Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2780ebe2-8258-4510-a848-89116418e1c7.roa
File:                     2780ebe2-8258-4510-a848-89116418e1c7.roa (raw, json)
Hash identifier:          xoFa86pnTTV8JHWBkomLeTslykxbXuFVnowm5euK8nA=
Subject key identifier:   12:1E:5A:77:D2:83:35:F9:9E:10:A6:5B:97:85:D2:AD:47:C8:70:0F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       081AC6C5455757B3C808DFCB40F61F3652E9ED3A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2780ebe2-8258-4510-a848-89116418e1c7.roa
Signing time:             Sun 18 Oct 2026 01:30:20 +0000
ROA not before:           Sun 18 Oct 2026 01:30:20 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        176.34.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1a:c6:c5:45:57:57:b3:c8:08:df:cb:40:f6:1f:36:52:e9:ed:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 18 01:30:20 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=29c191221b24679ed805681fea7829fa2742ba27b64ba23f8ee6b3132e3da8fe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:5a:1c:23:2c:a3:3a:2e:6b:6d:8d:6d:39:
                    fd:42:81:bc:d7:bd:4d:5e:61:13:77:06:07:2b:47:
                    58:ad:bd:67:f2:f0:a6:26:d7:e6:cc:b8:88:90:af:
                    4d:b7:5b:bd:39:26:a5:80:64:81:cd:70:c8:b5:a1:
                    af:ca:76:dd:47:46:2f:77:11:ab:57:bf:13:cc:b3:
                    67:45:a7:fb:08:ff:ab:2b:44:86:85:59:6e:d2:b5:
                    49:5c:3c:3d:6f:90:e8:dd:5a:1d:b6:4d:3e:48:d1:
                    53:53:82:ac:05:42:0c:eb:6b:da:63:ed:fc:51:03:
                    2e:50:72:e6:8f:9c:d4:7b:e1:0e:a3:b2:22:3b:e1:
                    66:26:7d:b5:bd:42:ef:97:52:06:4d:44:81:96:0e:
                    4b:81:0f:03:64:a3:cb:94:a3:0c:10:3d:bb:0b:2f:
                    67:8d:4c:75:ef:7b:92:b8:b1:bc:66:60:3f:5a:0c:
                    7d:d9:4e:5b:14:78:ef:7b:1c:28:49:14:ea:19:7e:
                    33:bc:34:ab:ec:f3:1e:bf:25:34:d5:af:2b:05:ef:
                    d9:9e:93:f2:a2:27:e9:95:c0:25:44:51:01:45:c2:
                    d2:49:77:cf:23:c1:8b:5b:34:53:9e:9c:55:a3:6c:
                    0b:e7:bc:7b:73:bf:20:49:c1:c1:ea:92:bb:9c:95:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1E:5A:77:D2:83:35:F9:9E:10:A6:5B:97:85:D2:AD:47:C8:70:0F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2780ebe2-8258-4510-a848-89116418e1c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.34.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:08:06:6a:92:16:5e:3e:b1:81:86:07:a8:a7:f9:ce:53:77:
         37:c8:50:1d:8a:e2:2f:5f:da:a7:f9:a7:1b:bb:f1:69:70:ed:
         fd:92:66:b0:d8:13:16:44:18:33:73:f4:35:36:5d:d2:53:b4:
         88:65:6f:e5:4f:8b:5f:0f:68:d9:1b:73:a5:63:6c:3f:d9:5e:
         63:9d:0f:ed:ae:08:e6:33:1e:eb:83:39:42:96:b5:60:f1:73:
         e8:39:c3:01:ed:b6:fc:98:16:6c:06:f2:c4:7c:0b:c0:1f:10:
         b4:84:62:62:29:8c:27:7b:94:f3:0b:dd:1b:87:5a:e1:f8:12:
         7a:63:a8:5c:72:3d:e8:23:7a:20:6d:6e:24:a8:34:49:1f:ff:
         9a:30:b5:32:e8:20:f9:83:ed:e6:20:9a:5d:41:71:97:46:94:
         c7:9a:78:71:0d:93:94:07:3b:2d:0d:1c:10:38:4f:65:f8:71:
         05:2d:0d:45:b7:d2:58:2a:0b:f8:54:8e:80:2b:e8:7d:fc:e8:
         6a:73:fd:82:2a:e6:89:1a:db:f5:92:5b:9b:a3:6a:61:4e:85:
         99:26:93:00:9a:31:82:c6:ab:37:13:4c:7e:31:6a:cf:f0:20:
         95:58:94:d0:64:63:7e:ad:7a:3d:42:30:af:b5:a6:90:79:24:
         99:c4:9a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----