Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/317c0616-b89e-4a04-85d0-e35bf74803ae.roa
File:                     317c0616-b89e-4a04-85d0-e35bf74803ae.roa (raw, json)
Hash identifier:          ZXyLNbGBdMsurssYODkZgDzsEMSiM7vKv/ieOVNCnQc=
Subject key identifier:   34:6E:DB:A3:36:27:83:16:B5:86:E3:69:87:91:F1:E5:5D:95:E3:54
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       051149FFF3DF8C2530BC9C24A3F4DB3850A962CA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/317c0616-b89e-4a04-85d0-e35bf74803ae.roa
Signing time:             Thu 29 Oct 2026 01:03:02 +0000
ROA not before:           Thu 29 Oct 2026 01:03:02 +0000
ROA not after:            Wed 27 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d068:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:11:49:ff:f3:df:8c:25:30:bc:9c:24:a3:f4:db:38:50:a9:62:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 29 01:03:02 2026 GMT
            Not After : Jan 27 23:59:59 2027 GMT
        Subject: serialNumber=a71fe9a19b780111ef121a735ee975b83331ce0d1f97f547c8c34a82db217d23, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b0:44:5f:7b:07:b6:9f:95:8b:95:09:e1:cd:
                    38:ef:46:66:31:97:01:e2:e1:fe:cc:5b:df:7f:cf:
                    93:3b:0a:b3:2d:23:b5:a1:56:ef:2e:2f:16:69:a7:
                    a2:a1:a6:bc:6b:52:8b:13:0b:f2:69:02:b8:36:f7:
                    7a:5e:a9:22:02:03:51:5f:21:c6:f6:b2:20:0f:83:
                    54:8e:2c:ef:86:0f:86:dc:17:ad:f0:e6:20:b3:92:
                    b7:60:a5:33:36:f4:ab:9b:93:ad:d8:9a:95:5e:f8:
                    e4:48:bd:bb:1c:4a:0b:58:91:3a:59:b2:b2:fd:e1:
                    ec:76:8e:5c:74:bb:f6:89:7e:ea:36:de:22:76:4a:
                    2c:15:a8:b2:93:5b:17:1e:0a:91:e2:cd:33:ea:97:
                    c1:98:e5:dd:84:4a:90:0e:eb:e8:66:15:e4:75:d2:
                    0b:e1:f2:c3:2a:20:16:ba:75:d3:2c:fd:08:ba:a3:
                    a2:c8:cc:c2:b7:ba:b4:b7:45:a1:f5:df:14:7b:e2:
                    d5:24:57:50:c0:c1:0e:c2:43:24:13:f6:d7:34:f7:
                    48:ae:f1:bc:e5:d7:5a:89:33:a4:70:92:90:16:f9:
                    22:ec:b0:1b:7d:2f:4f:a4:26:7b:ae:d3:05:a9:c6:
                    21:e8:2c:77:9d:67:4f:3f:9b:a1:aa:f6:d0:7d:5c:
                    33:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6E:DB:A3:36:27:83:16:B5:86:E3:69:87:91:F1:E5:5D:95:E3:54
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/317c0616-b89e-4a04-85d0-e35bf74803ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d068:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:f1:3f:c2:25:55:bc:78:ac:57:20:89:ae:69:42:d6:6f:bc:
         a7:7c:e5:f8:74:84:5f:2a:11:c6:94:a2:5f:25:41:28:85:65:
         c0:59:86:a2:94:9f:fa:8b:38:97:37:f2:39:bf:40:c9:dd:ea:
         79:c7:29:f5:d5:54:df:3d:d6:17:15:30:cc:6a:bb:aa:1c:25:
         2e:0a:14:bf:cd:64:b2:25:e4:13:4f:7c:4b:bc:e7:b9:7a:29:
         b4:02:1b:58:56:09:8e:30:28:cd:52:a6:46:c1:db:a0:61:41:
         76:4a:9c:89:94:26:04:99:4f:eb:fa:bb:6c:7d:1c:6b:d2:34:
         88:d9:e7:57:73:cb:79:a0:59:d4:15:15:8e:2a:72:c6:ea:1c:
         f7:30:97:db:82:c9:10:d2:c5:72:f2:14:82:a2:4c:f6:3c:4f:
         55:1d:23:be:a7:04:a1:d0:14:03:b9:20:39:79:e9:59:b9:f4:
         1b:36:8a:6d:2b:ae:80:c1:22:a6:ef:72:b3:27:be:44:f8:dd:
         74:d7:1f:b4:57:a7:8d:a5:a0:a3:f2:65:5c:07:dc:96:72:c3:
         83:f2:4c:98:c4:4c:2f:a8:77:c4:23:47:e6:35:ab:e1:ea:87:
         9a:bd:d5:89:b0:57:0c:34:80:d3:21:46:ef:9c:5d:e8:5c:b1:
         2a:e8:eb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----