Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
File:                     36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa (raw, json)
Hash identifier:          YkFT2M8bW+5KVcRvJxUkb/z6oCseV3p57nBNJWsxiAw=
Subject key identifier:   36:46:D0:8B:0D:A4:06:77:D7:41:B7:D3:CD:82:B1:F0:3B:5B:06:76
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       220C4088D6B6733A33CD4731C004B729A2C9482E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
Signing time:             Mon 26 Oct 2026 05:30:31 +0000
ROA not before:           Mon 26 Oct 2026 05:30:31 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:a020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0c:40:88:d6:b6:73:3a:33:cd:47:31:c0:04:b7:29:a2:c9:48:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:30:31 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=8f768d838ff64ede3e0876f1f87389dcc1a067c6566497eec674c02e478e4fa3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:21:35:4a:01:a1:b1:43:bb:bb:85:4e:66:
                    a5:ab:0e:3a:15:44:8a:3a:98:0d:ec:82:9a:8e:93:
                    48:66:c3:b5:bb:2f:af:84:0f:4d:ed:53:9a:35:0e:
                    dc:d9:e0:54:47:dd:13:4e:3d:51:a0:36:b9:69:09:
                    7d:10:6d:fe:ab:c6:bb:e6:21:eb:a0:68:8c:1a:12:
                    34:61:11:68:d9:fa:cd:d8:0e:e3:09:67:79:8c:f0:
                    ff:73:f6:08:74:cf:f7:1f:3f:58:5e:60:da:17:d1:
                    03:81:66:c3:60:e5:36:dd:61:16:ba:82:9b:e3:cc:
                    5b:45:2f:fe:dc:b5:1a:b4:53:90:6a:2f:55:b9:cc:
                    0f:fa:14:fd:f3:16:1a:af:b3:c9:46:a0:65:4a:54:
                    cb:2b:f0:9b:93:5b:e9:23:b3:74:bf:97:5a:26:10:
                    2a:cf:b3:05:f5:96:46:78:74:30:bc:20:9b:50:7b:
                    97:df:e7:f5:7d:95:fd:1e:eb:f1:0f:24:15:de:49:
                    a3:ba:8a:4a:65:e6:cb:e2:c4:1f:11:c2:20:f3:61:
                    df:00:62:7a:8e:8c:28:76:03:0f:15:c5:c3:00:27:
                    8b:1a:a5:60:69:cb:c4:70:2c:42:ba:60:da:de:f8:
                    71:58:24:46:62:3a:08:c7:a9:bb:fe:68:ad:fd:40:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:46:D0:8B:0D:A4:06:77:D7:41:B7:D3:CD:82:B1:F0:3B:5B:06:76
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:a020::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:d3:b9:6b:c3:b5:d8:f7:35:bf:68:37:4e:2b:b1:cd:26:93:
         de:f2:93:2f:2b:f3:3c:f2:50:4e:f1:fd:48:42:e9:af:cf:8f:
         09:e4:f0:d9:f7:7b:c5:18:b4:74:97:6d:1d:10:0d:c8:5d:9c:
         5e:13:3a:41:17:53:3f:83:c9:26:40:99:6d:d1:4c:e1:24:70:
         2d:59:6a:cd:ff:c2:d7:4c:5f:17:f6:ba:88:e7:c3:30:22:49:
         8c:47:4e:e4:90:6b:fc:7a:8a:b3:50:3d:0f:4b:31:8a:e5:61:
         f7:fc:b4:d2:a8:23:5f:19:51:f3:69:c9:ab:08:87:e2:70:c1:
         4f:e9:4c:90:29:8d:4e:b4:31:d3:11:ce:21:2b:35:80:ec:5d:
         48:cc:3e:6f:dd:dd:44:fa:2a:31:97:a7:36:fa:b8:7f:8c:23:
         6a:0c:5a:8d:73:bd:d8:7c:92:25:73:ce:06:d5:c0:73:59:68:
         04:4f:50:a8:ff:12:6c:cb:4d:32:65:e9:1d:d0:f3:c2:b8:34:
         c7:e9:96:6e:8b:86:1b:ff:34:a6:89:9f:fd:c8:a6:3b:68:76:
         32:36:33:22:cc:27:6d:40:98:bc:c6:3f:30:5e:84:50:ea:d0:
         09:5e:66:55:f9:db:3c:95:05:5b:9a:34:5f:22:e6:d7:91:8a:
         8d:39:82:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----