Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa
File:                     5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa (raw, json)
Hash identifier:          gc23c9WTogS9eMfhLp9cAn/M3l2MqbHpk3t6lRez7+c=
Subject key identifier:   9A:06:8F:58:D9:E8:E0:F1:86:CF:0E:C3:52:48:24:F3:5C:C5:19:2D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7AC7C98720BA68E098E86CA3EDD97021A404FC3A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa
Signing time:             Mon 26 Oct 2026 04:40:53 +0000
ROA not before:           Mon 26 Oct 2026 04:40:53 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d016:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c7:c9:87:20:ba:68:e0:98:e8:6c:a3:ed:d9:70:21:a4:04:fc:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:53 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=77c5f338f0b6cb68920d2a9a0d6ac3cd88b6bb015f9eeb3cfaa2c58743743db0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:22:7b:18:b1:1d:27:6a:37:49:3f:e0:2e:
                    44:68:d6:88:5d:82:93:34:7f:db:20:1b:2b:49:c0:
                    c3:75:c4:96:6d:ac:db:6d:ac:08:81:de:b1:8e:a7:
                    d2:3c:08:e0:69:4b:b4:81:ca:2b:55:01:f9:39:f1:
                    b6:5d:34:06:5a:dd:44:f4:a0:f0:1f:e0:6c:fa:81:
                    fa:eb:ca:7a:77:29:99:fc:5a:cc:60:f3:fb:92:e8:
                    91:51:91:26:75:c1:44:6b:b4:c8:00:0c:f6:52:b1:
                    37:04:c4:0d:74:20:6c:dd:fb:10:b5:3f:d6:e4:2d:
                    d6:cd:36:bb:78:65:72:b7:96:0c:79:97:06:71:99:
                    80:14:55:9c:76:90:ff:41:78:95:50:ca:40:d8:c0:
                    09:9c:47:c1:89:a3:93:c1:a3:56:b5:5a:7b:0c:89:
                    9e:38:b0:a2:1d:85:4b:4f:62:c3:8a:34:78:31:1e:
                    0a:6f:24:dd:3b:da:0f:90:21:fe:1d:88:56:f4:07:
                    84:47:0a:68:99:d8:c6:15:9e:14:e1:25:c4:9a:ed:
                    ae:13:96:12:94:25:a7:45:e1:e6:1f:c5:38:6b:b9:
                    e7:41:57:8d:11:d8:68:10:5a:5f:eb:bc:05:d6:9f:
                    e3:32:c9:0e:1b:67:ca:05:ba:ed:ac:d1:05:cf:7b:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:06:8F:58:D9:E8:E0:F1:86:CF:0E:C3:52:48:24:F3:5C:C5:19:2D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d016:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:30:8b:0a:fc:0c:4e:78:1a:bc:a8:b0:8d:f1:d4:36:da:
         54:ae:08:07:19:da:cc:14:3c:f0:6f:76:9f:8e:16:d3:2f:bb:
         ff:a0:70:ed:ef:10:e9:40:69:48:f3:58:b9:49:3a:af:5a:2a:
         f3:46:c1:77:cc:9b:94:a7:63:0d:a2:43:f3:a1:be:cf:06:eb:
         91:51:ed:bc:2a:a4:f8:51:84:33:26:20:9e:68:22:ee:78:04:
         c7:77:bd:33:12:54:a9:0f:50:0e:dd:6b:75:83:af:c1:dd:77:
         f5:7c:c2:b2:4b:39:00:1b:77:cb:55:66:d9:e5:fa:7c:db:2a:
         ea:1b:b6:89:76:7c:98:f6:30:be:5b:46:ec:68:ae:24:98:13:
         52:44:09:72:cc:1b:63:14:d2:2c:f7:e6:68:7a:8c:d4:b5:16:
         64:05:1e:82:24:3b:64:fa:5b:27:97:73:fc:39:46:9c:1a:a7:
         6f:60:e6:6f:e8:c2:e8:1f:3d:d1:82:94:5a:d1:b1:80:65:52:
         b8:91:64:c8:1c:8f:3c:cb:c8:3a:98:3e:de:7e:79:90:b7:89:
         87:2e:93:5b:8f:7a:24:73:f3:45:a2:cc:60:32:f9:db:77:65:
         c8:78:bd:80:7a:5a:6a:27:11:e4:e0:8e:6a:89:52:f2:e9:54:
         c2:47:14:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----