Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/49c2a5be-4bb3-4c42-b3cb-e0cbac28f97b.roa
File:                     49c2a5be-4bb3-4c42-b3cb-e0cbac28f97b.roa (raw, json)
Hash identifier:          L5akqxsrQQp9GHdlvQTlFojsfMG3eDEpefmUy2WgIT4=
Subject key identifier:   00:ED:04:85:5C:0A:A1:CD:7C:7B:4C:B1:24:33:29:9B:D9:D0:4E:CD
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1073F036ABF912ED988D19B8EE2FD11B9037E0C4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/49c2a5be-4bb3-4c42-b3cb-e0cbac28f97b.roa
Signing time:             Sun 16 Aug 2026 00:00:04 +0000
ROA not before:           Sun 16 Aug 2026 00:00:04 +0000
ROA not after:            Sat 14 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06b::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:73:f0:36:ab:f9:12:ed:98:8d:19:b8:ee:2f:d1:1b:90:37:e0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 16 00:00:04 2026 GMT
            Not After : Nov 14 23:59:59 2026 GMT
        Subject: serialNumber=c232ff8bd0cc5ba7a05860936a4e05cc89ffb181d7acf6c040072ef1eb9c7538, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:d1:45:32:64:f9:8b:15:c0:ac:d1:4e:54:
                    6f:f9:8b:e7:45:26:f2:dc:bb:a5:1d:23:54:f2:ec:
                    6c:bf:79:5e:68:1b:db:7d:14:b4:6a:cc:69:22:9e:
                    c1:ee:78:99:cc:62:8d:1c:64:2c:af:d9:aa:22:24:
                    44:9c:25:71:eb:bf:c4:eb:c2:38:7c:01:ef:51:3f:
                    5f:3f:ae:79:12:ca:b4:d1:83:36:01:57:86:bd:19:
                    a7:1f:a3:14:cb:14:dd:29:de:c3:54:54:9f:ca:78:
                    eb:1c:fe:8b:68:b0:ef:c4:c6:ed:38:8c:cd:ed:17:
                    1d:29:6f:18:fc:4d:10:1f:be:88:ae:19:7a:f4:d1:
                    a5:13:fe:fc:a9:d9:94:26:bd:aa:73:52:17:2c:e8:
                    87:00:2f:e4:56:a6:a7:bd:7e:c6:f8:29:74:a9:5a:
                    ed:f7:ff:0a:3d:2b:6a:4f:6c:c0:24:ec:4e:83:f8:
                    dc:c3:16:60:f9:1a:27:4b:bf:ca:c5:7b:d9:ab:0d:
                    80:6a:bf:2b:78:57:aa:ee:fa:e8:54:74:ec:b1:f8:
                    69:b4:8d:38:8c:03:e3:8e:74:93:a2:ec:49:8d:83:
                    30:57:b1:d4:91:fb:c6:97:53:9a:b7:68:48:5f:c4:
                    4b:18:f3:a1:97:0a:9d:93:27:96:61:dc:6d:f4:33:
                    41:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:ED:04:85:5C:0A:A1:CD:7C:7B:4C:B1:24:33:29:9B:D9:D0:4E:CD
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/49c2a5be-4bb3-4c42-b3cb-e0cbac28f97b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06b::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:59:84:26:71:7e:3f:76:a9:34:c6:2f:57:3e:85:3c:91:72:
         2b:fe:43:c4:f8:a6:8f:cd:f0:69:af:f0:0a:3d:d3:dd:da:6d:
         ac:aa:d5:2f:78:03:ae:7c:a8:26:1c:51:e5:08:f2:cb:aa:cf:
         5f:ca:6d:ea:e5:c6:87:72:13:3b:d6:f9:b5:80:db:6b:bd:b8:
         74:d3:f5:55:9d:23:94:80:6a:45:4e:04:02:d3:9e:c3:eb:6d:
         33:6a:64:a6:04:fa:0f:9b:46:8d:60:5f:2a:44:3a:c6:a4:fd:
         7b:24:9b:3c:a1:f7:7c:ce:0d:49:c0:0f:ec:fd:5a:c7:8f:49:
         5e:72:30:57:88:58:bd:f7:f9:37:64:69:cc:d4:14:21:41:6c:
         21:f7:3a:83:6f:c3:63:1a:de:a7:14:40:ad:bd:20:69:66:e0:
         d8:9d:4f:2a:3d:47:1f:4e:61:58:2c:24:17:2c:67:05:db:07:
         25:79:32:60:79:77:bc:14:60:64:e1:1c:28:9e:81:df:8b:45:
         18:86:7e:4f:3d:c7:3b:04:c8:8d:6a:e8:2f:71:d4:2c:ab:ba:
         7b:44:25:7b:25:c1:e6:84:66:21:86:c8:37:1b:53:58:da:22:
         64:08:ed:81:6b:b9:86:4c:54:1a:89:25:b6:dd:82:57:ff:31:
         04:a4:3d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----