Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
File:                     93c73d28-6ada-4f65-bb8d-8fbee434c001.roa (raw, json)
Hash identifier:          MA2t8X5TJ+53BtwFG/E70IdpCRiiag1uI7XB0qwY2es=
Subject key identifier:   AE:AC:F0:1D:37:99:1D:34:5A:45:2F:61:11:A4:0D:61:9E:9D:24:E3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       221EAB46033C357560F3033FFF2716D0E82DB612
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
Signing time:             Mon 26 Oct 2026 05:02:54 +0000
ROA not before:           Mon 26 Oct 2026 05:02:54 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d015:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1e:ab:46:03:3c:35:75:60:f3:03:3f:ff:27:16:d0:e8:2d:b6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:02:54 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=0bc05fa774464fc27d66cfc8a474578540d686eea8718282243d1a4d68a915dc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:6d:7d:86:8a:6d:b0:66:43:f6:9a:79:e7:
                    06:92:41:26:a3:fb:06:a7:63:64:4d:4a:1a:cc:6b:
                    06:91:8a:97:a4:9f:66:d9:32:ae:17:93:d5:b6:d5:
                    6e:67:44:8b:41:2a:d5:b4:f9:a3:b0:53:e4:0b:0c:
                    f4:3b:82:f2:7a:b5:95:b4:6b:51:e2:c4:bd:05:64:
                    6d:6a:fc:b3:7b:f0:83:f5:a2:a8:eb:0e:3e:38:8f:
                    b4:40:24:92:c8:b1:b7:4c:f7:55:eb:11:05:f2:b2:
                    57:a4:0c:c3:c5:a1:66:61:6e:36:55:3f:db:e0:75:
                    d3:a6:40:86:9b:ab:7b:a3:4e:d8:31:79:da:a6:16:
                    6f:b7:05:d8:09:a1:61:29:78:fd:bd:f6:a2:14:14:
                    1d:94:05:af:c2:b5:e7:74:03:3a:34:d9:22:63:c5:
                    36:1d:8e:f5:14:9a:a7:a4:b4:23:65:4e:23:95:84:
                    2d:62:5e:65:47:15:cc:7c:9d:fb:c3:db:ff:35:27:
                    d1:74:0d:0d:af:07:e1:79:37:bc:64:81:9f:8a:26:
                    94:9c:65:38:d2:17:f2:5d:ab:5d:4b:91:4e:64:59:
                    25:49:2c:ba:1e:8b:7a:78:41:ff:6c:37:2d:f5:69:
                    20:ee:42:31:27:e4:4e:54:f5:69:58:c0:ac:ee:ce:
                    25:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AC:F0:1D:37:99:1D:34:5A:45:2F:61:11:A4:0D:61:9E:9D:24:E3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d015:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         38:18:af:64:04:4e:b0:c4:d5:9d:70:1a:88:77:c3:fa:f8:5c:
         52:28:6f:e1:84:9a:94:1b:fc:1f:d4:54:78:b0:02:68:77:fb:
         9a:2f:09:99:35:3b:b0:b1:61:2f:77:1b:fb:0a:1f:30:8c:c4:
         ba:b1:c4:ed:ea:db:16:bd:a8:63:ac:e0:08:71:17:69:d4:26:
         50:5d:75:c5:63:13:4c:15:df:24:75:97:57:81:1a:0d:87:37:
         2a:21:90:6a:24:75:64:93:ee:80:ae:25:a5:14:3c:18:0a:cf:
         a3:d3:fa:b6:aa:66:01:12:24:e8:dd:42:2a:c6:80:7f:88:b0:
         bc:83:e1:07:fb:1b:ed:5b:f8:4b:f0:07:32:ca:c7:38:63:1b:
         2f:d8:d1:15:53:89:26:90:ee:27:7f:2c:e1:28:c9:aa:04:7e:
         58:ab:03:a9:d3:69:43:f2:a2:c5:c4:1d:0f:3c:87:87:23:58:
         f3:0e:af:67:6d:9e:f2:70:9e:6d:ff:36:d5:f8:0c:94:4c:97:
         6e:0e:47:26:c9:4a:09:85:7c:1b:9d:9f:fb:20:e3:e5:61:b9:
         ce:86:49:a7:44:4e:81:52:bb:87:3d:e1:7e:b0:62:7e:90:e3:
         7f:ae:2c:1c:23:02:49:45:24:07:ad:68:5e:1b:72:79:b5:cf:
         3c:2a:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----