Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/72c1c04d-5c77-431c-825c-1633fac1964d.roa
File:                     72c1c04d-5c77-431c-825c-1633fac1964d.roa (raw, json)
Hash identifier:          lkH5RLKg/NEqz8JTwm5LJNFWKiQJpuD/8HGerZ6Bzio=
Subject key identifier:   2D:63:5A:C6:57:E1:39:F3:7E:80:7F:03:EB:9D:42:4D:F0:06:81:9F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       70CAFADEC047F57B507F4C74B708DCF4954B027C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/72c1c04d-5c77-431c-825c-1633fac1964d.roa
Signing time:             Mon 26 Oct 2026 05:30:14 +0000
ROA not before:           Mon 26 Oct 2026 05:30:14 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:8030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ca:fa:de:c0:47:f5:7b:50:7f:4c:74:b7:08:dc:f4:95:4b:02:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:30:14 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=1e523ea0ed6081d159776fb3e4c4e3cd6f28da5b55ddd54eb7215d9799c66539, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:7c:82:78:32:be:cb:45:18:a0:ac:a9:89:
                    3a:88:26:cc:b3:99:7e:9d:25:26:bc:48:2b:6a:0e:
                    0a:aa:a8:f2:1f:a5:27:38:0b:5b:43:5e:f7:3f:11:
                    a3:ef:c8:b2:9d:aa:b7:5c:b4:44:49:a6:13:5c:e6:
                    58:7c:9f:3a:cb:96:43:25:77:48:97:73:67:72:b2:
                    dd:ae:b9:69:3e:a7:de:a4:0e:9e:55:dc:f7:48:9c:
                    f8:68:f1:99:6f:d5:dc:9a:d4:87:de:85:e9:52:21:
                    50:dc:5b:29:1c:77:7e:69:c8:b6:76:29:fb:e3:1b:
                    ff:b7:57:b2:8d:da:59:26:35:43:2d:b8:f0:30:ab:
                    a7:20:af:2a:ce:c6:a7:5c:ec:49:cf:7f:55:c7:52:
                    42:f0:a8:7c:92:8a:6a:34:63:b4:65:32:1a:16:83:
                    7b:24:9c:ec:3d:64:e0:c4:a0:b1:f9:03:ba:44:33:
                    8d:9b:0d:e9:01:04:20:27:31:48:6c:11:9b:67:7e:
                    d9:26:ba:b6:e3:23:5f:e4:55:1d:4f:4b:b2:3b:df:
                    c7:b4:87:f3:62:2c:55:e9:b8:d2:cf:d8:9c:9f:f5:
                    31:52:42:f0:e9:f2:2f:f0:05:ef:d1:7b:d1:92:f6:
                    8a:f9:21:22:84:66:dc:0e:5b:f8:b6:1c:be:63:71:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:63:5A:C6:57:E1:39:F3:7E:80:7F:03:EB:9D:42:4D:F0:06:81:9F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/72c1c04d-5c77-431c-825c-1633fac1964d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:8030::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:d9:5f:d3:08:c9:66:13:a6:92:fb:80:45:b1:96:a6:96:c3:
         f9:92:de:4b:ea:b3:5c:77:e1:3f:69:93:93:3b:e4:44:55:23:
         5b:a9:0f:db:bd:de:a8:a2:4a:c1:54:28:57:93:67:ad:86:2c:
         ee:99:58:90:42:b9:38:ad:27:c8:8a:35:7f:43:8c:d0:96:6c:
         d5:91:81:ac:42:4c:e7:76:51:36:96:49:fc:a3:30:2e:e2:10:
         92:0a:6b:27:cc:8f:76:2e:f6:94:c5:3f:55:7f:44:08:db:1b:
         8a:39:3d:47:fb:a2:99:fc:f8:40:1d:e5:28:50:a8:fa:53:00:
         fe:4c:7d:63:8c:5d:04:24:62:91:a6:18:68:40:22:de:d5:c5:
         3b:31:1d:e9:22:73:24:cd:49:bf:f2:ca:12:4a:c7:4f:7b:a7:
         03:a1:fd:ed:f0:f7:d6:90:ac:08:1e:2f:e9:ec:2b:b2:a0:34:
         d0:59:98:5b:db:2a:40:06:fb:50:1e:c3:9d:3f:44:58:81:72:
         0a:da:d0:95:44:28:c4:38:b8:35:3f:2f:d9:3d:19:54:94:3e:
         a7:83:0a:30:7c:63:bb:b3:e7:37:b9:da:b1:ca:bd:88:b9:25:
         e1:5f:46:01:ce:4d:ec:b6:63:5c:07:cc:2f:3c:17:35:25:c6:
         bc:cc:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----