Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33f442e1-766e-461d-a3b9-2b0fd01b08cc.roa
File:                     33f442e1-766e-461d-a3b9-2b0fd01b08cc.roa (raw, json)
Hash identifier:          FwmngU/IqHCDm3SYO8DiXLT++I+9caKjTPX84kb2IBs=
Subject key identifier:   E7:8C:0D:5F:32:5E:D0:57:69:9F:20:8F:C3:06:F9:89:55:35:C1:D5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       209F9F390C184319F0CAE2E274784F8431025D95
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33f442e1-766e-461d-a3b9-2b0fd01b08cc.roa
Signing time:             Mon 26 Oct 2026 05:10:28 +0000
ROA not before:           Mon 26 Oct 2026 05:10:28 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d078:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9f:9f:39:0c:18:43:19:f0:ca:e2:e2:74:78:4f:84:31:02:5d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:10:28 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=4908b672d6a36a5378a2c30f5e95a998d52877eaad58a8ba03fc954842bfb2b7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:18:ed:b8:67:92:86:c5:86:84:1f:b8:53:
                    9d:fd:0d:e5:9e:de:16:12:cd:e2:a2:92:3b:31:f1:
                    a8:07:dd:89:b6:c2:b2:50:cb:cd:88:5c:ba:fe:9a:
                    b5:11:f8:9c:72:a2:a3:68:eb:a9:8a:f4:3c:cb:7b:
                    81:e3:cc:5d:0f:da:c6:42:4d:1e:62:05:d9:8b:9c:
                    c7:b4:88:a0:40:dd:9e:77:e0:c5:c4:78:57:72:59:
                    56:6b:2b:69:c8:b9:ff:9b:3a:69:75:2c:1a:e8:69:
                    ea:79:05:cb:41:7f:d2:82:ed:02:ca:f1:d2:a2:f9:
                    1c:4a:45:ba:fc:e0:ac:46:41:88:b0:09:ce:33:21:
                    9a:6f:c2:49:f2:7d:5a:67:4c:3a:25:72:e5:d7:a3:
                    6b:8e:e1:04:4a:3b:8e:ef:bc:dd:1a:51:70:5c:52:
                    bc:22:40:e2:2e:cf:9e:19:c1:1e:a5:3a:9c:a2:75:
                    77:fb:4a:89:34:7b:2a:7a:af:cb:8d:39:e7:ca:92:
                    67:ef:f3:af:33:05:76:2a:26:7d:d7:c5:71:67:5f:
                    4a:5e:fc:d9:a5:47:11:4d:bf:ea:ca:81:82:78:d6:
                    5d:e4:db:94:64:52:b4:ad:fd:fc:18:3d:cd:2c:36:
                    4b:52:17:6c:f5:d4:52:3b:27:26:f8:77:72:d8:63:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8C:0D:5F:32:5E:D0:57:69:9F:20:8F:C3:06:F9:89:55:35:C1:D5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33f442e1-766e-461d-a3b9-2b0fd01b08cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d078:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:5d:10:64:a6:ef:c5:41:ad:2a:55:7b:65:b7:31:28:f7:b2:
         0b:b5:31:20:58:a4:85:3b:70:f7:2b:24:46:b4:bd:32:d9:09:
         96:6e:a5:21:2f:97:45:01:85:57:3f:28:6c:80:4e:f1:46:2c:
         aa:ef:47:c2:ed:be:9f:1e:3e:d3:54:3a:56:31:b0:0f:60:0e:
         aa:c5:d7:a1:d6:bc:f4:b8:6a:f8:d3:11:3b:39:24:a1:57:0c:
         ba:71:9b:3b:18:d0:bf:21:cf:fa:84:29:f1:22:49:62:fc:91:
         8a:ef:4a:75:d2:4e:ba:87:45:7c:33:df:8d:3f:b0:ef:87:75:
         07:18:9c:9a:7c:8d:d2:30:48:34:78:98:5a:52:d4:b3:cc:9c:
         3a:01:64:bb:64:cf:7b:a4:0b:0a:2d:49:50:e9:27:73:a0:3c:
         8c:b1:2f:5e:c3:7b:d2:0f:f5:47:d5:b3:39:ed:52:db:0a:f5:
         b3:cb:13:ae:3b:fe:33:90:69:ae:92:56:05:5d:ec:4d:cc:ee:
         a7:e6:7f:a3:d7:04:06:f3:4d:f4:18:93:c5:64:c4:41:9e:79:
         de:bf:e3:b0:a9:be:28:24:c6:ba:8b:73:7c:f0:29:79:d1:b6:
         62:a0:8d:95:aa:2f:66:76:e2:06:76:f1:29:3c:93:3d:d0:c1:
         15:11:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----