Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c99b00e-290a-4618-8076-435475c3020f.roa
File:                     8c99b00e-290a-4618-8076-435475c3020f.roa (raw, json)
Hash identifier:          MnyYVGAYLJ1DkacKo2yY1XhGHFnaQRV0uBS2+ypUBJY=
Subject key identifier:   E9:BE:93:91:12:E5:DD:D7:AD:B5:E2:B5:2F:E1:B7:AE:FB:E0:4B:64
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       29D6499F8AE3C3E84005EA62969714439BA13F71
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c99b00e-290a-4618-8076-435475c3020f.roa
Signing time:             Mon 26 Oct 2026 05:20:08 +0000
ROA not before:           Mon 26 Oct 2026 05:20:08 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:c080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d6:49:9f:8a:e3:c3:e8:40:05:ea:62:96:97:14:43:9b:a1:3f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:20:08 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=c006944303999335e821e73fc16007fcad8f4373ab581c6482bb2ff4b8dc3a33, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:26:41:cf:2d:a2:fa:87:20:29:91:a2:a3:1c:
                    eb:4b:22:d3:e1:32:0f:8d:a9:60:2c:39:59:aa:c6:
                    a8:83:a5:54:f5:4e:a8:8e:f8:48:ff:85:b4:cd:06:
                    f1:4f:8a:49:66:d3:61:a3:69:c5:0b:d0:c2:17:b3:
                    03:d5:c2:da:f9:10:6d:77:ab:29:0e:2f:19:72:6a:
                    10:d2:e8:0b:b8:c1:e1:2b:ca:7e:27:ef:2c:d4:93:
                    14:a4:5f:3f:9a:22:29:81:25:f7:f8:e0:68:1a:45:
                    ff:6a:ff:4f:88:59:c7:57:c0:60:71:59:5e:8c:d5:
                    23:86:80:fa:5e:1b:98:5f:bc:38:d7:b9:30:ff:15:
                    91:63:c7:96:9a:bb:3c:3e:c2:a3:d5:db:46:d9:77:
                    0e:f1:c2:b0:7c:1d:06:f6:df:a1:42:38:ab:7e:02:
                    cd:04:45:79:10:8d:4c:6c:de:32:23:b2:64:33:3e:
                    19:9c:db:16:a4:ab:e2:85:5e:f4:4e:11:3d:99:b8:
                    69:f1:bf:ea:bf:2c:96:66:4c:d6:13:db:0c:aa:6f:
                    12:c6:d9:5b:1e:e8:87:96:d7:71:04:92:76:25:64:
                    6d:b4:9b:3b:37:ab:f6:f2:cf:d5:ac:fb:95:68:43:
                    f8:34:5e:db:ee:5a:ea:d5:6d:f2:e9:60:d1:93:26:
                    29:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BE:93:91:12:E5:DD:D7:AD:B5:E2:B5:2F:E1:B7:AE:FB:E0:4B:64
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c99b00e-290a-4618-8076-435475c3020f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:c080::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:b7:61:ab:2b:5a:88:6b:1b:66:2a:25:bf:8b:e3:1c:72:b0:
         3c:65:aa:e3:70:9b:22:f6:3a:a5:88:f1:26:ff:3a:be:f7:fb:
         11:eb:ad:1f:40:e3:e9:b6:14:7c:fe:df:3b:b5:ec:4d:ba:ba:
         37:19:fb:5c:f1:7a:5a:0e:05:a8:b4:70:b0:cc:f2:d9:ad:77:
         1c:01:d7:26:df:0c:9a:c5:66:36:c5:37:3f:1c:55:2c:3b:5c:
         14:ee:e3:89:ab:a3:20:51:8d:ad:08:77:ef:ef:43:37:60:a5:
         5c:f1:6f:81:6c:e7:22:36:c4:26:59:4c:78:03:40:76:ad:67:
         e8:39:7c:8b:50:d6:63:2d:7f:9f:b7:45:a0:20:19:d1:b2:0c:
         fc:2d:42:38:20:8c:18:52:79:5d:1d:02:ec:64:be:2a:d9:7e:
         bd:ca:2d:e4:d2:ae:d1:05:ce:1c:6f:6e:c4:4e:c1:c3:eb:27:
         e0:f8:8c:b1:62:3c:2a:35:38:54:d0:cb:77:21:24:b2:28:7f:
         0c:58:21:28:02:26:ab:86:b2:8a:9a:32:f4:f7:be:1a:5b:3b:
         29:12:78:54:9a:f3:ac:64:af:0d:21:a9:2f:41:3f:34:74:10:
         19:11:b9:2c:62:c0:04:60:c1:fd:26:32:e2:0d:12:7e:19:db:
         cf:76:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----