Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4778832c-1010-48bb-af42-8eb0635a10f6.roa
File:                     4778832c-1010-48bb-af42-8eb0635a10f6.roa (raw, json)
Hash identifier:          oVVhfqXMgksrDFJwHpU3lHwipIBz5dikdEjWBLl0XzI=
Subject key identifier:   1F:1B:C1:4A:9C:EC:13:DB:0B:08:2A:74:5D:7B:40:70:E0:35:19:62
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       66E070FC298DE39B93AC356200B01B28F81BFEBB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4778832c-1010-48bb-af42-8eb0635a10f6.roa
Signing time:             Sat 17 Oct 2026 00:10:04 +0000
ROA not before:           Sat 17 Oct 2026 00:10:04 +0000
ROA not after:            Fri 15 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d024:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e0:70:fc:29:8d:e3:9b:93:ac:35:62:00:b0:1b:28:f8:1b:fe:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 17 00:10:04 2026 GMT
            Not After : Jan 15 23:59:59 2027 GMT
        Subject: serialNumber=5063e561f311d86f6259d8cfbd39d12322b7ebb714593bcb1b067ecf2f4c3653, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:51:99:28:70:41:26:33:7c:f5:49:d3:bc:e1:
                    b3:51:1b:03:12:93:52:a2:3c:3b:53:23:f2:47:0c:
                    36:c5:84:4b:cd:c2:f7:3c:58:c5:a1:be:73:cb:74:
                    1b:3b:13:a7:83:b1:07:c4:f2:57:29:42:62:8e:42:
                    c0:56:ab:6e:98:f6:e1:b1:b0:4a:54:bc:59:3d:54:
                    3f:cd:6b:33:71:12:60:7d:11:a4:f5:af:74:81:2b:
                    d5:26:40:49:a9:8a:43:80:47:d3:c7:17:63:ef:4f:
                    ea:ae:46:66:3c:b4:72:5f:f0:fe:56:fa:ee:4f:8d:
                    15:c4:ae:e9:d1:9c:2f:fa:ee:a0:e1:40:6f:6d:af:
                    10:94:60:cc:a2:a9:f1:f4:66:cf:fa:67:17:3d:8b:
                    5e:1d:0b:17:bd:8d:63:bf:f3:f1:bc:42:66:1d:f6:
                    97:65:00:81:99:9b:3a:80:95:18:f1:95:9a:7e:c7:
                    d2:c2:e5:7e:da:15:22:d5:d3:4f:fd:8e:dd:1b:77:
                    2e:d0:11:aa:46:23:f7:b4:fa:1d:80:c5:2b:8b:20:
                    ab:dc:bb:4f:7a:a9:e0:23:0b:41:ba:c7:be:ee:cf:
                    56:50:1b:0d:8f:26:ed:7f:c5:67:e9:f8:59:1d:94:
                    3d:66:cd:6a:73:b5:e8:46:1d:16:bb:4e:26:ad:f7:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1B:C1:4A:9C:EC:13:DB:0B:08:2A:74:5D:7B:40:70:E0:35:19:62
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4778832c-1010-48bb-af42-8eb0635a10f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d024:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c4:77:88:4a:a3:e6:5d:e5:68:71:98:5c:90:e0:1f:73:d7:c7:
         cd:b8:14:cd:a3:10:b6:8d:33:8b:fc:72:8c:cf:17:d7:ed:8a:
         7d:b9:7d:10:b5:29:da:62:14:bf:ca:ff:0e:ee:7e:fa:59:d3:
         1c:35:ca:e8:c5:35:05:fe:e0:71:af:e8:87:87:0a:91:9c:fc:
         bc:5b:ea:44:5f:a4:b5:64:01:34:77:62:ee:a9:cc:25:1f:1c:
         6f:f2:63:b7:50:ac:b2:f6:ba:f2:70:29:ba:d9:88:f9:61:8d:
         49:83:2e:30:e2:07:89:f4:1a:7b:ff:2f:e9:f2:3e:27:a2:09:
         2c:b0:87:2d:e1:a3:6d:8f:1e:eb:84:91:54:97:65:a5:61:62:
         f7:6e:fa:4f:a5:c6:f6:22:24:ce:12:bd:6b:8e:d2:17:c0:06:
         cf:f2:84:1c:4a:e2:2d:19:b1:cd:4b:29:b0:d3:aa:55:f8:44:
         48:25:3e:09:cb:54:e5:57:2c:db:fe:1a:d6:ff:35:33:5f:f1:
         4e:e5:83:7a:0f:2e:8e:45:09:b5:8e:df:0e:37:d3:77:02:e5:
         1c:c1:ef:fa:ba:db:18:92:ab:66:8f:90:b5:e1:19:08:26:91:
         ad:c5:24:b7:a9:11:66:1a:c4:22:7e:34:e0:c8:e8:b0:b4:ef:
         8a:3b:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----