Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/334df9a4-0b88-422c-a92f-54650ca8ce00.roa
File:                     334df9a4-0b88-422c-a92f-54650ca8ce00.roa (raw, json)
Hash identifier:          j5/SEeDHp4bexiKe+ciMoU0MNOUry5lrgxg+ntM8HrY=
Subject key identifier:   F3:72:0E:B3:F0:A1:B2:82:2F:74:E9:60:E3:21:C1:4A:CE:38:13:DA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5C82AEEFD90B65DA98B62466F598D0A68DAF0B1F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/334df9a4-0b88-422c-a92f-54650ca8ce00.roa
Signing time:             Wed 19 Aug 2026 01:00:21 +0000
ROA not before:           Wed 19 Aug 2026 01:00:21 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d05a:90c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:82:ae:ef:d9:0b:65:da:98:b6:24:66:f5:98:d0:a6:8d:af:0b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 01:00:21 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=54a58aadde9d3a751db8073cf8e5061448784ca4b007a3dbc6479a3c6e5b11cd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:56:b4:34:15:4e:ac:8a:f9:c0:15:fe:25:
                    aa:d8:16:61:ac:7f:69:29:87:17:3a:91:10:4a:4f:
                    17:f4:e0:04:77:1c:64:05:ef:4e:19:3a:a0:01:2a:
                    07:fd:87:f9:da:cc:4c:2b:02:0c:08:f0:08:c8:12:
                    dc:0c:0b:4b:96:d3:74:43:98:7d:5a:78:1a:82:55:
                    1c:12:69:ca:fe:c3:93:cd:49:6c:25:b9:f0:ef:7e:
                    5f:16:81:77:e1:85:d2:b4:d4:a0:e7:46:5b:c2:b1:
                    11:c6:7e:37:48:c3:c5:13:74:7b:09:f7:aa:a7:e9:
                    32:22:57:75:da:f9:7e:d9:5c:e6:22:d7:5a:50:a9:
                    37:20:d6:5c:34:a7:0f:07:93:9c:40:e4:db:22:59:
                    4b:fd:ae:c1:5f:c0:f6:df:8a:82:62:da:84:7c:21:
                    61:dd:4f:6d:4e:d6:01:61:c9:8d:b9:65:85:92:a7:
                    47:4f:df:18:64:81:a6:e2:db:a5:55:3f:cb:06:27:
                    69:52:31:7d:6c:82:87:68:7f:55:21:5d:a5:de:0e:
                    c0:13:bf:fa:27:dc:06:c0:7c:59:73:44:aa:0c:10:
                    8f:8d:06:9a:59:1e:c8:19:fe:82:fa:87:4e:a4:44:
                    30:60:ae:f9:24:0f:9c:7a:c8:a3:88:2b:6c:6f:35:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:72:0E:B3:F0:A1:B2:82:2F:74:E9:60:E3:21:C1:4A:CE:38:13:DA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/334df9a4-0b88-422c-a92f-54650ca8ce00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d05a:90c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:b2:c6:0c:38:24:dd:3f:bc:ae:a3:7c:b3:d5:c4:4c:5c:c9:
         e7:47:de:34:5a:42:71:bf:ac:8d:47:72:79:c9:99:4c:55:b0:
         c0:aa:eb:2a:c5:9a:6c:87:ab:a2:55:b4:f3:4a:b5:8c:32:ba:
         9c:2a:74:bd:27:7c:9b:41:35:de:68:06:77:46:8a:39:b7:37:
         1e:22:55:f0:79:b2:6d:22:b4:0b:4b:dc:25:f3:ff:4d:fc:b3:
         cc:2e:3a:13:f1:7f:19:fb:1e:d2:d5:3b:7e:c1:bc:6a:9a:ef:
         72:36:51:b5:b1:0d:61:b0:ba:9d:78:07:52:9b:e1:f2:c8:6f:
         89:dd:f5:e1:c6:49:f4:36:a1:ea:45:d8:86:a8:5e:54:aa:64:
         62:75:a7:4e:f1:9d:73:ac:2f:dc:57:73:f0:0d:e8:c1:a5:47:
         84:b8:d0:bc:11:18:47:5d:31:8a:3e:85:40:3c:15:fd:1e:40:
         af:29:b7:c1:7a:ff:a1:bf:c0:8d:95:8d:13:42:dd:1b:6d:fe:
         da:71:bb:5e:f7:45:bf:12:f9:87:67:74:fc:24:ee:71:1b:06:
         67:e0:5d:8a:c2:2e:28:6f:0c:56:d4:16:e1:a7:6d:87:d2:27:
         bf:52:2b:bb:0f:f9:42:b6:17:cc:cc:72:60:68:68:38:24:a2:
         0a:07:b3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----