Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/538037c5-70a6-4b45-b84c-b4af8015af39.roa
File:                     538037c5-70a6-4b45-b84c-b4af8015af39.roa (raw, json)
Hash identifier:          x2x6n/msVSILIKs0RLItIOuuEFLnsQ3w1LsptRW5h6A=
Subject key identifier:   D6:54:29:1C:25:3A:BF:A1:BF:7E:86:F7:3F:74:9F:CD:F5:A1:0F:45
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       602C96D40B50F81EFCE837901A7175B6AF8163A1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/538037c5-70a6-4b45-b84c-b4af8015af39.roa
Signing time:             Mon 26 Oct 2026 04:30:33 +0000
ROA not before:           Mon 26 Oct 2026 04:30:33 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d029::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2c:96:d4:0b:50:f8:1e:fc:e8:37:90:1a:71:75:b6:af:81:63:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:30:33 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=8bfd4d70c32a9c1ba8431ffdf55cd1af71acbf1d7cde34c00eff88f3057e7b1b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:f1:53:4f:01:08:6b:60:67:e5:54:f4:c9:
                    f7:e7:09:b4:9c:87:29:3a:1b:17:9f:26:e5:b7:66:
                    8d:8c:49:92:ac:43:77:4e:8c:aa:32:38:d1:ce:11:
                    e6:60:51:aa:5e:4a:2c:5f:05:54:1f:67:8e:14:de:
                    b8:40:24:a6:c3:69:03:74:2f:14:66:7f:78:ba:9e:
                    6c:c4:d2:f7:88:a3:c0:c2:43:16:53:61:74:d8:2a:
                    71:a8:ba:2c:b3:95:7b:47:0b:7d:a5:4f:ca:54:13:
                    6c:3b:aa:d9:28:db:dc:7e:34:c6:09:bc:a4:fa:02:
                    5a:85:e2:93:9e:62:3b:d2:1e:a3:06:79:fc:54:c7:
                    81:d6:43:d6:c5:6d:87:cb:a0:20:8d:d8:7c:a4:ce:
                    e8:17:38:7e:13:1e:8b:2f:cb:7e:f4:9d:b0:8c:ba:
                    34:42:ff:cc:3a:a1:63:46:d4:d1:40:10:de:6e:07:
                    a6:04:89:3a:98:ac:cf:64:42:7e:4c:46:73:82:61:
                    e8:c3:b7:f2:3e:ec:96:31:c6:d4:74:7e:d0:3d:09:
                    f9:73:e3:37:ed:ff:ed:8c:23:79:35:9a:70:85:1d:
                    6a:08:41:ed:5f:b8:d8:99:9e:3d:c9:fd:ec:1a:56:
                    91:84:50:2f:f3:28:1f:7c:60:79:b6:97:48:2a:84:
                    66:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:54:29:1C:25:3A:BF:A1:BF:7E:86:F7:3F:74:9F:CD:F5:A1:0F:45
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/538037c5-70a6-4b45-b84c-b4af8015af39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d029::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:ff:7e:a5:b7:84:76:82:c8:d2:a6:6e:c4:98:35:3d:79:a0:
         bf:f4:38:0c:a0:0b:3d:a8:74:ec:39:3e:9b:a8:4c:93:80:3c:
         6b:f8:12:26:d7:71:a4:b3:c2:21:74:57:f9:42:41:da:5b:12:
         b0:a2:02:a8:ab:4e:85:bd:f2:35:e2:23:db:7e:7d:78:98:15:
         41:d6:5e:9f:d7:4e:44:65:df:7e:7b:82:35:38:31:38:fc:f2:
         d7:04:85:9c:d1:ea:79:77:bf:c6:30:86:4a:9f:87:07:6b:76:
         7e:41:de:bf:31:e5:ca:da:1c:de:a7:a6:79:b2:4f:83:84:ed:
         ca:06:de:7b:c0:3d:f7:4d:ac:4a:98:ee:06:45:6d:31:d1:91:
         df:9a:ca:bf:b5:0b:66:3e:21:2f:1d:f7:22:09:97:05:94:fc:
         af:9d:35:d7:17:9e:75:60:a0:a4:84:34:78:f4:a0:b7:45:63:
         60:76:8e:28:8f:16:0d:f0:42:75:5f:73:11:aa:d4:c6:a9:77:
         9b:29:da:40:86:0f:d0:cd:51:c1:fc:93:65:ca:88:8b:bf:c4:
         c1:f2:97:44:f9:51:3c:d4:5d:be:7b:c5:57:ed:8c:0a:01:2d:
         a0:7a:a8:f0:96:f2:0b:53:d5:e6:b6:92:b6:97:93:ab:85:dd:
         ac:74:26:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----