Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8015fdc4-e79d-4400-a786-c70ab3f10d2d.roa
File:                     8015fdc4-e79d-4400-a786-c70ab3f10d2d.roa (raw, json)
Hash identifier:          deRW6xUvIMU6DWV281ZaAgubfkHQ7ku4icdS9GlzPBQ=
Subject key identifier:   92:6C:D5:CA:00:DF:E4:64:2B:09:65:6A:98:6D:BB:F1:CA:41:66:06
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       632A6AA5BF72526AB8EE8E9303E23D8E58489D52
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8015fdc4-e79d-4400-a786-c70ab3f10d2d.roa
Signing time:             Mon 26 Oct 2026 05:03:14 +0000
ROA not before:           Mon 26 Oct 2026 05:03:14 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d028::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2a:6a:a5:bf:72:52:6a:b8:ee:8e:93:03:e2:3d:8e:58:48:9d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:03:14 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=7a71cce6731d1d124a1843612516bf9e9d03c3615cf1da28e97fcfbd1dfd5655, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:15:87:44:7a:a0:05:37:12:3e:01:99:43:
                    e0:ac:3b:9c:07:4f:8c:14:70:e0:8f:94:bf:32:51:
                    ec:38:c4:22:e2:39:cc:10:f0:bc:86:30:fa:32:e2:
                    3b:8b:fb:50:e8:03:b2:cc:ea:c8:6e:a1:af:31:d2:
                    e9:0f:05:3b:41:25:0a:11:56:04:e3:c0:6d:18:00:
                    ad:58:0e:2d:57:44:ea:81:88:53:eb:fd:e9:7c:de:
                    fd:81:41:21:de:e6:43:ee:12:ca:97:ce:e8:7e:25:
                    94:a0:65:db:2e:af:1c:0a:23:ee:59:0c:13:e2:2c:
                    34:20:b1:01:fd:7d:34:e4:fe:f5:d9:38:3a:ae:d9:
                    d6:4d:c8:98:f1:5e:48:7c:13:8d:32:e8:29:47:9c:
                    f2:3c:e2:5e:5d:63:55:e7:22:f4:61:bb:6b:44:2f:
                    b0:83:02:89:b4:c9:bb:3d:97:78:9d:03:78:82:12:
                    a6:92:9f:d3:92:b1:70:49:6a:ab:3c:3c:f4:e6:16:
                    a8:e9:32:20:6d:bc:8e:8a:f9:c9:1f:d7:ec:4f:34:
                    76:f6:aa:e8:f1:72:e0:28:0f:74:a5:e9:e8:fc:f3:
                    7e:62:44:c7:07:d5:ff:a1:62:ab:53:d5:05:1e:1f:
                    fd:7d:f5:dd:ae:91:68:d4:29:ca:7a:6e:dc:1b:09:
                    24:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6C:D5:CA:00:DF:E4:64:2B:09:65:6A:98:6D:BB:F1:CA:41:66:06
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8015fdc4-e79d-4400-a786-c70ab3f10d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d028::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:81:62:af:f5:07:5a:bf:47:9f:4e:6c:33:1d:e6:88:ae:b2:
         f2:d8:e5:ed:dd:62:49:0b:3b:ce:99:a9:0e:ef:cc:db:6f:af:
         c0:72:3b:92:93:fc:d3:73:e3:82:46:3e:b6:f6:24:14:2a:48:
         29:19:2f:be:fe:3e:db:cb:b0:c8:45:6a:62:07:36:0f:9f:37:
         6e:6b:27:9c:89:57:b8:c4:cf:36:6e:89:d2:47:d8:17:bb:2b:
         2b:a4:8f:54:25:e0:b6:cb:f0:19:98:c1:af:ac:82:d3:18:67:
         b6:b3:84:23:1b:f7:54:e0:68:24:2c:cc:34:75:81:18:65:71:
         54:2c:02:74:4f:f6:95:80:99:93:bf:9b:af:65:04:0e:02:1e:
         32:95:27:7e:ef:d6:93:63:67:40:ab:83:76:09:ee:90:ff:c5:
         37:49:14:ee:9a:a6:20:55:8a:eb:bf:22:38:08:cf:b3:e9:c3:
         80:00:d1:70:7e:26:1c:15:f2:c7:0b:42:84:ed:94:41:47:64:
         4b:70:ac:10:e5:fb:bb:e0:74:6d:22:84:a7:04:2f:e2:11:bd:
         f7:b9:dd:17:4f:b4:53:5b:eb:79:61:5b:9e:f9:0f:03:b8:89:
         34:5c:da:b8:b1:8b:5d:0c:a6:80:73:7d:35:fd:4d:48:51:eb:
         39:49:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----