Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/981c5588-0e4a-445c-a928-99c39b0f1ca3.roa
File:                     981c5588-0e4a-445c-a928-99c39b0f1ca3.roa (raw, json)
Hash identifier:          T+j6sdf4yZzAGzrLiZheY7TRwwoXW5cFKBYfxiYrT2c=
Subject key identifier:   2D:A4:47:17:A0:C4:1F:3C:7E:EE:0F:92:AB:F8:79:F6:59:4F:07:27
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       46D69FBF517DA685C77E02715B9F6DCC5C15A8DC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/981c5588-0e4a-445c-a928-99c39b0f1ca3.roa
Signing time:             Thu 29 Oct 2026 01:02:19 +0000
ROA not before:           Thu 29 Oct 2026 01:02:19 +0000
ROA not after:            Wed 27 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d068:6040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d6:9f:bf:51:7d:a6:85:c7:7e:02:71:5b:9f:6d:cc:5c:15:a8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 29 01:02:19 2026 GMT
            Not After : Jan 27 23:59:59 2027 GMT
        Subject: serialNumber=b3513a997f2f865b123a7a138fd2e4fed2abd695c13a0129f0c5b7a80cf91e68, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:94:40:b2:45:14:0e:9d:da:7a:6c:fd:f8:
                    4f:79:32:00:67:c2:bf:16:ae:bf:c5:35:db:5d:1f:
                    50:a2:87:0f:36:c4:26:e7:ea:59:f3:95:36:f4:c3:
                    91:de:6e:7d:86:45:8e:e7:a2:38:df:73:6b:e0:ea:
                    a5:85:de:b2:15:0e:0b:03:14:ca:23:07:e6:87:9f:
                    e8:e1:04:bb:7a:f9:12:56:22:10:72:90:04:d9:b5:
                    e7:2b:97:ce:78:d8:ce:7c:d4:06:52:79:8c:1a:19:
                    50:fe:b3:8b:6e:33:be:41:36:6a:0d:da:6c:29:cc:
                    66:7d:7b:9b:58:6e:98:08:0d:a2:f0:81:cd:c5:4b:
                    88:92:d6:43:4b:53:74:97:db:71:aa:5b:e7:4d:da:
                    97:00:7b:32:6b:7d:c1:bd:64:84:4e:60:1a:d9:6e:
                    03:f1:a2:86:07:f5:01:c0:f9:e5:26:60:53:2c:47:
                    5c:c6:ad:5a:3a:1a:4c:e9:c8:28:c9:a8:6c:8b:1e:
                    fd:63:2b:a9:8d:2a:ef:1f:1e:56:c5:ba:bd:3a:ba:
                    90:3f:b8:e4:01:40:41:74:73:53:4d:0d:17:6c:5a:
                    1a:9e:a1:84:7a:72:57:46:4a:7e:6f:a4:84:be:8c:
                    7e:e5:af:88:9c:ad:bf:7d:df:17:ca:d1:16:2d:55:
                    61:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A4:47:17:A0:C4:1F:3C:7E:EE:0F:92:AB:F8:79:F6:59:4F:07:27
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/981c5588-0e4a-445c-a928-99c39b0f1ca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d068:6040::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:0e:45:b9:71:96:49:6b:8b:f7:c3:64:38:08:6f:c5:35:79:
         2a:aa:8d:c8:3c:c6:f9:78:45:d5:1c:89:37:5b:7e:ea:0e:dc:
         de:db:0e:ba:be:18:83:99:66:59:45:95:d9:9b:aa:81:41:08:
         34:cf:e1:ba:07:23:d2:23:f6:fe:b4:e8:69:1f:a6:4f:d4:4b:
         85:87:01:5b:7a:8b:e1:42:c5:e3:ff:81:89:a4:e7:be:a6:48:
         f9:e3:dc:95:37:79:2d:73:4b:9b:ae:39:45:f6:c6:fa:3e:2b:
         9f:91:44:a0:b3:e4:1e:0f:a2:69:8d:e1:ae:bb:a7:d4:d0:10:
         70:b7:7b:89:d8:b1:4f:0a:ef:be:ab:b5:ae:82:95:1f:2b:f4:
         cc:f1:b9:e1:f0:91:19:16:78:36:c7:7a:39:2b:e5:28:0f:10:
         5a:77:b0:45:83:95:6d:4f:0d:c1:9f:11:dd:5e:d6:2a:d7:2b:
         20:1c:1e:ab:54:0e:f0:b7:b7:cb:98:0c:57:01:e8:f4:0b:8f:
         a6:d9:e5:b3:bd:8b:75:c2:70:33:94:f2:8a:f0:f2:e4:dd:4f:
         c3:08:10:b7:3d:66:88:3b:d9:fb:76:be:f3:5e:ce:f8:66:b1:
         10:10:00:7b:e5:b7:1b:1b:30:8e:d9:34:9f:f7:59:cc:0f:ec:
         e3:d6:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----