:4d:aa:a5:23:a3:4b:b3:00:19:d0:
         98:71:25:d9:b2:df:d5:27:a0:63:4f:5c:21:ca:6f:8a:80:f0:
         6f:73:7c:88:ef:19:02:d3:e0:a9:0c:2c:92:42:29:d8:e7:b9:
         2a:df:4c:62:63:6c:67:cd:d1:08:5c:6b:16:17:8c:26:a3:4f:
         2d:a0:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----