Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97822d0c-c384-4da9-b1f7-c1f2c2133aec.roa
File:                     97822d0c-c384-4da9-b1f7-c1f2c2133aec.roa (raw, json)
Hash identifier:          XX7GNAUBhtxYti9ZCycoXNI+TNrr7Np+27ZTYtN4vyE=
Subject key identifier:   FA:0D:8A:11:A8:A1:5D:E8:05:CF:1E:9A:9E:4C:85:08:08:04:32:D3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1C4111065813FE5DB3AE184083F46D3AECE838AE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97822d0c-c384-4da9-b1f7-c1f2c2133aec.roa
Signing time:             Wed 19 Aug 2026 01:00:57 +0000
ROA not before:           Wed 19 Aug 2026 01:00:57 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d:1040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:41:11:06:58:13:fe:5d:b3:ae:18:40:83:f4:6d:3a:ec:e8:38:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 01:00:57 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=41cf2591ddc4471653a4015cecd97cbe57585ce7f41ddace270c1b9ba44f4e88, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:24:7d:77:85:e1:f5:6d:bf:ca:f8:00:8a:
                    52:ca:26:f8:ae:38:d2:62:97:5d:79:30:89:cb:e3:
                    02:97:05:73:b0:7b:71:f4:b0:9c:42:24:46:ec:43:
                    23:53:ea:75:c0:54:87:cc:c4:68:d2:06:fb:d3:0e:
                    44:66:f2:d4:64:3c:39:bb:8b:28:e3:5d:5b:9b:6d:
                    d6:2b:82:fe:ca:10:47:e1:f6:8d:aa:91:9b:cf:07:
                    2d:52:bd:75:41:8d:c6:3e:9e:19:dd:31:ea:6d:1c:
                    c5:53:03:e7:f6:dc:65:bf:9b:84:ae:ce:62:08:ee:
                    25:e9:fa:44:42:db:87:6b:f4:87:b0:d5:10:3a:c0:
                    cf:cf:32:6d:4c:3f:e8:d9:72:d2:7c:b0:84:9d:f8:
                    9c:6b:70:f0:66:ec:33:91:71:da:01:af:2e:ec:3b:
                    52:0d:a3:01:47:ee:70:77:a6:02:00:48:b4:5d:00:
                    4f:da:f4:cd:ff:9a:d2:6e:e6:5e:87:9d:70:77:b3:
                    97:98:aa:bc:f6:f5:eb:69:2e:fc:56:0e:6c:6b:26:
                    c4:17:35:8b:cd:01:27:7d:77:10:d3:e0:da:19:0d:
                    98:3f:75:0c:93:4b:da:4d:a7:f2:a3:7e:43:34:e7:
                    d1:1c:c6:ae:e3:cc:47:54:6b:8d:35:76:01:65:8a:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0D:8A:11:A8:A1:5D:E8:05:CF:1E:9A:9E:4C:85:08:08:04:32:D3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97822d0c-c384-4da9-b1f7-c1f2c2133aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:84:8e:8c:8f:27:c0:94:b3:40:3e:e5:a1:35:37:49:cb:77:
         d1:94:78:5f:75:6e:32:29:b4:5a:61:34:ac:61:a7:32:68:1d:
         10:a9:32:53:ff:4e:cf:df:b3:a2:65:68:59:71:67:ef:91:ed:
         3a:52:f0:e9:a8:c8:8f:d3:bf:4b:a0:0a:80:b9:95:da:8e:8d:
         55:95:9c:fb:1f:29:95:c4:58:c4:8f:9d:3e:42:67:22:4b:77:
         ac:e8:92:1c:d6:4a:0e:c9:25:d0:2d:08:60:02:43:62:ca:f7:
         7e:87:7e:83:39:51:21:01:d4:f2:ab:b8:ae:d8:44:a7:05:9d:
         b7:a9:95:4d:ce:b7:28:25:6b:6e:6a:da:f1:67:18:0e:c9:68:
         8d:d2:dd:fb:d9:a0:4b:b0:3d:fa:ed:7f:20:65:d5:f3:8f:28:
         2e:7e:38:49:e9:11:7d:12:e9:93:02:93:20:d6:de:b1:bf:31:
         2e:ba:89:37:61:39:84:e0:40:fa:b9:7e:e8:ee:99:72:35:08:
         1c:52:62:9f:ed:67:15:0e:3e:b7:ad:e7:40:95:ee:d0:d1:12:
         b8:2b:5f:1d:c3:5e:22:3b:9b:42:77:64:ad:37:9c:30:d7:46:
         88:d5:79:db:89:e6:3e:40:9d:57:c5:82:6d:76:73:13:af:b2:
         ee:c3:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----