Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d1fff98-4415-4cd0-b2cc-26f61a8cae7b.roa
File:                     5d1fff98-4415-4cd0-b2cc-26f61a8cae7b.roa (raw, json)
Hash identifier:          dq85huHOjiOZaVFSOlXJ229FzucGuglrzaF7y18vsI4=
Subject key identifier:   98:1B:A3:92:7B:94:C1:B8:B1:71:8C:E5:E4:21:A5:79:A0:BB:75:25
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       24B026DE581FDED348E75703C699250BC5E4967D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d1fff98-4415-4cd0-b2cc-26f61a8cae7b.roa
Signing time:             Mon 26 Oct 2026 04:50:53 +0000
ROA not before:           Mon 26 Oct 2026 04:50:53 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:80b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b0:26:de:58:1f:de:d3:48:e7:57:03:c6:99:25:0b:c5:e4:96:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:50:53 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=25df51c531209df4f1d986cc344ccfb6964e698e86564ac5d3130a0680d7e496, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:fa:4b:99:f9:ae:20:9f:85:f8:3a:94:43:
                    a3:9c:80:10:d3:81:1e:ab:17:b1:62:bb:d8:24:3a:
                    54:fd:68:b8:c4:43:e6:4c:e4:0b:ea:3a:c1:71:bb:
                    d8:1f:f4:d9:ed:d4:1b:b4:23:ec:b6:b8:fe:48:7b:
                    cd:41:09:08:f2:38:72:ee:6e:89:b9:63:ec:b6:1d:
                    8b:95:bb:1a:87:17:59:67:ce:19:c2:a0:5c:7c:a1:
                    b8:6c:e8:21:85:cd:43:51:11:aa:57:09:1d:b3:ff:
                    c5:61:6e:13:69:f3:42:5b:37:91:1c:85:22:c9:d8:
                    19:95:ce:44:74:cc:39:64:15:d4:51:05:6f:40:44:
                    16:1b:22:c7:1c:13:14:60:96:d4:de:02:de:a2:64:
                    2c:54:1c:69:6d:24:2e:d5:bd:2d:b6:2c:75:c6:94:
                    4f:13:c6:89:07:da:80:a4:d9:ce:a0:53:ce:8d:05:
                    5b:99:95:78:59:42:32:c9:85:54:cb:b0:b5:51:f6:
                    4c:c1:d4:bf:74:29:1c:22:16:5f:83:b8:13:0f:be:
                    ec:48:fb:82:45:ae:fb:ba:3d:80:4f:29:18:15:3e:
                    8b:d4:7e:a3:b2:57:34:bf:8b:8f:bc:41:fa:75:46:
                    02:a8:10:82:d0:a0:48:06:34:06:f7:a9:ee:19:39:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1B:A3:92:7B:94:C1:B8:B1:71:8C:E5:E4:21:A5:79:A0:BB:75:25
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d1fff98-4415-4cd0-b2cc-26f61a8cae7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:80b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:b7:77:5b:40:85:8d:8f:39:c4:02:26:ae:fd:32:17:b2:55:
         63:6e:14:13:52:18:1d:25:f6:7d:da:b6:7a:26:36:2e:25:bf:
         5c:72:b6:65:da:a2:68:77:80:e1:7e:71:96:ef:ac:9f:3f:dd:
         13:b6:94:c9:15:fb:13:df:82:09:fc:6a:e4:9b:94:80:20:93:
         5f:bc:de:ee:4e:95:38:71:1d:c0:37:aa:6b:04:f6:5a:29:ac:
         1a:46:ae:76:1c:3c:54:0f:e6:8b:f7:06:e3:5e:a5:80:d4:b8:
         d8:a7:3b:0b:5b:c0:aa:8f:48:b2:b9:63:e5:cc:00:a6:e2:be:
         77:de:84:86:94:1b:28:5f:a0:a7:82:be:5b:44:e7:15:30:1a:
         47:b3:16:14:08:f8:cf:ea:b1:38:a8:d4:d3:7d:b5:a4:73:18:
         44:4e:e1:b2:85:4d:50:68:a0:90:d9:7b:fb:07:07:b1:dc:dc:
         23:4f:81:93:68:3a:01:71:99:b1:3a:ea:95:9a:c6:de:f0:56:
         8f:13:a8:e5:bc:b0:ae:3f:7f:28:dc:e0:ec:05:0c:bb:2a:3f:
         37:5d:c8:a0:31:93:91:d8:f5:4c:02:d8:c7:c4:88:d8:bf:36:
         13:dd:39:59:e0:94:6c:c6:9d:59:c4:44:62:17:1b:38:1d:29:
         d4:f8:3e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----