Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/493f1269-3ba4-4dea-829a-985dda6749ee.roa
File:                     493f1269-3ba4-4dea-829a-985dda6749ee.roa (raw, json)
Hash identifier:          VKHVjqGMtH6damF7KuHCDhgAntanMxOa+9N6NsKVEEI=
Subject key identifier:   D1:0A:10:F1:24:F8:9E:35:BB:1D:BE:8B:67:32:E3:35:04:0C:48:94
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2DF9634EC76E770C590D08CA26919721A0C5372B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/493f1269-3ba4-4dea-829a-985dda6749ee.roa
Signing time:             Mon 26 Oct 2026 04:30:14 +0000
ROA not before:           Mon 26 Oct 2026 04:30:14 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f9:63:4e:c7:6e:77:0c:59:0d:08:ca:26:91:97:21:a0:c5:37:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:30:14 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=6c10f59bf9c78eb09ad9b21b1ce51c1399e5274ae297b011f54bc486eb10fbed, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:1d:e1:c4:94:a7:b6:fb:84:6e:28:7c:cc:
                    d5:be:bf:86:d1:80:1a:f2:e9:2c:46:7a:4b:9a:84:
                    98:38:18:11:31:0d:2c:f3:e1:1d:c1:92:e7:00:c0:
                    07:e5:a1:15:56:4c:c7:ef:e9:8e:39:b7:d1:7e:4e:
                    01:21:6a:5c:89:1d:45:53:f9:84:7e:7f:25:d0:65:
                    3e:6d:91:e1:c6:2e:bc:14:67:4d:12:2f:f7:69:e1:
                    46:17:31:df:97:f7:6c:a8:e2:16:00:af:8f:36:4c:
                    34:0a:2c:7b:21:6e:07:d4:6a:83:4f:8a:ac:74:cb:
                    3a:15:27:6e:fb:7c:bd:88:19:25:70:85:20:e1:95:
                    78:e3:d1:57:b6:cd:00:a8:99:a7:e2:44:36:d4:0c:
                    82:8e:35:e2:10:4f:0f:69:8e:c5:0a:44:51:0f:c5:
                    a8:dd:14:9b:ae:da:8c:22:ab:b2:f9:0f:96:5e:60:
                    7b:bc:31:f5:0a:83:c7:21:08:51:60:2f:49:c2:bd:
                    d8:83:65:3f:f7:82:8f:98:d1:37:a2:30:7d:5d:13:
                    1e:5c:20:36:8d:fd:f1:b5:c0:32:2b:c5:ea:e3:3e:
                    a5:8a:29:22:85:cd:80:ff:f7:88:44:3b:54:02:4d:
                    92:4b:e7:41:5b:73:4a:1d:4d:80:17:fd:d9:e4:7f:
                    aa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0A:10:F1:24:F8:9E:35:BB:1D:BE:8B:67:32:E3:35:04:0C:48:94
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/493f1269-3ba4-4dea-829a-985dda6749ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:ea:4a:6b:45:4c:e4:d8:b2:ca:d0:31:71:b3:cd:77:ae:4c:
         c6:d6:75:d3:85:c7:08:da:56:61:ab:90:6b:98:b6:29:2f:b3:
         02:b7:63:42:58:98:24:7f:4f:c4:ac:6b:f1:79:e1:c0:00:43:
         48:5b:0e:bc:f5:b2:3c:39:6d:83:2f:64:a7:a5:e3:68:bd:97:
         54:37:df:4c:ef:7e:61:eb:43:f6:22:14:1d:01:d6:b5:72:96:
         9e:bc:bc:72:f8:f5:c4:7c:9e:c8:d4:14:14:21:06:67:a0:f4:
         b8:7f:b8:28:74:a5:10:52:6e:3e:73:29:4d:e8:c7:60:da:20:
         b9:1c:df:01:8c:a6:40:56:01:2d:b3:8f:c3:d1:db:2c:8b:24:
         6f:6f:3b:73:f6:88:84:a5:31:86:2f:30:07:83:c2:3d:69:0b:
         5d:06:5c:78:fe:4a:cf:c9:3f:c5:2b:f6:fc:ec:50:e1:5c:13:
         20:63:72:ed:2b:0e:71:50:16:b0:d9:c3:8f:a3:09:05:8a:ce:
         0c:85:e6:77:c0:81:6d:79:b7:28:e9:86:2d:11:08:f7:12:fb:
         6c:71:e2:91:36:77:f1:a6:2a:a4:20:5e:43:84:51:dc:59:e9:
         ce:43:1c:34:5a:c4:ba:73:3e:2e:a1:1c:ba:0e:f5:7d:92:1c:
         42:ee:70:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----