Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa
File:                     36e6bf1a-660d-40a9-a561-406ff743fc37.roa (raw, json)
Hash identifier:          5VBtjvtI6ZHyIUJHFVtwIn1Gdzav/Re5EklyQ/tEqyk=
Subject key identifier:   0E:A3:BD:78:A4:A6:3A:93:78:EA:D0:A3:CD:04:BA:6F:F6:9C:7A:18
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       22F76635E9E7D09634DC5E88995C6D87A19A5A91
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa
Signing time:             Mon 26 Oct 2026 05:21:06 +0000
ROA not before:           Mon 26 Oct 2026 05:21:06 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d03a:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f7:66:35:e9:e7:d0:96:34:dc:5e:88:99:5c:6d:87:a1:9a:5a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:21:06 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=9fa6a047f94e75050debd7f50355dcc17710418f89f4404c51d04c8c12a5c081, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:94:b7:c9:79:64:92:9b:37:e9:b1:cf:46:7f:
                    ec:10:b9:c3:6c:ba:00:df:97:ee:b1:bc:57:4e:9a:
                    57:76:1c:99:c4:b9:15:1a:2d:57:cc:6f:62:77:64:
                    c2:9c:63:6e:be:1e:80:64:dd:af:fc:1c:86:7f:50:
                    8a:90:a2:d2:72:42:d4:f3:a6:35:7b:36:29:d6:2e:
                    fb:7b:e2:a3:1f:89:4b:49:99:0d:bc:8a:46:78:a0:
                    69:ac:0f:6c:06:a8:f3:3f:d0:cd:3d:97:65:8e:fb:
                    5a:d3:ea:ce:50:9b:ad:c4:8d:89:ea:29:0f:f8:80:
                    a8:2c:ab:5a:fe:c4:6b:20:24:5f:c3:29:e6:f3:c1:
                    29:c1:86:78:36:6b:fc:21:41:a5:14:4a:ce:07:39:
                    b0:a0:55:74:f9:cf:ba:af:b0:90:72:76:28:cb:d3:
                    06:df:10:75:d2:ff:a6:ce:26:ec:69:9e:65:ec:d6:
                    29:dc:5e:b9:89:4d:81:1c:e5:2f:62:a5:6e:0d:3c:
                    e5:a5:7c:95:ad:45:3c:c5:65:36:83:f2:c0:21:30:
                    28:28:6f:d4:37:3e:b4:72:7b:6d:ec:1c:69:c1:c2:
                    97:de:e5:ee:d9:0a:9d:34:e6:5d:97:8a:ca:38:d3:
                    d0:b2:51:84:e9:ba:b7:6d:74:ca:65:be:c1:38:6f:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A3:BD:78:A4:A6:3A:93:78:EA:D0:A3:CD:04:BA:6F:F6:9C:7A:18
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d03a:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:11:6b:ad:61:20:e9:ec:c6:4f:e0:66:b1:3d:2f:1b:c4:4b:
         d3:a3:59:b3:23:fd:04:2d:90:cc:24:32:7c:a7:96:18:c4:97:
         e6:c2:34:96:db:ca:9f:0c:1d:66:4e:6b:55:b0:9e:c6:23:8c:
         16:a4:7e:ca:56:82:1d:da:39:a5:fc:d7:33:6a:dd:e9:eb:20:
         78:45:94:e0:19:96:f8:4f:f7:c3:d7:fe:24:b8:e6:0a:ff:41:
         a3:d0:c8:ab:50:64:0c:9a:6c:7b:18:8e:a9:2e:64:32:0f:dc:
         12:ba:bd:73:00:50:68:35:28:43:31:90:6a:4d:32:32:9b:c7:
         ba:69:6b:1a:3c:42:73:bd:0d:7e:98:89:f0:b3:73:5d:72:50:
         d2:6d:43:f5:0c:25:d6:1d:4a:2f:3d:85:3b:96:3e:ca:e3:ec:
         c9:b1:25:9d:21:63:79:3b:86:94:49:52:a6:a0:33:54:ff:44:
         7e:35:af:74:24:61:35:35:04:10:c2:66:19:09:9e:2c:68:22:
         d2:36:63:72:9c:11:f2:e2:25:4e:dd:3d:51:78:59:b4:76:ff:
         fc:75:be:64:b9:00:86:d8:94:1f:2b:2e:ea:73:11:3a:fa:20:
         9f:81:d7:c9:c2:88:43:25:e7:40:37:3f:9d:9e:97:9a:e1:eb:
         a5:5e:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----