Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fb7dc84-f094-4f1c-8826-a8f7c3464f71.roa
File:                     5fb7dc84-f094-4f1c-8826-a8f7c3464f71.roa (raw, json)
Hash identifier:          wMY7/APkq3zOE4dNGboCzj9kfyWCWBbZ0I2mZ4F3+AA=
Subject key identifier:   DF:76:9A:EA:59:91:CD:C0:B2:41:09:20:BD:12:24:07:8C:B6:81:E0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       100D26EDC054117B75E1C0392AD04635F5C4FBC6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fb7dc84-f094-4f1c-8826-a8f7c3464f71.roa
Signing time:             Wed 19 Aug 2026 01:01:01 +0000
ROA not before:           Wed 19 Aug 2026 01:01:01 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0d:26:ed:c0:54:11:7b:75:e1:c0:39:2a:d0:46:35:f5:c4:fb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 01:01:01 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=a68f6cca3e0d32848abaa219b7530f65bcd10aac1a642fee41c89eb68dde1024, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cd:5e:0d:3d:d8:f1:2c:c2:85:93:d0:e4:b7:
                    88:3b:74:6d:9f:2c:fe:e8:c3:2b:e0:c0:de:b4:a5:
                    15:36:fe:74:61:61:16:21:e5:bd:31:f7:cf:31:b9:
                    1f:9a:e3:0a:0b:7a:69:05:0a:20:45:83:65:6e:f7:
                    f0:61:6c:1f:8f:5a:4d:f3:8b:cd:c5:85:07:d7:52:
                    e4:07:a7:e6:e0:e2:eb:62:9b:35:5c:af:58:de:cf:
                    b3:c5:e5:0b:d8:80:b6:01:e7:45:20:d0:c9:ad:b5:
                    d6:5c:67:d2:f6:4e:4e:96:a2:38:43:62:35:b5:b1:
                    96:39:6e:0e:eb:36:18:a2:13:86:20:f1:30:18:50:
                    ce:39:77:dd:ec:83:0e:a4:2d:42:ae:8f:4e:bb:7e:
                    9f:3c:0e:d7:d3:a5:51:bb:90:42:54:51:5f:d5:1a:
                    d8:bb:8e:38:cd:eb:d7:fa:04:ec:f3:de:c8:47:a8:
                    d5:0c:48:51:4d:cb:ce:3e:4e:3f:61:c1:87:ba:27:
                    96:f2:27:f3:8d:8b:20:54:66:42:60:c0:ff:ea:42:
                    db:20:a3:33:cf:04:9f:7f:49:68:b7:1a:83:18:ff:
                    2e:fa:96:40:0e:f9:7b:91:d2:6d:9b:47:6a:c9:2e:
                    88:12:aa:e8:ae:9e:09:de:4f:54:f1:00:33:8e:f7:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:76:9A:EA:59:91:CD:C0:B2:41:09:20:BD:12:24:07:8C:B6:81:E0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fb7dc84-f094-4f1c-8826-a8f7c3464f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:d0:02:36:e6:82:8b:73:da:e9:3e:34:cf:29:ee:d9:7c:3b:
         db:5c:92:ee:81:5f:51:33:87:b5:a2:c5:e4:11:01:92:98:6c:
         2c:83:34:22:65:7b:fa:03:51:8e:fc:f0:53:23:4d:a4:bf:54:
         13:91:95:e0:bb:ec:c9:ce:01:15:9c:bf:a4:1f:6f:a0:bf:d9:
         c4:e3:b4:7c:49:b9:b2:fe:fb:24:4e:3f:9d:40:f4:d7:b9:fa:
         ec:ca:29:51:ad:2c:dc:c8:81:2d:66:a8:ee:dd:17:cd:51:a9:
         08:86:a3:dc:00:5a:f2:db:1e:1c:26:01:e8:97:e6:22:b9:53:
         a9:ba:f3:ed:f3:35:e0:fc:a3:38:7b:16:e9:37:fb:45:91:8a:
         3f:93:24:ac:4d:59:91:cf:b7:dc:4e:90:81:68:1e:45:eb:02:
         13:f9:19:0f:ed:be:19:67:93:d3:9e:db:ec:0a:81:40:6b:b6:
         a7:80:45:2f:f4:a4:d5:92:cf:f1:56:99:53:0a:bb:1b:2a:c2:
         65:ff:6f:31:d2:c1:c3:45:2c:34:13:8a:c9:62:af:5f:f8:8e:
         93:d4:f8:d0:bc:31:94:c6:16:3f:a4:bd:2e:46:18:1e:2c:99:
         4a:f5:af:e9:14:62:f6:19:74:c5:ed:86:ca:40:fa:40:77:28:
         c7:fd:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----