Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fd8037d-0536-42bc-af5c-4d0ed4f8de78.roa
File:                     2fd8037d-0536-42bc-af5c-4d0ed4f8de78.roa (raw, json)
Hash identifier:          hjcPPqoe7xKu1QAm3K+B7da2Q5Z5FT/fqbbfXp94VrM=
Subject key identifier:   48:7D:09:27:D3:A6:EC:C4:8A:3E:21:DF:D7:B9:EB:1E:CA:96:91:5E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       78E0AD54FD83AFF7E94D10E39DA51C1DEC472B17
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fd8037d-0536-42bc-af5c-4d0ed4f8de78.roa
Signing time:             Thu 30 Jul 2026 01:30:17 +0000
ROA not before:           Thu 30 Jul 2026 01:30:17 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        176.34.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e0:ad:54:fd:83:af:f7:e9:4d:10:e3:9d:a5:1c:1d:ec:47:2b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 30 01:30:17 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=32f241a18aa5b74d1bdee1b88a3d2470b64f56a1f6b1e3459817a8d868bb2a01, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:29:4e:f2:2a:93:cb:dc:a7:d3:63:30:ee:
                    3e:a7:17:93:20:a0:2d:6c:fd:6e:dd:f3:81:29:73:
                    78:8b:d4:ad:59:69:90:fd:2c:37:42:1d:84:c5:59:
                    3a:90:07:fb:ba:31:ee:bf:aa:cf:82:60:46:fe:a1:
                    c7:04:30:52:02:3b:22:2a:f8:73:b0:74:ef:85:83:
                    f9:2f:bd:3c:5b:92:4a:09:ec:dd:74:c9:e0:25:ce:
                    0c:0e:06:5c:08:b8:9c:71:12:d9:f1:26:03:18:8d:
                    cc:79:1e:16:eb:6a:cf:2d:55:22:8b:3d:c0:d9:a1:
                    61:ea:d0:19:6a:87:26:54:cd:64:df:fa:3a:5e:23:
                    4c:4a:30:33:c1:4b:30:15:25:6a:09:ea:f0:d2:01:
                    3d:18:ee:58:b3:c8:0f:97:d3:fc:b6:d2:f8:18:bd:
                    85:58:aa:8c:80:71:af:9b:cd:8c:e9:ff:c0:01:41:
                    4d:5d:1c:d3:e2:63:44:c4:42:ed:59:c6:41:5a:4c:
                    45:ad:37:01:50:16:f8:9b:c8:55:d3:ad:a6:f7:42:
                    1c:27:34:84:6e:ba:8a:e5:d3:47:c2:d7:9d:95:04:
                    00:11:cc:26:40:eb:30:8e:d3:2f:db:8f:1b:42:b6:
                    27:61:01:29:f5:fd:6d:f5:13:fd:47:ae:55:2c:76:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7D:09:27:D3:A6:EC:C4:8A:3E:21:DF:D7:B9:EB:1E:CA:96:91:5E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fd8037d-0536-42bc-af5c-4d0ed4f8de78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.34.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c4:67:35:bd:93:d9:a9:cc:7c:03:0e:dd:5f:17:56:7e:8e:26:
         b0:5f:e7:9c:07:b8:1c:d2:48:37:fe:eb:66:1c:5b:47:4b:99:
         19:8b:85:70:39:15:41:9c:45:8c:0c:ca:f5:4d:e8:70:6b:0a:
         8c:8b:18:d6:30:c3:c8:21:36:21:e6:4d:5d:be:9d:9d:23:26:
         05:ae:2f:8e:6f:c3:33:db:42:96:7b:b7:02:2c:a9:23:4a:3d:
         31:db:d1:07:bb:f8:37:ae:14:e9:26:37:90:67:dc:bf:20:a1:
         af:18:4d:f7:33:d7:22:5e:0b:0c:e9:0f:08:16:9a:71:0b:f8:
         40:53:44:50:ac:cb:c4:0a:2f:b9:44:77:34:be:55:9d:d1:33:
         59:9c:73:d2:3a:df:8d:bf:f3:74:13:40:4d:20:9c:f3:b2:9f:
         ce:82:7e:60:2b:8b:1a:e1:85:ef:f1:77:2a:ac:87:7b:6d:3b:
         0f:89:1c:e8:61:be:65:39:ba:5f:90:d7:ac:7f:b3:a9:a3:fb:
         fc:4e:9a:be:a7:4f:67:2d:ae:f8:7a:39:e4:b1:1a:81:06:de:
         cf:8d:d8:2f:39:c9:66:e2:2c:44:76:d9:ac:91:65:5c:14:56:
         d1:f5:d5:90:ab:a0:0f:49:4a:ad:b5:38:68:f9:9c:b8:a7:aa:
         4b:11:5a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----