Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa
File:                     48ce7dfe-434d-4b57-b520-9001ae26be85.roa (raw, json)
Hash identifier:          IR8NhyTsQW8ePfAuOLzuYVvwdmncvWeMatc1iYq43S0=
Subject key identifier:   70:D9:31:93:14:6A:BE:5C:A1:31:03:2F:38:51:7F:0F:8F:A2:7D:F3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4553A8AB81F5BF67554C603B8D8F94B6B7330B95
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa
Signing time:             Mon 26 Oct 2026 04:50:47 +0000
ROA not before:           Mon 26 Oct 2026 04:50:47 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:8010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:53:a8:ab:81:f5:bf:67:55:4c:60:3b:8d:8f:94:b6:b7:33:0b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:50:47 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=2cd80876b76e549cb6136d858953c90dc41f6f28bfc6dc1295e4d47ed34bc82b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:05:2c:7b:24:38:4a:7a:2e:70:17:1a:dd:
                    01:03:a8:9e:a8:6a:09:4b:be:d1:7e:7c:4a:d9:f7:
                    c2:1f:b7:25:17:a3:11:8c:34:77:08:ae:cb:b6:b8:
                    dd:77:fd:d1:53:96:b8:ba:0a:f4:75:02:52:95:73:
                    19:d7:97:9f:07:a9:ba:85:f1:04:d2:2c:1e:27:0c:
                    08:1b:3c:86:bc:17:94:27:8b:b4:74:23:b8:38:23:
                    0d:84:aa:bc:14:a3:b2:5c:2b:3a:84:f2:35:2e:d6:
                    2e:37:ad:f1:3f:23:78:da:37:21:64:51:92:aa:89:
                    21:9c:a5:d2:dc:9a:a1:0c:31:fc:9d:ac:ae:2a:ac:
                    e4:73:2f:0c:c6:ec:c3:09:23:b6:70:39:59:d8:7e:
                    38:63:65:0d:40:75:6b:9f:2f:1c:32:3b:d3:27:65:
                    d6:50:a2:dc:5b:ad:50:71:a2:e6:5a:25:8f:2f:41:
                    60:66:19:3e:3e:3f:02:f5:e2:34:f8:43:76:e6:71:
                    30:28:54:78:16:4c:1f:7b:84:c8:b5:14:6e:3d:c5:
                    44:8c:36:d6:46:c1:20:f3:f5:92:0e:65:37:5b:de:
                    30:b4:7e:45:78:16:5f:73:cb:13:6b:6a:92:0f:4f:
                    77:3e:a8:6a:9e:aa:af:fd:06:bb:2b:60:19:df:85:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D9:31:93:14:6A:BE:5C:A1:31:03:2F:38:51:7F:0F:8F:A2:7D:F3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:8010::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:4d:ca:ea:5b:68:53:42:9e:de:1d:5f:c4:1b:af:a5:c0:c7:
         eb:1f:95:46:25:31:79:dc:74:4c:0a:29:15:f8:03:fd:a0:4d:
         80:43:d8:e4:a9:04:05:40:51:fb:be:52:1b:6d:df:1c:92:73:
         42:e1:b3:88:40:bd:b1:d5:c2:07:d9:a0:05:ee:af:2b:66:78:
         5f:0c:a3:bb:2b:e1:10:86:78:f2:3e:aa:31:04:2a:16:8b:93:
         94:25:3d:7b:f1:f3:d5:71:eb:81:15:4e:aa:e7:16:d3:18:af:
         63:66:67:85:d4:c3:58:aa:6e:e3:d2:e9:75:3c:fb:33:bb:67:
         3d:10:00:b1:07:73:ae:d8:5f:a5:d5:a5:43:90:cc:bc:a1:3a:
         97:27:4a:78:24:b0:58:be:a3:ad:2b:75:e8:91:f8:bc:ce:a1:
         bf:4d:71:f5:ce:81:d7:b4:b9:c6:59:65:15:87:a5:e1:0d:eb:
         29:77:14:1f:c4:3a:bd:6a:ad:21:ca:30:43:f7:1a:5b:cf:dc:
         f4:05:87:c1:2e:5a:90:89:1e:b6:78:a4:1d:e6:2a:92:0e:a4:
         e0:46:ca:90:33:98:b0:b6:41:2b:bc:82:a1:b3:73:aa:8f:bc:
         08:c8:a3:9c:e1:de:e1:1d:b3:4d:1b:bf:2a:7b:48:3b:79:59:
         41:73:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----