Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
File:                     70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa (raw, json)
Hash identifier:          kl++z0j1R6uRtapPvHBRXEwQMgMb7SzQomb/j52x2Js=
Subject key identifier:   B2:AE:A0:37:AD:EA:59:85:DF:72:61:F4:CA:D4:5D:90:C3:67:3B:1C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       77081848A531B97EAFFB9900CA6D5F05B8717789
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
Signing time:             Mon 26 Oct 2026 04:40:21 +0000
ROA not before:           Mon 26 Oct 2026 04:40:21 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:08:18:48:a5:31:b9:7e:af:fb:99:00:ca:6d:5f:05:b8:71:77:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:21 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=956677ff81527a6e6deb6f2184c36e4d34f79e4df074e929748a525c58ed4b1a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:77:e2:6e:58:39:e0:b6:1f:b3:1d:48:3d:
                    9d:93:44:80:6c:e3:09:b4:cc:2e:44:5b:28:a5:9a:
                    42:53:bb:70:8a:11:f5:14:b4:4e:1f:1c:a8:0e:cc:
                    c6:09:47:da:95:5a:99:47:e3:76:e1:c3:78:7d:ac:
                    70:a9:33:30:01:ed:5e:00:3a:83:dc:df:85:df:99:
                    06:73:fb:91:05:5f:86:3e:04:20:ad:9a:fd:59:87:
                    d8:4c:3c:9f:67:f4:b5:30:45:d8:1d:af:fa:64:5b:
                    2c:3f:57:52:01:a7:2b:98:52:be:e7:12:c3:61:03:
                    54:7c:4d:23:0e:a2:73:9c:5a:85:71:63:fb:94:0d:
                    1f:b6:d7:68:59:fe:47:46:7d:e5:c8:25:51:56:f3:
                    10:43:74:3d:cc:c5:fc:b5:4f:92:d5:8a:97:f7:e6:
                    84:a0:13:83:9d:ea:5e:87:df:a8:e9:e4:55:4a:21:
                    16:ae:d3:06:2b:4d:d0:c2:4f:93:84:42:3e:24:a0:
                    90:c5:d9:ea:10:5c:af:54:09:f4:8b:65:25:d6:7c:
                    d2:d8:af:04:cc:68:48:15:93:70:0f:a2:96:85:f0:
                    56:bc:fb:59:09:bc:49:8b:4c:c2:76:38:2a:61:b9:
                    d8:aa:2b:80:e4:fa:f9:58:8d:3e:33:12:98:68:9a:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AE:A0:37:AD:EA:59:85:DF:72:61:F4:CA:D4:5D:90:C3:67:3B:1C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:db:fc:09:f1:59:44:ae:a5:f4:5e:92:c0:b4:1f:f6:67:d9:
         60:b7:88:0d:b6:54:3a:c9:9a:34:54:48:6a:8e:e0:b9:e2:0b:
         e4:88:72:c3:3a:bf:7e:7c:b2:7c:57:5a:35:d5:6a:1b:56:5b:
         62:cd:88:4b:3a:0a:d0:95:e1:20:85:5a:9c:98:17:74:30:e7:
         4e:ea:fd:e5:fd:36:58:d9:72:fb:53:5e:d9:0f:f8:8b:50:b0:
         ec:80:f6:91:9e:fd:1f:47:7e:80:e6:2d:b3:43:0a:de:43:cc:
         bd:e0:0c:16:3d:ad:81:2a:96:25:98:b6:ed:38:53:4b:2f:4d:
         d5:54:83:f3:df:c7:30:b1:77:2f:dd:e3:ec:b5:6d:24:8b:6d:
         7f:a9:a1:2c:a5:e2:af:dd:ad:11:e5:47:32:d6:c5:76:77:66:
         a2:d2:b3:92:32:cb:b0:08:db:ea:c3:35:5b:a2:7a:65:22:ce:
         5f:6b:d7:5d:a8:cf:fe:c8:82:9f:21:b2:ad:27:09:14:f4:b4:
         07:58:ae:b5:21:13:a5:c1:bb:33:4f:7a:69:22:e1:65:05:fb:
         05:c7:e0:72:bd:18:64:9f:04:c4:e2:76:8a:0b:78:f0:37:c2:
         22:e2:bb:4a:51:23:84:2d:dd:2a:80:9b:af:ff:d9:2c:e2:36:
         38:0d:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----