Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/868cbba8-4804-4fbd-b9b8-7e9402c44956.roa
File:                     868cbba8-4804-4fbd-b9b8-7e9402c44956.roa (raw, json)
Hash identifier:          2kjlJsX1tIH6XEddV2tOjuDnV4uPZIZl1F2T24tsIB0=
Subject key identifier:   2D:7A:79:1D:25:93:7D:73:1A:E3:63:31:18:09:26:87:04:03:35:53
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0CA4BEAA8F49C845BB778ECB7C988F39E5E5F421
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/868cbba8-4804-4fbd-b9b8-7e9402c44956.roa
Signing time:             Mon 26 Oct 2026 05:03:12 +0000
ROA not before:           Mon 26 Oct 2026 05:03:12 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d06f:9000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a4:be:aa:8f:49:c8:45:bb:77:8e:cb:7c:98:8f:39:e5:e5:f4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:03:12 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=bb05c272603b200261a7d4a36c9daa826c7b8610398517b0aa3bb93d12534c5c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c9:84:60:52:65:49:50:c2:88:95:3e:31:10:
                    ef:75:9c:a2:ed:38:56:5d:d6:bc:24:9e:b5:e1:3f:
                    75:3f:7d:2d:d0:ed:8c:92:ee:92:8e:da:96:18:c1:
                    df:db:8d:56:c7:50:54:3a:bf:99:11:f1:e7:f3:44:
                    a6:fa:5c:14:85:dd:37:83:22:a9:19:b9:8c:ee:92:
                    de:e4:e7:d2:cf:12:ec:65:8a:2e:ee:e1:d8:0f:7b:
                    f7:14:b2:8d:fa:88:6c:56:e8:42:a5:a3:65:1c:cf:
                    5d:27:a7:72:78:84:38:b0:62:48:b0:71:87:ef:d6:
                    5d:82:8d:32:75:48:5d:da:2c:42:e0:c2:03:a9:28:
                    37:2c:d5:05:0e:f2:49:57:77:c5:fc:d6:75:49:91:
                    da:d6:93:17:c9:f2:05:37:aa:1f:d4:bb:65:c3:e8:
                    85:d5:c9:25:f2:af:34:ac:b8:11:53:50:1c:18:77:
                    64:33:34:42:eb:6a:bf:38:ba:4c:7b:81:f9:d7:e8:
                    bd:15:50:de:e7:45:14:2c:bf:ed:00:66:f0:08:0d:
                    79:8b:90:16:2d:95:cc:b5:a6:7f:c1:37:d5:3d:01:
                    4c:9e:83:ed:75:a8:15:a7:6b:e8:29:0c:e7:89:21:
                    03:eb:84:a5:0c:d4:c6:f4:6f:66:89:1d:0b:4d:c6:
                    85:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7A:79:1D:25:93:7D:73:1A:E3:63:31:18:09:26:87:04:03:35:53
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/868cbba8-4804-4fbd-b9b8-7e9402c44956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:e3:07:6c:19:43:c0:48:ee:01:6a:2c:ba:2b:fe:31:57:cc:
         d6:81:cc:44:93:b8:be:76:13:21:cd:00:6d:9f:bd:ba:de:fa:
         0d:d4:1e:2d:46:be:df:3b:e3:49:fc:25:19:82:a0:13:59:65:
         58:be:5e:ba:f2:f6:3f:c0:74:36:75:be:77:bd:11:aa:7b:0f:
         8b:2d:b1:21:ad:37:db:14:07:18:19:cc:7c:b0:96:84:7d:c0:
         45:35:61:67:3b:2c:2e:fb:ee:57:dc:f6:4b:44:95:dd:67:ce:
         13:28:b5:cf:9d:7a:e3:50:30:74:75:34:09:3d:0b:11:b8:b9:
         9c:ad:d0:36:ae:c2:ea:d4:6f:e0:86:41:7d:99:e3:cd:69:02:
         4f:ea:80:b4:c2:85:82:2c:a1:d7:b4:c3:56:87:66:97:82:6b:
         c1:a2:63:0c:6e:25:10:10:25:4f:18:e2:ec:1a:4e:71:51:39:
         f4:2d:81:6d:44:aa:ef:6b:fb:b3:f6:2e:e4:22:58:57:db:8f:
         2f:f4:0c:90:9c:8c:52:e1:e7:90:78:2f:e4:0d:b2:dd:a7:89:
         1a:c0:0a:87:36:b2:dd:dd:3c:ec:c5:2f:32:8d:f4:42:1b:b6:
         99:e8:c3:59:ae:14:88:60:71:7b:db:f7:f5:07:4d:ba:25:06:
         4f:ef:60:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----