Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
File:                     37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa (raw, json)
Hash identifier:          wLoVqtQibdIZZv+rhinGiu4PoHdl/a8HViF1BewBlzE=
Subject key identifier:   F7:81:69:8E:93:90:55:EE:47:57:73:6F:4C:C4:2C:20:50:E2:88:0D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       459B5219A483781D2E24F25A44C11F40F7AFADC4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
Signing time:             Thu 30 Jul 2026 01:40:35 +0000
ROA not before:           Thu 30 Jul 2026 01:40:35 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d076:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9b:52:19:a4:83:78:1d:2e:24:f2:5a:44:c1:1f:40:f7:af:ad:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 30 01:40:35 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=ab0ab5d90f71fe2c4103f20eab40c13ff3c5be85e4f6e712925143391b429aa5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:22:18:86:67:f7:ad:1d:97:11:c4:04:2e:06:
                    7b:97:b0:c4:42:30:ac:30:0c:a7:bc:1d:be:89:bd:
                    d7:bf:4c:43:bc:ca:68:d6:a3:17:f9:35:9b:4f:e2:
                    35:f5:b9:2a:88:97:91:50:ce:21:07:ff:5d:4b:72:
                    0a:52:57:66:81:e9:59:3f:fd:c3:42:69:4b:28:65:
                    78:c7:56:e2:81:a6:37:26:b6:79:30:67:54:0d:3c:
                    1f:b8:08:f9:c5:4b:97:29:3c:14:ee:8e:6b:36:bb:
                    99:d4:3f:0c:80:3d:2c:62:a2:e6:3d:9c:27:5a:b3:
                    0d:2a:dd:5e:c9:c8:b6:7f:d0:cf:51:31:52:94:67:
                    69:fa:01:ed:12:8b:6e:16:fb:4b:f7:bd:68:ba:c8:
                    db:8d:3c:d1:47:30:bc:02:cd:ff:56:45:25:c8:17:
                    52:45:9f:6a:06:f2:63:ab:ea:7a:29:e5:ae:2b:2b:
                    66:b7:4a:7f:53:ec:18:27:c2:97:77:6e:0d:6c:02:
                    a8:81:32:a2:36:5f:10:8d:79:88:76:57:10:b3:38:
                    fc:c1:5f:9e:50:47:dd:db:7c:c4:a2:c9:74:9c:26:
                    c0:cc:03:91:45:9e:52:1c:36:5b:83:7b:15:97:bd:
                    2b:75:2a:8e:a0:02:06:b6:bb:d4:48:d9:5d:65:5d:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:81:69:8E:93:90:55:EE:47:57:73:6F:4C:C4:2C:20:50:E2:88:0D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d076:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:00:9d:19:f0:ad:6f:13:e0:0f:eb:68:09:83:ba:31:33:a8:
         44:9a:8a:22:e6:fe:f4:5e:69:65:29:52:13:77:56:b3:e1:57:
         e0:e5:c8:8d:70:e1:1c:e6:35:41:88:8e:4a:ff:d7:3a:fe:e5:
         db:27:91:7c:e2:f1:b0:a0:75:07:be:5e:dd:f2:b4:c8:f9:35:
         19:f3:88:42:49:e1:be:80:8f:e7:d1:a2:2d:af:52:fa:ce:f6:
         f3:d9:ba:89:00:8a:28:7b:4e:05:e6:5f:d3:e8:43:85:8b:ef:
         e5:47:15:b0:36:2d:40:c9:10:fa:09:08:93:68:d7:20:17:53:
         cc:79:0e:96:72:fb:39:24:de:be:7b:84:1d:2b:e1:05:41:ff:
         93:82:af:d7:d2:19:d7:61:fa:03:a2:90:d1:13:f6:03:7b:07:
         9e:0e:0e:95:e1:fe:02:18:84:38:a1:4c:ac:b3:8c:67:c2:97:
         4b:18:c0:5b:fe:93:b9:18:af:7a:28:1b:aa:20:e2:d4:cb:07:
         84:88:f3:66:c6:d7:d0:1f:78:e5:8a:3b:39:81:22:76:37:48:
         71:07:02:b3:7a:04:c0:17:52:64:e6:72:bd:f4:92:0d:69:86:
         73:15:41:3e:cd:0d:a0:57:96:d0:37:4e:ac:34:59:dd:ec:6c:
         cf:21:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----