Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ca5077b-0987-4a65-b8ff-a1e27f76cd1a.roa
File:                     8ca5077b-0987-4a65-b8ff-a1e27f76cd1a.roa (raw, json)
Hash identifier:          eDQBZBWyO5UFUvMO9XC19FYlKATMTXz7Ig3v1c6nC+s=
Subject key identifier:   69:A5:EA:DF:B1:15:5E:C2:3E:1D:C9:B9:1F:A3:71:C4:5F:96:0E:14
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6C93DBB304404A3CB991EC2A822BEEEAF610B1E0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ca5077b-0987-4a65-b8ff-a1e27f76cd1a.roa
Signing time:             Mon 26 Oct 2026 04:50:26 +0000
ROA not before:           Mon 26 Oct 2026 04:50:26 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01a:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:93:db:b3:04:40:4a:3c:b9:91:ec:2a:82:2b:ee:ea:f6:10:b1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:50:26 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=267aa89ffbe693c63ebd896f346698cecd96d55e53ae22c579e06e37bfc06e4b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:97:98:4c:7e:09:9f:cb:88:c5:1d:04:16:
                    62:c9:53:9c:15:2b:4b:1f:fd:70:86:88:2a:98:bb:
                    4d:5a:40:a0:53:62:19:5b:55:98:7e:2e:4d:f5:c8:
                    13:24:42:52:70:34:89:77:50:ce:8e:55:da:95:dd:
                    96:53:4b:9c:84:1b:e5:57:45:e4:2c:02:d0:11:32:
                    25:dd:bf:34:d6:8a:16:28:03:9c:45:93:71:11:be:
                    77:6e:f9:ad:60:70:1a:42:d4:38:b3:d0:37:3d:22:
                    f3:dc:e0:6f:70:ab:8a:a1:07:bb:6a:1e:01:ef:9b:
                    77:2f:f8:1a:ed:67:f7:36:7b:20:4b:63:f1:aa:51:
                    82:0f:8a:a2:c2:8b:eb:65:be:0f:44:41:49:64:96:
                    66:b0:6f:bc:03:fc:81:5a:a9:b7:5b:ab:57:fd:2d:
                    26:2d:90:2e:9d:53:58:c6:59:bd:10:a3:b9:b6:4d:
                    a3:3f:94:19:69:b1:19:7d:09:bc:3b:48:e1:81:87:
                    40:75:c7:1d:a3:b3:19:1e:ae:52:09:85:c7:64:d7:
                    26:ce:30:e1:ae:b9:6f:78:10:7b:25:c2:3d:f6:9f:
                    49:97:d0:21:9b:c9:0a:2f:9c:52:17:4a:bc:3f:3b:
                    a0:88:1f:d5:3a:28:df:5a:89:30:66:46:70:23:6a:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A5:EA:DF:B1:15:5E:C2:3E:1D:C9:B9:1F:A3:71:C4:5F:96:0E:14
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ca5077b-0987-4a65-b8ff-a1e27f76cd1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01a:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         8b:4c:aa:8a:8e:c1:c8:d5:3e:db:f6:42:12:fa:86:6e:8e:8d:
         d6:a2:cd:f6:e9:4e:71:a5:9d:6e:14:f5:44:db:cd:0e:83:80:
         51:0b:aa:3b:34:12:f9:d3:2e:49:38:ce:5d:c8:29:5d:ce:0e:
         fa:35:84:84:21:5d:a0:08:3f:04:7a:87:89:16:a5:2a:a9:03:
         3a:18:b0:e7:00:0b:d9:73:d1:42:d3:0a:29:2f:a9:7e:1b:fb:
         b0:21:a4:6c:98:8f:c9:2f:de:ae:54:ed:4d:d4:52:75:cb:6e:
         f0:99:1c:07:9f:99:10:7c:a6:1f:c3:c3:d9:85:2c:23:e3:11:
         ad:ec:55:92:dd:d9:31:b3:1b:c1:92:c2:71:15:89:a9:08:ec:
         d1:c4:91:90:d0:ce:09:51:ab:75:11:eb:de:0d:e7:8b:3d:9d:
         8e:1d:cb:6b:1a:9e:96:82:47:bb:6e:0b:d0:8a:40:ae:aa:d8:
         da:97:a0:eb:35:11:35:26:c8:c0:7d:c4:fd:96:0f:27:25:62:
         67:66:ad:50:eb:b2:21:ce:09:47:75:de:44:fe:b9:b6:9f:cd:
         78:b7:cb:18:fc:81:a8:b7:12:41:f9:45:3c:2b:49:fa:fb:06:
         90:70:e1:41:e1:cc:de:88:fd:1b:04:cd:65:43:c6:d5:e4:ec:
         c1:5e:58:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----