Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48b510e0-0d59-48d3-96c5-ddb87c118e43.roa
File:                     48b510e0-0d59-48d3-96c5-ddb87c118e43.roa (raw, json)
Hash identifier:          xYHQc04jKaq2D0TZfnGu2ClFJ2+LiGos9xvzj/s4uuY=
Subject key identifier:   15:88:8A:85:74:BB:98:20:EA:21:6E:76:4B:05:00:81:26:B8:84:22
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1D321665206816E980CFA7BF73386F91C24F1EE5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48b510e0-0d59-48d3-96c5-ddb87c118e43.roa
Signing time:             Mon 26 Oct 2026 04:40:42 +0000
ROA not before:           Mon 26 Oct 2026 04:40:42 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:4020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:32:16:65:20:68:16:e9:80:cf:a7:bf:73:38:6f:91:c2:4f:1e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:42 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=380265e842f26f9aefadef559a7884420a6ef40bddae912a09a3f14a6b6ac66a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:28:b2:67:87:1a:59:bf:2d:b7:c8:4d:56:
                    81:de:f9:04:59:ce:94:e6:69:66:e1:ed:a5:b0:46:
                    2f:ec:ff:55:9b:c4:92:be:ea:cd:1f:1d:d9:df:51:
                    77:88:e3:57:b7:36:f8:03:7c:34:cd:57:5b:9e:12:
                    ac:cf:52:9e:32:24:7a:ed:b4:57:c5:89:89:b1:a1:
                    20:78:39:ae:db:97:9e:fc:8a:57:2b:7e:b7:51:38:
                    60:2d:37:17:0a:f6:90:1a:09:49:c4:5b:55:84:99:
                    e4:a7:07:01:7b:83:3e:52:dc:26:fc:ae:a6:4f:69:
                    c7:f1:fa:4e:79:66:8e:45:0b:28:2e:55:d0:db:96:
                    d3:80:40:45:16:c9:30:ba:c9:5d:3d:8c:32:a7:72:
                    b7:d8:af:d5:40:4a:8f:02:95:5f:b4:ae:19:ce:04:
                    5d:ad:d3:24:41:30:8a:53:68:72:05:bd:2f:1b:21:
                    d0:ac:a5:25:50:fd:d0:9c:a8:8f:4b:f9:d4:f5:49:
                    cd:f1:cb:4b:b7:d3:2a:68:6a:ab:96:c6:de:43:65:
                    03:0f:22:8a:4d:25:82:35:75:90:0d:9a:d6:83:03:
                    8c:32:d4:f7:dd:21:26:d2:9c:8d:ee:3e:a7:0b:fa:
                    67:40:04:bb:74:8f:10:4f:0b:08:c2:b9:68:a7:b4:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:88:8A:85:74:BB:98:20:EA:21:6E:76:4B:05:00:81:26:B8:84:22
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48b510e0-0d59-48d3-96c5-ddb87c118e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:12:53:dd:1f:c5:86:29:8e:42:a6:61:c3:4e:f6:80:0e:f7:
         e2:ae:47:16:7c:c7:55:f1:ca:cd:39:41:2f:5b:ec:51:0d:a0:
         58:d0:ee:fe:ce:96:2e:59:31:b6:70:fa:19:62:57:d0:e0:b9:
         f4:e9:30:20:53:fd:a9:4a:ee:44:3e:e6:9b:77:21:51:5f:39:
         cf:e5:48:38:97:d3:d9:88:42:4f:f3:8b:8b:c3:09:ff:22:fd:
         0e:f1:a9:84:0b:a8:1b:25:21:38:05:93:ce:e9:91:17:a0:db:
         48:b2:a1:c4:d3:0e:82:75:9b:a0:33:32:41:cd:11:5f:82:21:
         a4:ad:18:2e:ed:b9:03:0f:e2:ac:12:cb:d5:86:fa:cd:f8:b4:
         62:f4:00:83:62:fa:95:3f:4f:f1:55:e0:62:ad:80:a7:42:44:
         8a:ab:5f:47:2c:91:52:11:e8:23:26:82:2d:ac:cd:e3:27:6a:
         4a:ab:63:1b:bc:ff:53:13:a3:f2:8a:b5:85:e1:02:f6:80:1d:
         e9:3f:1f:e6:da:81:3a:eb:b0:ca:cf:e0:3f:c1:c5:32:f7:77:
         96:0d:4d:b2:8a:6d:fb:0b:22:56:fb:a3:f0:6d:ab:6e:f7:9a:
         8f:28:c2:99:a2:de:e3:87:0d:20:a8:4d:d8:37:a8:59:d7:9b:
         86:fc:90:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----