Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4530b9c6-5c85-45a5-8e99-e0b412e74316.roa
File:                     4530b9c6-5c85-45a5-8e99-e0b412e74316.roa (raw, json)
Hash identifier:          ZoGJG13XkeGAaWb0GmFaD5pCNchOKONGdVL9EnwkY50=
Subject key identifier:   85:75:06:FC:9D:58:BA:0C:BB:28:BB:82:83:9B:8F:75:A8:70:68:ED
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       540C6F00A463026D84C8E55F075D8D07CE0BE9B7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4530b9c6-5c85-45a5-8e99-e0b412e74316.roa
Signing time:             Thu 22 Oct 2026 03:50:04 +0000
ROA not before:           Thu 22 Oct 2026 03:50:04 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d050:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0c:6f:00:a4:63:02:6d:84:c8:e5:5f:07:5d:8d:07:ce:0b:e9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 22 03:50:04 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=2d57c08fd3c7bbe71d6ffa3c13f90e8815aedc9379da8a4234bebf240a22f759, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:c6:18:27:51:d3:27:90:ad:7b:12:2b:ba:
                    39:52:50:97:93:88:19:a2:f8:d0:64:ab:f1:92:84:
                    9f:61:d4:37:02:12:3d:0b:96:51:ff:48:81:ea:49:
                    7b:b2:fe:b0:17:90:29:43:af:5f:22:e6:3b:da:26:
                    d9:b0:f4:34:eb:a3:77:c4:25:06:9d:c0:b1:3c:c4:
                    c4:2e:9b:68:c7:97:85:db:bd:4e:2e:fb:62:29:be:
                    80:cb:c8:b8:7a:ba:ed:1f:5c:2a:24:2a:da:ca:95:
                    ff:97:a1:bc:fe:42:25:ca:a6:0e:cd:1c:47:88:3a:
                    50:2b:46:0d:e6:15:bd:83:d6:75:82:4f:93:60:d0:
                    95:7c:e8:75:7a:fd:99:7f:ec:f8:f3:d6:6b:0b:89:
                    42:e7:78:41:d2:95:b7:f0:b9:a2:36:ba:48:d9:e4:
                    41:c3:56:de:9b:f0:02:09:d5:85:ca:18:cc:0c:9b:
                    ac:36:de:12:82:1b:01:5c:63:42:08:b8:8a:d7:a8:
                    13:d0:7b:b0:2d:f8:62:c4:70:f7:99:f2:3a:d4:64:
                    9a:02:3b:88:1b:17:75:6f:35:7f:c6:e2:3b:64:15:
                    11:d7:d0:ef:76:92:4f:30:a9:bf:24:8b:c5:e6:5f:
                    42:5a:19:85:8a:57:e5:98:4d:31:dd:63:7e:44:b8:
                    78:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:75:06:FC:9D:58:BA:0C:BB:28:BB:82:83:9B:8F:75:A8:70:68:ED
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4530b9c6-5c85-45a5-8e99-e0b412e74316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d050:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:47:8b:da:05:a6:23:d0:04:7f:2c:68:29:29:3f:89:a6:c2:
         aa:12:fd:b9:24:46:e2:1c:fe:e4:fa:60:48:66:fd:b0:20:ea:
         34:fb:19:95:25:0f:0a:76:d9:1a:fd:a0:5b:71:a9:cf:bb:73:
         cd:57:c5:8e:c9:b3:b8:c5:2e:08:cc:87:3b:20:ee:60:da:b8:
         12:2c:4c:04:54:2d:1c:ff:15:21:55:a7:08:5f:ba:80:25:85:
         1e:48:10:0c:0c:b9:42:d0:d2:33:21:3a:fb:97:03:e3:93:ce:
         8c:22:4a:c0:65:92:31:33:d3:66:8f:3b:f1:15:8a:90:67:60:
         f9:da:08:30:8b:49:d8:20:33:45:34:12:11:06:1b:81:c5:e4:
         ff:15:03:c7:68:cd:cc:26:59:a6:a2:cc:b8:54:30:c3:93:77:
         3d:18:93:59:40:4e:9d:e6:cb:f4:09:06:36:c4:e4:dc:dc:fe:
         3c:b0:13:b5:49:3a:01:84:99:a0:7d:89:c6:29:f5:59:5b:7f:
         bf:4a:6e:c1:a1:b9:2e:59:9b:18:c3:04:61:8c:6b:37:ae:0f:
         ac:0a:f9:08:ab:ca:74:12:9b:2b:29:00:4f:87:86:96:67:fe:
         14:f9:2f:c5:b8:65:03:81:0d:ea:50:94:9c:02:1e:c7:d3:1f:
         29:f8:8b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----