Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a7b2b27-8130-47da-97da-78c91087b05e.roa
File:                     4a7b2b27-8130-47da-97da-78c91087b05e.roa (raw, json)
Hash identifier:          Qip/xNSjWcigv1wCHn76l++Dpmb4kLGxvaqpWVKkNws=
Subject key identifier:   96:83:A7:FC:6D:36:A9:3A:24:76:A4:22:2B:E5:E8:29:22:A5:A7:FA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       66AB90B74D97D192CDF07D8894543414CCA25339
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a7b2b27-8130-47da-97da-78c91087b05e.roa
Signing time:             Mon 26 Oct 2026 04:40:20 +0000
ROA not before:           Mon 26 Oct 2026 04:40:20 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:c040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 23:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ab:90:b7:4d:97:d1:92:cd:f0:7d:88:94:54:34:14:cc:a2:53:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:20 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=125173328377bd9725be0fef892cc80954e49f3ac3a9c0494750eabf299d6312, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:13:c3:9c:ce:70:5b:73:44:32:a5:73:43:
                    74:6c:e4:8a:10:35:7b:93:e5:98:ef:02:a5:79:fc:
                    cd:64:fd:3b:27:f9:a6:c9:d6:37:47:8e:91:11:ca:
                    7f:5a:32:1b:67:31:e7:4c:a6:4a:c2:a1:d1:83:e4:
                    cf:d3:7f:93:2d:7b:59:3c:af:2b:ab:ea:eb:36:a0:
                    fa:cc:f7:34:b3:2a:bf:d0:be:84:ee:0c:15:c0:62:
                    2a:de:52:f2:df:0e:2e:fa:82:63:1c:e2:ba:da:a4:
                    4c:b5:3e:67:62:61:b4:9d:c1:0d:b5:18:47:2c:75:
                    4f:5b:5f:21:1a:86:57:6a:09:19:dc:45:aa:63:99:
                    ef:68:b8:82:af:fc:d3:0e:dc:6c:bd:70:c2:21:7a:
                    fa:0d:7d:be:3e:dd:7d:3c:42:fb:eb:45:15:46:ed:
                    45:04:4d:77:99:83:75:42:c0:da:37:e0:28:6b:be:
                    07:33:48:d3:1c:e8:89:8c:0a:68:08:08:f5:c4:f0:
                    9e:36:e0:26:22:d0:d7:74:5b:7d:82:5e:a7:33:ab:
                    e5:54:bf:e5:4c:9b:a7:b7:39:8f:e8:aa:af:ae:97:
                    e6:64:f6:79:73:d6:e2:27:3f:5f:46:8e:6c:8d:3a:
                    d3:4f:54:50:7d:a6:9b:b5:46:24:96:86:07:03:27:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:83:A7:FC:6D:36:A9:3A:24:76:A4:22:2B:E5:E8:29:22:A5:A7:FA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a7b2b27-8130-47da-97da-78c91087b05e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:c040::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:4b:84:13:ce:2f:60:b1:9b:5f:e5:94:61:ed:1a:96:c8:b7:
         bf:ff:7a:ef:34:c8:51:fb:3a:fc:3a:dc:f1:8c:d0:7b:8f:09:
         d0:da:f6:a7:48:74:61:69:b7:de:59:d4:f7:cb:32:e1:ff:d0:
         b3:da:32:1d:1f:b2:b4:99:ee:65:4b:94:54:83:1d:6e:61:e2:
         3f:52:4e:fe:df:9a:c1:1a:7b:ca:8a:f2:31:8e:5a:77:96:0c:
         ef:31:3d:58:f9:df:a3:71:74:f2:06:59:85:08:c9:8d:0f:e9:
         ec:66:a4:c9:cd:dc:11:76:46:3b:d2:9b:55:0f:11:01:ce:81:
         31:f1:8c:6a:cf:42:8b:ea:a8:3a:ea:53:4e:10:f5:08:97:54:
         49:f4:e9:55:a1:88:ec:21:ff:e3:d3:4b:e7:3f:75:d7:3d:d4:
         39:50:f8:18:58:0f:c0:59:5a:83:bd:a3:07:e7:f4:ce:b9:5c:
         05:01:b2:42:b9:90:04:ba:94:be:a5:c9:af:84:16:d2:23:a5:
         e6:5e:4d:c1:10:d6:f9:78:1e:54:4f:c6:3c:a8:c6:ca:ab:02:
         51:2c:76:3c:e9:26:5c:17:32:98:e4:81:f7:07:92:9a:f5:ee:
         77:c6:da:cc:62:11:20:6d:51:56:52:d2:2f:ad:28:54:79:9c:
         eb:70:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----