Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76526233-4062-463b-bfd0-bbe1d12891fa.roa
File:                     76526233-4062-463b-bfd0-bbe1d12891fa.roa (raw, json)
Hash identifier:          JxCom8nktaYHtk2O8+Y/H3lougypP1UVWXnsLShwWk8=
Subject key identifier:   FC:81:10:D5:69:18:14:0B:56:6E:31:2F:25:FE:30:1A:29:E0:5A:22
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1FC70B234BB9223429BBEA477B5441AFEE4EDB5D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76526233-4062-463b-bfd0-bbe1d12891fa.roa
Signing time:             Thu 22 Oct 2026 03:50:18 +0000
ROA not before:           Thu 22 Oct 2026 03:50:18 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:4010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c7:0b:23:4b:b9:22:34:29:bb:ea:47:7b:54:41:af:ee:4e:db:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 22 03:50:18 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=dc12a6ff77fed06b4eabfe7f01a80be4ffdede4c207b08e762a3c234df81adc3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:b3:9e:5e:06:b7:45:07:f8:93:2e:ad:95:
                    da:7b:42:12:8d:8b:66:fc:c6:d4:ba:2c:e3:e8:5b:
                    5e:23:3d:bc:d2:e7:12:ac:8b:6c:d2:02:dd:41:67:
                    a5:3a:bf:3c:0f:2a:6d:45:33:a9:56:66:0c:2e:a1:
                    fa:96:00:6f:ed:71:a0:e2:d4:87:33:07:f8:8b:b7:
                    7f:77:c9:0f:66:fc:1e:f3:26:08:75:7a:9b:84:e6:
                    6d:66:72:d2:8d:85:61:82:09:ee:db:a6:b4:b4:f6:
                    c1:22:b7:f3:0f:04:44:ad:0b:b5:ec:e6:3b:07:62:
                    ce:29:c3:20:8d:05:3a:e6:b7:83:c9:ea:9f:7d:5a:
                    2f:98:38:2f:ac:0c:92:34:4b:82:24:11:fb:83:3c:
                    22:cb:7e:30:6d:2a:8c:94:1a:32:93:43:4f:7a:8e:
                    9d:d6:b8:f3:30:e0:66:83:08:9f:ac:33:aa:80:62:
                    1c:c1:3a:fc:f3:21:e8:fb:39:31:5d:87:15:a1:da:
                    59:e4:97:c9:05:cd:fe:e1:cc:2f:f3:52:d2:7e:a8:
                    82:fe:5c:39:d6:b1:32:21:cc:20:54:48:35:d5:3e:
                    f9:2f:4f:00:54:83:ff:f4:c0:a7:39:62:49:89:f9:
                    f9:c4:d5:f4:bf:05:64:4e:6d:c4:3b:f4:76:38:b4:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:81:10:D5:69:18:14:0B:56:6E:31:2F:25:FE:30:1A:29:E0:5A:22
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76526233-4062-463b-bfd0-bbe1d12891fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:4010::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:c0:2a:b8:46:e4:d6:bf:29:66:d1:19:2e:42:07:10:f1:d1:
         38:f2:69:a6:fe:8a:9c:77:5e:d0:b5:05:1e:b2:0e:fe:04:0a:
         a6:53:4d:8a:ad:15:e3:33:fb:39:cf:e0:b8:4d:e9:60:56:17:
         b4:96:06:60:05:f3:36:32:c7:5a:88:27:4a:a7:01:42:d4:bf:
         ee:4b:ce:c8:a1:6f:ba:49:39:f1:22:30:18:af:b3:15:5b:f6:
         8e:09:a2:c5:0d:61:49:24:9d:4e:e3:f7:17:3d:93:e5:1e:82:
         6e:7e:55:0d:27:66:17:95:50:65:14:ee:b1:63:aa:f7:cf:8c:
         a1:04:ed:53:ef:21:d0:06:fe:62:20:65:c8:3c:72:c1:2c:56:
         9e:ff:af:7d:4a:b6:32:3f:34:1e:91:cb:51:02:33:e7:f6:2e:
         c8:0f:65:a5:d3:03:4b:28:94:28:e3:bb:dd:ec:75:cb:13:f5:
         fc:0b:ce:0e:c9:a1:01:93:96:5a:14:88:11:93:99:19:2d:02:
         73:7c:d3:9f:59:eb:bb:1d:fd:97:fc:94:72:32:a1:eb:25:dd:
         57:8c:bf:89:ea:cb:9e:bb:d8:51:c3:db:64:33:3d:fe:9e:42:
         74:61:2e:7d:34:f2:52:83:67:7b:7f:cb:09:2e:16:f9:5c:86:
         4c:70:5e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----