Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa
File:                     42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa (raw, json)
Hash identifier:          d1TkR9uAdmUF1OfPPg10V35658KuaaHsTaJzzgWRWbg=
Subject key identifier:   20:5E:C5:34:E6:70:F4:93:81:31:31:7D:03:1A:E3:3A:3F:6E:3C:32
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       771D8F4F19E1DC3F23C843F36BB773AE490D3C37
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa
Signing time:             Thu 22 Oct 2026 01:40:08 +0000
ROA not before:           Thu 22 Oct 2026 01:40:08 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d076:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1d:8f:4f:19:e1:dc:3f:23:c8:43:f3:6b:b7:73:ae:49:0d:3c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 22 01:40:08 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=ac9cb714dda6ca111246c58aa22ced6ceddb9d490a67626e1eb68b774aae4e73, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:91:ae:de:61:db:a4:cf:51:69:4a:c8:6c:
                    df:14:18:d7:7e:c2:16:e2:93:67:e0:a6:78:76:a3:
                    8f:ab:00:f1:8c:68:9c:9a:c7:36:8b:87:11:a3:31:
                    83:12:57:0f:f6:75:45:3a:bf:7c:86:ce:b7:c7:0e:
                    fb:9c:aa:44:37:d0:01:11:b7:eb:78:8e:8d:66:14:
                    fa:19:5e:81:ea:b2:de:dd:3e:49:97:00:d4:fb:7d:
                    00:71:72:32:c2:c2:d4:41:cf:d1:b2:da:03:87:0f:
                    47:16:9c:d8:d3:01:93:6a:91:33:b6:69:85:d9:1f:
                    87:62:e9:bf:a6:2a:42:c0:d7:e1:b3:7a:02:18:e2:
                    c8:e8:49:75:90:20:01:78:fc:bf:81:ee:5a:0a:c3:
                    95:25:9a:04:b1:f8:fe:71:34:b7:73:7f:66:a8:27:
                    64:bf:0b:a6:6d:2a:c6:ca:2e:08:58:ef:61:c4:23:
                    48:62:af:d9:88:61:a4:27:77:31:a1:0f:4c:06:e4:
                    ec:c9:ab:cc:93:f1:9a:a6:44:79:0f:2b:31:69:bc:
                    b2:0c:f9:c4:f8:6c:94:3f:8f:3b:ce:ac:d4:c8:5d:
                    30:47:87:3c:5f:a0:a5:24:e7:2f:81:b3:a6:26:3b:
                    0e:92:90:45:fb:35:55:a4:e2:55:fa:88:92:90:1f:
                    cb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5E:C5:34:E6:70:F4:93:81:31:31:7D:03:1A:E3:3A:3F:6E:3C:32
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d076:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:e4:72:95:e4:de:df:10:00:54:b8:c5:5f:a3:c8:bb:69:3f:
         95:be:e6:8d:78:87:69:13:36:b8:8b:a0:18:33:7c:7f:4f:10:
         3c:36:c0:fe:d2:bc:c0:6f:7b:2d:cf:8e:b7:2c:b8:ea:e1:9f:
         bb:20:e2:d8:ef:94:6e:af:8e:2e:4c:57:33:0e:1b:7e:98:55:
         3f:43:0f:66:15:b3:f9:da:91:a0:7c:cb:28:7e:a7:d7:da:8f:
         b9:ea:53:7a:3c:1b:4f:b9:7f:00:70:d8:24:8d:46:8a:8b:4f:
         75:9f:fe:90:1b:7e:9a:34:a4:af:ed:e1:af:84:3e:09:c3:cf:
         ee:ba:2c:ce:0b:f2:e7:a2:59:56:a0:6c:e0:9a:c1:15:8a:7d:
         0e:46:82:95:f1:2f:a5:5e:f9:15:72:95:31:a0:fd:c4:73:07:
         8e:0b:68:da:63:2e:82:ce:2b:f1:e3:6d:2a:c3:bd:db:9a:79:
         55:06:b7:c8:4d:35:b2:cc:db:bf:90:3e:f9:5b:4a:db:24:cb:
         d1:39:70:4a:85:ef:4a:99:69:67:79:5f:37:65:91:25:53:92:
         1b:07:78:25:76:0b:2c:21:dd:15:e6:09:9b:68:60:33:26:ad:
         53:83:48:6b:4e:b9:29:35:b7:90:51:27:98:07:76:24:fb:92:
         05:5b:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----