Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9945cd2e-c13e-46b8-83ad-2175ff7c3188.roa
File:                     9945cd2e-c13e-46b8-83ad-2175ff7c3188.roa (raw, json)
Hash identifier:          gxLvatOpRugkgxb6c91O0S95xYLmvJqKgS6lhje9V0o=
Subject key identifier:   38:C0:69:8E:D3:31:E0:DB:1A:A3:06:C8:9C:5E:E5:DA:0D:F2:AA:98
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7377F61964E44803A5DEE9AF093A0DABEFDD5C2B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9945cd2e-c13e-46b8-83ad-2175ff7c3188.roa
Signing time:             Thu 22 Oct 2026 03:50:15 +0000
ROA not before:           Thu 22 Oct 2026 03:50:15 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06c:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:77:f6:19:64:e4:48:03:a5:de:e9:af:09:3a:0d:ab:ef:dd:5c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 22 03:50:15 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=5cae765a8b5193c16f7c325c22b84ebd92eb1b5171ede871359408b687a5c6b8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:d7:d2:49:96:ce:f8:d0:17:e6:24:27:80:
                    f9:9d:59:4c:7c:07:a8:c1:c8:c6:69:43:24:61:12:
                    bf:02:52:ae:5e:42:cc:87:81:f9:23:61:50:0f:ba:
                    8d:b1:bc:57:e7:6e:51:fa:85:42:42:ff:89:b7:c6:
                    25:87:b8:88:af:2c:17:95:5b:13:07:61:6a:54:de:
                    28:82:b8:9e:d5:17:5a:12:00:6a:21:0e:6d:d4:55:
                    62:ae:49:12:14:f8:5e:06:f7:16:66:b6:28:cb:ca:
                    e1:87:c2:66:47:f7:af:80:24:67:5d:c1:ae:ee:a7:
                    24:43:e1:90:34:d5:a0:56:35:e9:20:63:42:cd:7b:
                    81:14:50:55:09:b8:59:a2:54:9e:66:aa:69:f7:f6:
                    40:62:e3:2f:90:f3:8d:49:7d:29:20:fb:c9:1d:87:
                    2b:e1:db:69:3e:ed:62:12:fc:d8:27:ae:2a:de:7e:
                    a0:10:92:a7:e7:c0:1f:7e:13:1c:ba:3e:ca:38:0e:
                    30:ce:ec:c3:72:1c:b1:ed:81:cd:1d:7e:ed:2b:82:
                    48:db:ed:97:8d:1a:ce:d0:81:f9:c7:5e:9a:8c:c5:
                    84:a3:e2:70:8e:7e:31:d3:05:61:38:e2:ff:63:c8:
                    62:71:a5:c2:57:ad:2c:4b:76:af:ab:cf:74:af:79:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C0:69:8E:D3:31:E0:DB:1A:A3:06:C8:9C:5E:E5:DA:0D:F2:AA:98
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9945cd2e-c13e-46b8-83ad-2175ff7c3188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06c:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:6e:97:44:42:1e:05:79:71:14:2c:2c:4b:4b:16:37:9c:03:
         1d:91:de:a5:62:f5:da:0c:e5:ca:1d:38:07:e2:75:aa:f2:6c:
         30:6a:de:6e:f8:f3:65:99:db:0d:61:6f:18:b5:63:72:8d:bb:
         a0:ef:e2:73:d2:14:f1:44:74:5a:47:fe:9f:86:b1:5c:9f:10:
         23:bd:d7:03:d6:29:8d:40:86:b6:c7:86:ad:b6:ad:f1:8a:7b:
         ec:c5:65:f6:ca:79:ec:48:2d:27:5f:b3:f0:07:07:cb:41:cf:
         f2:f7:1e:8e:02:76:e5:e6:94:ed:60:ec:03:f7:b9:1b:81:c8:
         02:e7:36:d5:54:2b:eb:49:2d:4d:0e:2c:c1:2c:bb:14:d8:9a:
         12:c8:66:55:e2:08:7e:40:6d:bf:2a:77:97:0b:91:ec:57:24:
         c5:d6:73:2a:cf:97:31:e8:24:60:0e:8b:38:d4:4f:fd:bd:ef:
         4f:15:29:db:76:26:dd:1b:14:82:bb:79:2e:31:39:1f:ef:91:
         3f:8e:51:2d:55:51:9b:c0:bd:26:a2:3c:fd:c0:41:42:86:6f:
         c7:7a:31:62:2d:e7:d2:48:e8:bc:90:3c:49:5d:db:72:5c:76:
         46:67:ae:4e:45:28:eb:f3:71:37:89:aa:04:6f:27:ce:59:17:
         85:eb:05:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----