Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa
File:                     9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa (raw, json)
Hash identifier:          7UWrHQo3w/GbBwTb3BmDbVv6jmPTN2VoWzI6jpPwB4s=
Subject key identifier:   03:1C:B1:EC:8C:DB:03:37:42:15:DB:A4:24:91:1B:DE:E7:D4:D1:14
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       11187E9EA68EB23077B5EB749A5258D1912B7913
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa
Signing time:             Mon 26 Oct 2026 05:02:36 +0000
ROA not before:           Mon 26 Oct 2026 05:02:36 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d070::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:18:7e:9e:a6:8e:b2:30:77:b5:eb:74:9a:52:58:d1:91:2b:79:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:02:36 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=bfa1ec5c9aceed59e3877a8ca290be50be60130cf20008f95e068a92ffc5b7d6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:b5:d5:35:2c:d4:3b:73:33:c0:3f:5c:37:
                    39:91:5a:f4:ac:06:c7:9c:b3:69:12:b8:8c:e6:d6:
                    fa:88:2d:7c:4b:c2:24:3d:b4:ae:a3:e3:29:f0:67:
                    e8:eb:d9:57:a6:c2:ea:ba:f3:b8:ac:d6:52:95:7e:
                    91:80:e6:0f:34:ac:c6:af:70:4a:f5:4c:a0:d4:39:
                    ef:97:b7:93:f7:cd:31:fe:da:e1:0b:10:92:eb:cb:
                    c6:8d:4d:ee:f2:10:67:59:d0:1c:ed:10:39:06:95:
                    fb:75:28:fc:fa:69:53:72:2d:25:1c:0c:86:9a:ad:
                    7f:9c:c3:14:84:0b:29:6c:10:e0:4b:05:d3:88:50:
                    ac:48:6c:d0:d1:13:39:56:2f:9f:a9:fe:56:8b:02:
                    4f:15:55:b8:f0:a1:d1:e8:33:eb:fd:5c:34:ed:19:
                    61:c2:12:ea:59:dc:03:cb:5a:c1:36:e1:01:d3:54:
                    7d:dd:9d:7e:54:a1:2f:d8:e6:55:1e:9c:1c:44:e9:
                    fe:2e:8b:1c:cf:79:c4:39:82:7e:38:9e:f0:ec:47:
                    fb:40:e3:a6:de:15:3c:30:a0:c2:d2:8a:21:38:29:
                    70:69:7d:48:d1:5b:aa:7b:9b:8b:89:02:bd:cc:f8:
                    c9:f8:d8:b0:82:24:24:f6:81:f6:d4:8b:fa:a5:29:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1C:B1:EC:8C:DB:03:37:42:15:DB:A4:24:91:1B:DE:E7:D4:D1:14
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d070::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:81:01:1c:19:53:ae:d5:ab:b4:85:08:53:38:3b:5e:35:64:
         86:9d:48:db:e0:64:73:aa:11:50:a6:ea:b5:f7:53:6f:16:f0:
         7b:f9:61:b1:3d:b0:08:3b:4b:1a:d6:b0:f0:3b:e2:8b:40:12:
         79:95:59:8e:da:bf:f6:fb:a4:b3:41:07:a5:ed:1d:3c:76:0f:
         0a:f2:af:e8:74:ee:e1:8d:03:1a:dc:52:ef:62:9d:d9:ce:15:
         03:53:78:95:b9:82:8f:f5:4a:f1:dd:1b:9d:59:b8:f2:26:a0:
         b7:5f:95:9e:2e:00:39:4a:38:41:d5:86:5a:5a:87:04:4e:ab:
         99:64:2f:db:d8:1f:bf:ff:f4:80:a0:33:58:43:5b:11:8b:e1:
         7c:ec:db:aa:bb:9b:ff:92:01:aa:cc:b9:67:11:58:75:90:04:
         e2:75:5c:00:ad:72:c0:0f:4e:12:c5:49:b6:e3:05:6c:3c:b6:
         ca:ea:74:5c:ec:8a:c8:0d:a3:48:51:e5:8b:fa:b4:97:b8:8b:
         5b:bd:06:17:f8:e9:66:e2:e0:c9:ff:92:2e:da:cc:62:95:9b:
         0f:93:da:40:20:e1:ec:ed:46:27:c4:9a:9b:61:d8:25:16:ed:
         c1:d0:2f:ac:8f:a8:ac:22:e6:99:76:f5:71:00:18:d1:4c:ca:
         b6:02:93:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----