Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93549c76-d7f3-48f4-9e55-b485fec00b13.roa
File:                     93549c76-d7f3-48f4-9e55-b485fec00b13.roa (raw, json)
Hash identifier:          2K9q3lAk+oY0e7ZazkTrzrEY09vb2bsiPle1xTQS4Pg=
Subject key identifier:   E2:CD:C6:3E:85:25:7B:22:F4:93:FA:B0:D5:AA:5B:63:3A:73:5D:9B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4B0D402EEA152A4D0DC8037A3F93D4FC0036268E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93549c76-d7f3-48f4-9e55-b485fec00b13.roa
Signing time:             Thu 22 Oct 2026 03:50:16 +0000
ROA not before:           Thu 22 Oct 2026 03:50:16 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0d:40:2e:ea:15:2a:4d:0d:c8:03:7a:3f:93:d4:fc:00:36:26:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 22 03:50:16 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=cc5856c07e40b0506f159b14d70b01ea09dd5057b0511fe0d54c9e40e788a585, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:74:f2:cf:58:bc:6c:06:97:3c:96:e0:19:d1:
                    d1:b5:fa:a4:bb:82:ed:1b:8d:cb:be:db:f5:25:72:
                    2c:58:fc:a9:42:34:bd:0f:3a:07:7e:af:1b:97:ee:
                    ee:40:08:02:7c:cd:bd:79:e4:84:06:fb:35:8e:ff:
                    99:70:65:3a:54:96:82:7b:67:7e:49:b9:bd:b5:7b:
                    ba:94:cc:ff:27:00:82:12:05:2c:ca:e7:67:bf:d1:
                    81:d6:45:35:84:d4:6b:eb:8e:cc:0b:00:42:a8:b0:
                    02:23:d6:64:2f:9b:d5:fb:c5:73:b1:50:de:98:40:
                    35:2e:f0:3b:2b:a7:5a:0d:ab:ea:af:f4:6c:9d:af:
                    af:d6:a6:00:aa:6a:a5:43:92:58:51:8a:e1:16:70:
                    2c:3e:92:e6:e0:21:46:a7:61:62:b9:2b:b7:ac:7e:
                    f1:99:08:a4:cb:b7:b7:e8:a2:f6:d5:e6:2b:3b:2d:
                    40:a0:25:8e:ab:7f:cf:fc:57:b2:e4:c2:b6:f5:6c:
                    56:2e:61:d1:78:a3:56:cc:6e:c3:d4:f8:2b:1a:33:
                    13:1e:bb:43:8d:49:ea:dc:9d:39:ee:f1:44:68:6d:
                    3f:99:f6:27:c0:26:6e:b5:70:62:8c:23:1a:5b:4d:
                    94:73:b8:e5:6a:91:50:92:4c:44:56:12:e8:8b:7c:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CD:C6:3E:85:25:7B:22:F4:93:FA:B0:D5:AA:5B:63:3A:73:5D:9B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93549c76-d7f3-48f4-9e55-b485fec00b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:19:09:8b:bf:a1:bb:62:e7:34:eb:d8:f3:f6:ee:ff:5a:39:
         5c:a4:ec:25:5f:45:fd:28:5c:55:42:fc:fe:e5:a4:c6:83:13:
         01:4a:96:b3:92:bb:be:33:61:89:5b:6b:ed:d2:22:16:a3:49:
         0d:75:fa:2d:e6:95:13:c3:80:d1:c6:fd:b4:0e:84:8c:5f:3b:
         dc:cc:12:de:30:6d:d3:de:f3:08:c6:d0:86:8e:8d:a9:61:7e:
         c8:33:5c:39:53:42:26:a9:7d:b8:35:75:f7:05:9b:47:37:b9:
         37:f2:58:d3:ba:4f:2c:33:ea:a2:f8:43:a6:33:5d:46:0d:d5:
         be:09:14:70:13:61:51:ed:68:ee:f9:ba:7e:f6:d2:7e:7c:93:
         a3:3c:d3:44:7e:42:90:7a:26:49:f3:4d:bf:72:31:dc:7d:5a:
         cc:ba:d2:23:a0:93:78:cc:e3:15:9c:0d:6e:5d:89:36:39:0f:
         76:d9:61:50:ff:29:35:da:f7:97:e1:70:bf:fe:ec:ae:ce:f3:
         21:02:91:8d:63:78:37:d6:a6:30:f4:85:9e:23:af:12:fd:19:
         f6:2c:39:ef:fa:6d:a4:a6:5c:9a:e7:7e:04:4b:77:d1:bd:a0:
         e8:f7:43:31:c4:c9:c5:ac:3c:1f:ce:d6:0e:ff:47:da:10:e4:
         dd:20:d3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----