Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e5a2469-e6d8-4ced-9d3c-dadb531904c6.roa
File:                     4e5a2469-e6d8-4ced-9d3c-dadb531904c6.roa (raw, json)
Hash identifier:          ag7L9dZBAoc4xBRCJYUNReh33lqW5n369GOXp22Ce5M=
Subject key identifier:   58:97:87:ED:32:F0:07:73:09:02:69:FC:6F:D6:86:27:41:67:62:42
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5B06C299F02870612F67B01E9BA4D67DA0687226
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e5a2469-e6d8-4ced-9d3c-dadb531904c6.roa
Signing time:             Wed 19 Aug 2026 00:50:06 +0000
ROA not before:           Wed 19 Aug 2026 00:50:06 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d05a:880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:06:c2:99:f0:28:70:61:2f:67:b0:1e:9b:a4:d6:7d:a0:68:72:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 00:50:06 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=d97e15dad8d8633f02afe672517b2a0d66fc92e6ff5ee7708daaa1544e5cb2c1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:b8:bd:ba:bb:94:a5:15:f4:31:76:86:29:
                    df:01:7b:3b:10:14:3f:5f:ed:41:57:f5:db:5b:9b:
                    5d:34:0b:b2:b7:e3:c4:a0:f5:6f:80:ed:d1:90:7c:
                    da:8c:50:04:87:79:36:c3:7d:eb:95:98:a5:f5:c7:
                    13:5e:d7:49:5f:a7:4b:dc:bf:13:9f:24:8a:f2:0c:
                    56:e2:eb:17:cd:cd:21:5a:c7:e1:48:5a:65:a9:23:
                    c5:5c:b1:2b:f6:c4:0a:e1:8a:4b:37:6c:85:a7:ac:
                    d1:23:9e:a3:e4:f0:31:83:2e:29:01:9c:b6:da:14:
                    02:4b:7c:6f:fb:57:1c:6f:e3:f1:fe:6c:73:01:31:
                    ea:0a:84:0c:e1:8c:c8:08:a9:9e:7a:02:f3:d6:26:
                    37:39:ba:b3:64:24:e8:51:b1:99:c2:ac:41:92:fd:
                    9f:af:7c:54:4f:40:d7:68:a5:d8:fd:4e:e0:c7:16:
                    5a:63:8d:b0:35:09:ab:99:25:d2:8c:79:f4:cc:a2:
                    14:53:7b:a7:ab:05:64:6e:55:f3:92:59:45:33:42:
                    7a:fb:36:b6:cb:23:03:a8:0a:3c:2c:76:7b:00:7d:
                    48:6d:97:57:0d:1a:93:c0:16:04:fc:49:a7:0d:50:
                    ea:e4:0c:f6:22:a2:c8:08:4f:eb:4f:32:2e:be:de:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:97:87:ED:32:F0:07:73:09:02:69:FC:6F:D6:86:27:41:67:62:42
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e5a2469-e6d8-4ced-9d3c-dadb531904c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d05a:880::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:62:66:23:47:73:7d:89:e7:29:a9:c6:01:f6:87:20:61:5c:
         c0:51:a6:95:f5:30:26:41:ce:8d:e6:7a:29:5d:5c:87:f6:0a:
         9d:a2:17:6c:6c:ad:b1:8d:4d:77:44:60:88:b7:ad:ed:71:8e:
         05:5e:ee:7a:47:fa:21:a0:95:95:b6:52:87:13:a5:7b:c2:67:
         6f:da:d3:76:b8:f1:0c:b0:1c:85:59:c2:4a:a1:25:b3:e1:2b:
         89:a1:d7:1a:54:09:b6:09:6a:85:d5:9f:e4:0a:0f:8d:e4:80:
         75:c4:54:87:e1:81:b7:e2:e4:68:f3:6d:12:9a:78:bd:5b:16:
         36:f1:04:d1:39:9b:3d:89:51:dc:69:59:13:42:7b:b0:4d:ff:
         ee:dd:1e:53:71:14:d5:b8:31:00:2a:c8:7a:db:b5:2c:0c:78:
         82:e5:0e:d1:e1:bb:d2:b1:9e:c9:e8:9f:ca:41:8b:94:dd:00:
         f8:c2:c9:74:e5:06:fa:e6:c1:70:37:6d:cc:b0:da:ef:84:4e:
         65:1c:f5:36:23:d6:03:31:f9:96:d9:49:97:98:42:98:84:38:
         0f:fa:1a:4c:e6:6a:72:2d:5c:a1:19:34:ee:39:39:ce:a0:fa:
         b5:62:6f:0b:2f:21:3d:6b:10:ac:ee:a7:f4:7a:94:7f:ec:5f:
         c9:36:5d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----