Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa
File:                     7cde339d-568f-4b5b-98d4-9eca268d8a43.roa (raw, json)
Hash identifier:          QO0GPVSh+nOzzSfoeBMG5m8EivkJUY585HFqUwqbbZw=
Subject key identifier:   CA:75:82:A7:A5:3B:D4:74:DE:7D:7F:34:AD:E6:1C:22:E2:5E:38:0E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       16DA221FF3BFF5D4179EDAB5718C70D4DD3ABF00
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa
Signing time:             Thu 15 Oct 2026 03:20:23 +0000
ROA not before:           Thu 15 Oct 2026 03:20:23 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d074:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:da:22:1f:f3:bf:f5:d4:17:9e:da:b5:71:8c:70:d4:dd:3a:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 15 03:20:23 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=a671d6e19c206db6ebf8b1c785689360f721736f32371e3e9cf31a4fb375445b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:4b:eb:19:cb:50:9d:e9:d0:0d:33:e0:dc:
                    65:8e:33:cf:62:aa:47:73:46:5f:01:55:0a:e7:be:
                    f5:b5:3e:92:76:dc:14:91:8d:8b:8f:72:eb:3a:c8:
                    cc:ea:23:eb:b7:16:f4:90:08:0f:26:e7:cb:7a:31:
                    f3:d8:df:2d:36:e2:c9:44:50:45:e0:7d:31:04:cd:
                    ba:6b:0e:88:1e:37:0b:2b:b1:67:0f:91:20:2c:9e:
                    26:75:57:27:df:5e:ec:1f:88:b1:60:9a:85:4a:1c:
                    2c:a3:2e:19:64:f1:cd:e9:80:49:ce:ba:f8:4d:63:
                    51:e3:51:c7:ae:ff:fa:a9:e9:90:87:70:a4:10:94:
                    fb:1b:02:78:74:75:7a:59:e8:ad:53:83:7a:13:20:
                    f3:89:86:78:4a:48:81:b3:2e:e8:9d:a9:91:c0:c7:
                    51:0d:55:9b:ce:dd:0f:30:94:39:b4:f0:84:64:fe:
                    1d:35:2c:c7:5b:6c:ad:47:f4:e1:eb:85:15:63:e5:
                    93:28:3a:39:1f:b9:64:10:17:f9:99:47:b9:ff:35:
                    6a:f1:c9:66:7b:0a:be:74:d2:f5:2b:f8:9e:39:61:
                    8e:68:ba:b3:2a:fa:7e:31:63:03:b9:0d:5a:cd:e6:
                    d0:75:60:cc:3a:ce:1b:10:42:e8:19:06:56:97:62:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:82:A7:A5:3B:D4:74:DE:7D:7F:34:AD:E6:1C:22:E2:5E:38:0E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:1f:0b:37:77:8a:60:33:cf:4d:93:3f:28:38:a3:89:4d:1c:
         4f:4e:19:fe:96:80:17:39:2d:ef:69:bd:2d:e9:c1:2b:95:87:
         f9:77:e3:70:37:a2:db:a0:47:ac:e9:2e:00:fa:2e:60:25:c9:
         91:f9:de:28:e9:21:07:b6:c4:7c:21:20:d4:86:50:83:9d:c6:
         9e:bb:c8:40:05:e0:20:10:fb:08:57:4f:49:6d:04:bd:04:af:
         07:3a:fe:51:1f:b9:a9:4a:d6:d9:99:b5:4d:73:27:d7:35:c7:
         a8:71:0d:55:20:53:c4:7f:7c:01:9c:f1:44:c9:78:da:14:27:
         52:74:da:de:22:4b:88:a2:21:c0:b5:72:68:76:a5:4c:c3:7d:
         25:b4:cc:f3:1c:42:6b:b2:29:5d:44:11:f2:ef:a4:1d:09:50:
         3a:96:59:b4:d2:60:83:03:95:8b:9e:00:73:d4:14:ae:3c:21:
         62:7e:fe:eb:75:db:27:9f:bc:95:e6:58:4f:2b:58:f8:f9:bf:
         f3:11:ac:f9:d1:07:fb:52:72:7c:77:e1:f4:5c:7c:59:61:7f:
         8a:cc:d0:05:25:ba:3e:bb:d2:9e:a6:0b:e7:19:7d:10:30:78:
         26:98:ed:dd:67:a2:ca:ea:17:9c:93:4d:f5:6c:90:86:02:cf:
         1e:93:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----