Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa
File:                     975dfb4d-ef39-4371-9678-ff7909080d1e.roa (raw, json)
Hash identifier:          Tf4LQyukhjL6lgKWuFj8ssNaAtCrF0Rsex4smSMFzJw=
Subject key identifier:   DF:D9:79:04:A0:CB:D7:6E:0C:90:17:47:C9:70:F6:06:D1:A2:AF:AB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       65FCD1C112EC0827354F6F2DA05A36E591439A13
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa
Signing time:             Mon 26 Oct 2026 04:50:28 +0000
ROA not before:           Mon 26 Oct 2026 04:50:28 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:b080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fc:d1:c1:12:ec:08:27:35:4f:6f:2d:a0:5a:36:e5:91:43:9a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:50:28 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=2ef4ccd07ee50b91321e58f86257af39504f43b44d75c5bfca2599ec2dc43690, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:64:65:5b:4b:01:e2:1c:c9:b1:79:c7:25:
                    f1:1f:cb:63:85:49:09:be:41:a6:07:76:3e:8d:ac:
                    d6:f6:be:97:01:75:a2:42:a6:da:51:70:1f:f2:a3:
                    f8:ec:85:72:3c:70:b4:59:34:42:17:04:d0:61:f6:
                    c1:51:ed:78:27:d2:11:85:8d:66:94:f6:e1:67:85:
                    d3:01:cb:f6:bf:0b:7f:ac:f6:9e:56:d7:ee:aa:ce:
                    e7:68:11:1b:d7:96:c5:b9:51:a6:e6:95:fd:06:a3:
                    cb:20:c9:c8:39:0a:ca:3d:f7:fd:5b:4b:f4:95:7a:
                    85:08:41:b5:a5:ec:dc:ce:a4:e8:b4:47:8f:4b:f2:
                    3b:f0:e2:2a:0e:de:08:b5:55:fe:47:2e:1a:35:6a:
                    c8:e7:be:be:0a:42:98:90:57:b7:b0:6a:ce:bb:36:
                    05:3b:ef:e5:15:fc:76:6c:34:c3:5f:9e:cb:0c:29:
                    14:57:ee:7d:f5:e5:e5:21:df:f5:eb:c4:e4:58:81:
                    8b:4b:a2:83:66:13:df:b8:39:7a:8e:e2:94:cc:9c:
                    37:f2:53:d5:24:5f:f2:93:8a:0d:14:e0:c7:52:a3:
                    2e:4d:1c:ec:c7:11:80:08:96:2d:ef:4a:26:44:e1:
                    62:2b:94:d5:07:47:40:cd:79:3e:09:e4:a4:7b:90:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D9:79:04:A0:CB:D7:6E:0C:90:17:47:C9:70:F6:06:D1:A2:AF:AB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:b080::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:07:13:13:4d:36:f6:a2:4e:05:98:be:f4:4c:9b:ce:8f:b8:
         b1:3a:ec:da:18:80:3c:f1:60:2d:6c:08:59:9a:70:79:f8:18:
         87:51:33:e2:a2:27:ea:5e:db:03:18:77:e2:df:dd:27:47:eb:
         61:44:e2:21:83:06:dd:a7:0e:01:90:b7:8d:89:01:66:0d:80:
         da:6d:e2:4c:9a:03:d7:09:c1:a3:38:f5:60:c3:ad:f1:32:e5:
         f1:bb:ac:62:02:1e:2d:ac:3e:9e:2f:dc:95:b3:35:4f:bf:19:
         95:ed:a8:ad:d8:7b:ea:c4:0d:3e:65:d8:cc:c3:ae:81:50:67:
         06:fa:b5:00:85:74:38:94:d9:8b:39:3e:bc:23:9e:27:db:97:
         fd:e0:f3:24:64:87:f2:3e:0b:d5:38:4a:d2:54:29:bd:4f:9e:
         df:4f:d1:69:a3:80:b7:3d:ad:53:93:0c:b8:bb:37:e4:e0:09:
         f6:3e:0d:08:7d:52:53:fc:30:fc:d5:b2:ac:a2:5f:cd:b9:c3:
         6c:d5:32:11:20:f5:07:0e:f5:ea:ec:c9:4a:e8:c5:52:38:da:
         2e:47:77:51:fa:76:f6:84:dc:04:99:82:ab:a0:4d:af:a3:40:
         39:7f:83:0b:0b:d4:76:16:b1:62:d7:ad:34:77:a4:09:e8:8b:
         b4:9d:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----