Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67362d1f-2bfd-40d7-a59b-8f1fca2c63fc.roa
File:                     67362d1f-2bfd-40d7-a59b-8f1fca2c63fc.roa (raw, json)
Hash identifier:          8M6tOcCKHTjTUdhw9dhGh5nmDGKMlTYfVgGbt8jyT/0=
Subject key identifier:   BF:48:90:36:A6:26:31:ED:B9:05:2A:D4:AF:D6:4C:84:9E:04:76:1F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       230027A8488C2BE7895A05B13F2DDDE612D15FA9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67362d1f-2bfd-40d7-a59b-8f1fca2c63fc.roa
Signing time:             Wed 19 Aug 2026 00:50:09 +0000
ROA not before:           Wed 19 Aug 2026 00:50:09 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d05a:4020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:00:27:a8:48:8c:2b:e7:89:5a:05:b1:3f:2d:dd:e6:12:d1:5f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 00:50:09 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=b5ca5f5099ad643b466d05ed0d0432062f6c2e03f923911ef62959260e577a14, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:aa:03:10:ca:ae:e3:cc:b9:84:08:82:7c:
                    e7:09:30:bb:28:91:31:b0:c7:f2:1d:c5:0a:a1:3a:
                    46:76:f5:c2:80:b7:1b:c0:1e:fd:c6:fe:0f:01:2f:
                    e1:54:fc:1c:d6:54:5e:bf:c4:8c:99:da:7e:61:c0:
                    54:bb:81:c3:7a:48:1d:3d:88:92:10:9a:f5:06:44:
                    fb:fa:df:fb:58:43:8e:a7:12:34:44:79:dc:0f:2e:
                    bd:59:94:47:e9:b6:1a:02:40:ee:f8:fb:d4:a6:e4:
                    28:0f:3f:49:41:0f:ba:30:15:9c:7c:d7:e1:57:92:
                    9e:1f:25:d5:5d:0f:22:9d:2a:34:47:d5:02:1c:9a:
                    d4:80:20:df:f4:90:0e:73:f7:01:68:58:6c:a3:95:
                    e8:e5:54:c0:f9:d8:ef:6e:c7:6a:01:84:7b:5c:0a:
                    2b:53:0c:26:87:a1:06:47:2e:f7:6d:6e:0b:20:4a:
                    7d:ab:21:c5:b1:df:97:5e:1a:b1:f2:ee:90:9f:e4:
                    7a:0c:9d:d5:45:14:46:3f:1e:03:e3:40:e8:68:7c:
                    10:ce:63:80:8a:fa:44:ff:db:14:1e:d6:e0:70:f9:
                    05:cf:0a:a3:ea:81:52:24:40:c8:c4:fe:40:17:98:
                    2d:76:24:75:7b:af:cc:27:25:6e:2c:92:25:f0:83:
                    c1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:48:90:36:A6:26:31:ED:B9:05:2A:D4:AF:D6:4C:84:9E:04:76:1F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67362d1f-2bfd-40d7-a59b-8f1fca2c63fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d05a:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:da:34:cd:bb:ef:fd:bd:1e:96:0d:dd:95:0b:6b:af:9a:c2:
         ae:ad:ec:e0:3c:42:7a:c7:68:f0:9e:1c:76:07:bd:93:7b:fb:
         b9:86:9b:10:56:84:03:b7:25:ca:48:07:ca:8b:b1:86:e9:0d:
         83:eb:50:23:d1:d4:92:6b:0b:e0:81:c3:31:89:bc:d3:c1:8f:
         fd:d0:bc:d0:f3:ed:1f:67:63:6a:95:bc:f8:63:90:84:35:d7:
         37:b5:73:20:d0:86:6e:f9:18:8a:d4:4d:58:3e:02:d6:60:48:
         c7:e3:8c:29:93:cd:e3:c9:77:77:5c:09:c1:63:de:1d:4e:ab:
         4b:d4:03:4b:76:52:c2:cd:9b:81:3b:ee:5f:a1:56:ff:20:e9:
         aa:7e:9e:df:b1:df:ed:84:29:93:25:42:5c:43:f6:e6:83:1c:
         81:35:15:25:7d:d2:0c:58:82:7b:a1:63:a7:69:db:e6:14:d9:
         8a:f1:da:d2:03:04:2c:4a:77:c5:ab:14:15:28:1a:0a:f9:58:
         fc:e8:63:3d:37:1f:77:e4:54:81:9b:d2:70:75:64:f0:bd:4e:
         6d:68:2e:93:86:cb:2d:f8:fd:47:1b:a9:b7:01:8f:42:5b:5b:
         16:eb:fa:a8:46:a5:53:19:5d:8f:e8:2e:43:e8:1c:5c:51:a6:
         bc:55:35:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----