Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a023ba7-6dbe-46ac-bc6f-621ed6946b6e.roa
File:                     5a023ba7-6dbe-46ac-bc6f-621ed6946b6e.roa (raw, json)
Hash identifier:          bw7VGdO3Q+sIkv2YH/dN2kKqC37j5n7ek240BtkuE6g=
Subject key identifier:   57:5B:C1:C4:5A:D3:33:1E:19:45:D9:BB:8C:E3:64:56:81:3F:04:21
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       14D10971AF9CD60DBBB8A43529501B28B37F54B1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a023ba7-6dbe-46ac-bc6f-621ed6946b6e.roa
Signing time:             Sat 24 Oct 2026 02:02:59 +0000
ROA not before:           Sat 24 Oct 2026 02:02:59 +0000
ROA not after:            Fri 22 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:8c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d1:09:71:af:9c:d6:0d:bb:b8:a4:35:29:50:1b:28:b3:7f:54:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 24 02:02:59 2026 GMT
            Not After : Jan 22 23:59:59 2027 GMT
        Subject: serialNumber=125d67404a91cdef51b42715db5ad6a725903f012db47e5a36cefbbbd02d3c89, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:07:a2:66:73:d6:4e:d9:61:ac:bc:ea:04:
                    54:5a:8c:40:f2:c9:ab:61:bb:bd:db:59:45:55:26:
                    42:d7:05:b7:55:ce:84:17:12:e5:03:33:60:b3:2c:
                    15:f6:8f:2d:e6:e1:d9:67:e1:01:7f:64:d6:0c:7f:
                    84:b1:ef:9c:b2:fc:c1:6d:7f:b2:36:4b:e2:99:06:
                    4d:97:c6:a0:14:30:12:8c:f7:36:84:7d:38:15:7e:
                    ab:f3:42:3d:2f:08:05:b7:e2:7f:dc:ce:e9:9b:e7:
                    a2:06:1f:6d:ca:92:a6:a9:a0:26:2d:0d:2d:7f:45:
                    3f:3e:08:8b:f6:52:27:3a:87:6a:fd:a2:f3:b1:d4:
                    0c:ba:78:54:30:41:04:d6:5b:55:3c:cc:42:eb:7a:
                    f7:c6:c2:ff:ec:c0:69:6b:d2:85:fe:4f:ca:03:70:
                    3a:f8:c7:51:d8:97:79:1f:a8:cb:33:d3:4e:d1:1c:
                    d3:17:aa:d4:94:a3:2f:cc:db:0d:ef:dd:17:02:79:
                    fb:20:53:af:ac:62:ff:1f:56:67:e5:0c:1c:5f:af:
                    86:71:5d:0c:01:ed:8b:38:d3:dc:d9:f6:2c:46:0a:
                    10:c0:85:e2:f6:ea:ed:b4:c0:d8:10:db:53:08:0c:
                    48:7e:9c:08:63:bc:38:99:70:d6:0b:01:65:ea:5b:
                    52:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:C1:C4:5A:D3:33:1E:19:45:D9:BB:8C:E3:64:56:81:3F:04:21
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a023ba7-6dbe-46ac-bc6f-621ed6946b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:a6:24:c0:24:34:5c:65:a1:e5:03:83:75:e0:c9:d2:61:ad:
         0d:41:ac:f7:ca:91:d5:5a:32:a1:7b:14:60:8f:76:b6:bf:3e:
         7d:70:01:fe:d5:47:38:50:43:53:af:39:d6:69:1c:d1:f1:2b:
         ef:fa:c5:27:f9:6d:70:2c:de:5e:5b:01:ca:9a:c6:25:1f:79:
         bb:72:fe:45:14:5e:df:78:3d:3a:d4:9e:9f:e5:1b:db:e4:c6:
         2f:9c:8e:12:40:ec:54:24:01:91:2a:d8:eb:9e:9e:12:72:13:
         90:31:9b:f6:24:f3:99:9a:fa:a6:a8:37:92:aa:b6:e7:21:1b:
         79:b6:17:86:2c:ba:f5:8a:f2:8b:34:4e:ee:9b:3e:db:88:bb:
         b1:7b:97:fc:28:60:8d:5d:97:1c:73:37:75:77:f1:99:c7:e5:
         6d:78:6b:e3:19:ee:10:23:9d:a2:c0:aa:c3:69:58:e5:49:43:
         1d:7e:87:41:02:1f:4b:c1:5a:fc:e3:2f:c8:78:5f:7c:08:95:
         37:83:5a:11:55:f5:46:8c:19:15:c2:97:e1:1b:cd:9f:b8:01:
         51:06:ac:4b:de:5f:02:71:0c:fd:d6:f0:40:ab:f3:d0:a8:62:
         e0:c7:9b:c9:db:f3:0e:75:62:c8:be:64:f2:97:14:4b:ac:0c:
         14:ec:70:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----