Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
File:                     9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa (raw, json)
Hash identifier:          EEIVGWSC8cgDcXNGw+JdSsgiWEfk+Puc0V5aH7zTYM8=
Subject key identifier:   70:F6:E6:01:18:F6:5F:37:09:9A:1D:72:08:18:52:7C:0C:6A:3D:A8
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       32DCC13D9AEACB4CE28190F31EBAE35691A25A8B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
Signing time:             Thu 22 Oct 2026 03:50:06 +0000
ROA not before:           Thu 22 Oct 2026 03:50:06 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06c:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:dc:c1:3d:9a:ea:cb:4c:e2:81:90:f3:1e:ba:e3:56:91:a2:5a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 22 03:50:06 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=e9a1bf746e525641694923cd26d706c2c870c2237b73c291761124959115c77d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:7b:41:d2:f6:e8:f3:62:e5:79:3d:99:98:
                    c7:02:a9:b7:cd:77:41:39:39:0a:28:c8:6b:77:a0:
                    07:e4:6d:ab:31:45:dd:9d:c9:70:92:30:dd:1d:4e:
                    cf:6b:6a:eb:b3:70:e6:df:7a:65:69:b4:4b:b8:8c:
                    50:50:e3:62:34:e2:4e:48:4a:44:6e:8c:c6:6e:fc:
                    5f:44:04:ec:28:92:bd:9d:71:69:7e:c6:cf:df:a1:
                    3d:97:fa:e4:5b:5f:f9:ee:08:58:c3:f6:69:57:ae:
                    06:49:22:2f:91:60:f7:87:39:03:80:ad:e7:71:52:
                    a3:12:47:8b:d0:8b:7a:af:73:ca:e4:a8:f5:26:d0:
                    c5:b0:65:0d:06:31:97:6e:81:b0:ab:b0:5a:16:93:
                    56:09:8f:41:cf:b4:fe:81:3a:9b:2e:9f:c3:eb:44:
                    14:3d:87:69:c2:ca:f6:fd:32:63:09:31:e2:c5:4a:
                    7a:47:68:f7:ae:a4:12:05:53:2e:82:1b:0a:af:92:
                    84:d5:18:d6:6c:66:3a:d7:ac:ad:10:a4:5b:7b:c6:
                    0f:c7:65:58:a9:d9:8f:92:3a:01:1d:1a:83:61:8e:
                    0b:79:b9:a9:a4:3b:07:66:0a:9e:47:3a:20:4c:2c:
                    aa:be:a4:d5:bf:37:76:5d:16:1a:aa:2e:e7:86:8b:
                    c0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F6:E6:01:18:F6:5F:37:09:9A:1D:72:08:18:52:7C:0C:6A:3D:A8
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06c:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:5d:ab:85:b4:d1:e5:a6:25:24:dc:2d:aa:62:88:20:8c:0c:
         c7:9a:70:e7:75:65:ac:ab:79:a7:37:ce:4e:ee:a7:c9:48:c1:
         1f:a9:e8:84:7b:b9:cf:f8:4c:7a:73:62:d2:57:ac:fe:f4:a7:
         26:53:4e:27:d9:97:b3:b2:5e:03:d5:8b:06:6b:3d:59:21:3f:
         ea:3e:c3:6b:7f:df:a8:c8:92:e2:51:63:f2:95:25:e6:ca:96:
         1a:cf:e1:17:cb:dd:7d:fb:43:c4:e5:08:dd:13:bc:ef:d8:73:
         27:7b:0f:db:f7:1c:ef:75:ad:1d:f5:d4:2f:26:bb:84:33:58:
         ce:d8:f7:8d:b0:fc:87:56:ef:e1:71:c4:73:f8:31:ec:a9:97:
         36:7b:06:ed:cb:1c:27:ca:16:11:96:05:cf:4d:64:0b:8e:4b:
         47:88:97:7f:be:cb:a8:11:5c:a6:d8:ac:ad:60:6e:d0:f3:5d:
         28:7f:15:0c:cf:bb:5a:b0:f1:39:91:40:50:09:bb:74:96:43:
         9c:84:6e:d1:5e:3e:4a:93:38:be:c8:a8:b1:38:1c:30:d4:24:
         0e:51:57:19:08:95:4d:a6:f2:68:16:b3:aa:b7:1e:4f:a5:82:
         23:69:ff:20:84:78:88:f7:28:21:e8:a4:49:3d:6e:3c:d1:cd:
         1c:02:aa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----