Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85be88e9-af28-4f2c-8de6-8514c05e3443.roa
File:                     85be88e9-af28-4f2c-8de6-8514c05e3443.roa (raw, json)
Hash identifier:          FbMx7VJG58pvlEZLbe+LbXmHbaxlny+CfX2DlfvLgdA=
Subject key identifier:   E0:FF:7D:CD:4E:6C:A5:E1:C7:F9:73:17:15:AE:20:E1:BF:DE:4B:EF
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7BFEA535479D56319C0A51E9334B3BABCAD90B92
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85be88e9-af28-4f2c-8de6-8514c05e3443.roa
Signing time:             Wed 19 Aug 2026 01:00:25 +0000
ROA not before:           Wed 19 Aug 2026 01:00:25 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d:4040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fe:a5:35:47:9d:56:31:9c:0a:51:e9:33:4b:3b:ab:ca:d9:0b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 01:00:25 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=cf88ac115937c77b759c562c72a8fc83009ac1f83e3c6494f979ab43f513aba4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:39:38:98:df:d8:b3:50:6d:80:47:b8:f2:27:
                    ad:23:ec:48:db:b1:c9:48:28:3d:5b:f1:bf:4e:67:
                    93:3d:ee:13:cf:f6:15:fa:94:fd:dd:49:44:51:d1:
                    de:d7:28:3f:82:27:91:ff:2b:dc:6c:43:fe:be:43:
                    01:31:4a:35:3f:91:a2:a7:1b:d9:70:eb:86:1f:43:
                    67:a4:37:b8:5d:c0:9a:f5:ca:b6:97:1f:41:05:76:
                    16:5e:14:71:96:50:5b:9f:eb:35:58:d1:7d:27:2e:
                    d8:2c:59:b0:96:11:a9:e0:0a:63:3a:ed:90:3d:0b:
                    e7:c1:e3:7e:4d:57:91:98:9e:55:ee:8a:5e:b8:75:
                    6c:b4:94:64:56:00:30:39:93:d3:22:1f:48:dd:68:
                    ef:f6:41:4f:d8:7c:bb:09:f7:02:4e:b8:52:ef:29:
                    36:85:83:f5:45:f0:6b:b5:29:9f:1a:16:21:8c:38:
                    f8:c8:f3:a3:97:3f:5a:8e:2e:7e:cb:d9:4c:70:5d:
                    bd:ea:c2:b6:b8:3f:4e:54:9a:36:4e:17:53:95:d4:
                    e2:3e:3a:7d:17:0d:a4:a6:ea:f2:eb:fb:a5:43:fd:
                    83:4d:a1:6d:4c:25:07:31:5e:15:c2:62:0e:96:fd:
                    93:82:3d:bd:3d:27:1a:12:19:49:94:63:49:c2:4d:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FF:7D:CD:4E:6C:A5:E1:C7:F9:73:17:15:AE:20:E1:BF:DE:4B:EF
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85be88e9-af28-4f2c-8de6-8514c05e3443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:9f:83:26:9f:ee:f7:86:f0:74:0f:b5:68:0a:20:62:0e:45:
         f2:24:72:2b:10:4f:ed:c7:4c:5f:86:c9:ac:02:ab:9d:89:e1:
         6b:b9:ee:7b:e0:67:52:a4:87:4d:e3:1a:0a:55:8f:f9:9d:a6:
         6f:d1:7f:e4:c2:bf:cf:13:86:c0:f5:a0:d3:95:52:5e:31:df:
         18:c4:4d:9d:cf:b6:3e:b4:72:47:4c:57:48:8f:ec:c5:88:f2:
         3a:c6:bc:fc:a4:77:f9:91:61:02:64:8b:d9:0c:b4:ea:39:82:
         c6:51:bb:31:80:fa:57:d7:e1:c7:37:0e:66:1a:52:9e:06:54:
         64:b2:7d:30:e4:89:31:14:4e:40:79:01:86:d1:8d:ae:24:fb:
         77:74:7d:38:e9:54:cb:db:74:8c:b9:14:96:65:81:26:0e:b0:
         dc:4c:41:cd:ab:28:d1:57:23:42:0e:33:d3:ca:da:ce:ba:0b:
         06:a1:54:b1:92:d1:5d:cc:ec:9a:45:45:e3:bd:03:0b:af:ea:
         c5:21:72:9b:eb:f0:c0:49:cf:39:0c:a1:b2:f2:96:93:36:10:
         37:2b:d8:53:6d:bb:a4:4a:e8:3d:b5:a7:42:d5:0e:12:ae:f9:
         91:6d:a0:b5:e7:05:22:17:c8:9e:35:5c:60:4f:0c:25:61:aa:
         07:a9:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----