Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70a2bc6f-ae0f-4f13-9499-78c505a5f7c9.roa
File:                     70a2bc6f-ae0f-4f13-9499-78c505a5f7c9.roa (raw, json)
Hash identifier:          qdDoVDYhuldw3uL7+rRPgLmrjui8TfufSGAHsXUhhTM=
Subject key identifier:   40:84:30:D1:95:B1:A7:42:51:A5:A3:CF:BF:59:74:9A:C3:DF:FD:A4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       73BA610354E874F84E03A252396DBF4D8AED9F1F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70a2bc6f-ae0f-4f13-9499-78c505a5f7c9.roa
Signing time:             Mon 26 Oct 2026 05:10:17 +0000
ROA not before:           Mon 26 Oct 2026 05:10:17 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d058:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ba:61:03:54:e8:74:f8:4e:03:a2:52:39:6d:bf:4d:8a:ed:9f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:10:17 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=bf2808aebc1b19beadc8c3b180f23f3e3d3edc7177eb52c58257088a7a76692d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:b4:32:cc:67:bc:c5:5b:76:e6:eb:a2:3a:
                    57:64:9d:dc:36:07:68:38:fb:d8:b9:ce:1e:a9:43:
                    52:30:c1:bd:02:5b:44:0a:b7:d7:5d:bc:eb:fc:e0:
                    0e:67:34:06:89:cb:b7:5c:99:cc:47:67:a7:95:3e:
                    42:1f:8b:90:a0:29:ce:18:87:11:78:f2:e7:1d:3b:
                    4e:00:99:f2:4d:d1:d3:de:0f:f2:f4:48:33:e4:42:
                    4d:16:1d:90:27:3b:e2:76:2c:f1:5f:e5:c9:e7:1d:
                    27:08:0c:40:b6:2a:3c:fa:88:a5:d7:0d:bb:0a:44:
                    27:35:5d:28:bb:df:7a:db:da:64:bb:83:e0:03:b9:
                    84:90:75:a0:d4:dc:27:61:ea:c2:33:fb:55:92:19:
                    51:a7:72:44:a9:14:7b:4c:ea:0c:af:0b:33:f3:51:
                    8f:82:04:3d:d2:c7:1c:41:95:c1:2a:42:2d:9c:51:
                    c5:e3:1d:da:bc:f8:ab:a3:48:9f:fb:fd:fa:fe:9c:
                    c9:ea:74:a1:ef:6e:09:5b:41:e8:98:32:ae:43:00:
                    dd:d4:1d:7d:65:56:c0:08:99:b4:93:86:0b:5c:2d:
                    05:00:df:cd:ba:dc:6e:61:6b:23:c8:4e:b8:c4:71:
                    75:36:bd:c5:9a:1d:a1:d9:5d:b9:aa:87:7f:fa:05:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:84:30:D1:95:B1:A7:42:51:A5:A3:CF:BF:59:74:9A:C3:DF:FD:A4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70a2bc6f-ae0f-4f13-9499-78c505a5f7c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d058:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:c6:45:b0:ef:da:58:75:41:f0:3b:65:bc:7a:4d:1d:54:b8:
         f4:e3:d8:ca:aa:95:c5:30:60:80:16:0e:a9:32:55:3c:fb:b4:
         cb:9f:df:03:2c:fb:70:4c:e6:5e:60:19:77:f9:b9:bc:ab:69:
         00:43:72:3b:b3:88:9d:d4:48:c1:9a:9b:92:70:87:85:f5:2c:
         5d:a5:b3:51:f9:59:a7:b4:0a:1f:4c:6f:99:a2:e8:04:62:4e:
         b8:0b:e8:00:7d:6b:79:6b:01:9d:4f:c0:a6:a3:39:1d:eb:72:
         25:36:48:e5:34:0e:35:fb:fc:ff:3b:cb:37:a5:73:45:c7:21:
         eb:53:3f:5d:a9:39:6d:de:2b:25:0f:17:2d:4d:82:68:7f:da:
         ad:be:52:18:e7:03:4b:f1:3c:d6:ce:42:67:d9:d6:c3:e7:8e:
         56:1e:aa:81:ab:d5:76:ee:39:8d:bc:89:f4:f4:cd:14:92:e5:
         4a:95:50:4e:ec:54:60:d2:e5:ff:cb:6b:71:79:68:c9:9f:ad:
         d9:94:21:ee:88:2f:81:4e:bf:49:97:fb:ff:18:59:2d:e8:36:
         1f:ff:84:b9:46:6b:36:e6:c4:a3:f3:88:a1:9b:e3:84:66:dc:
         68:a6:53:55:d5:78:18:ed:6f:44:bc:11:0a:93:d4:d5:30:39:
         c2:21:6b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----