Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a37b3e49-cec5-4def-b3ef-5356277d82ab.roa
File:                     a37b3e49-cec5-4def-b3ef-5356277d82ab.roa (raw, json)
Hash identifier:          fN53IIogBK6ifKFrche6h8Cn1A04aLkPOeRZoP7A1Xg=
Subject key identifier:   AA:1F:60:B9:2C:C1:F5:FA:E3:4B:87:7B:8F:DE:79:AC:7F:75:EC:4E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3E7D5AED19AE8B07A42CFA04AD93EC5541E85783
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a37b3e49-cec5-4def-b3ef-5356277d82ab.roa
Signing time:             Mon 26 Oct 2026 05:30:33 +0000
ROA not before:           Mon 26 Oct 2026 05:30:33 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d038:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7d:5a:ed:19:ae:8b:07:a4:2c:fa:04:ad:93:ec:55:41:e8:57:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:30:33 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=11ce53f79da487e6e584e6fadff586c32b0815234cb75990deb7391c0bf2d79b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9b:66:7f:40:b0:ee:ca:f0:c9:93:4a:60:9b:
                    1f:a4:8d:84:30:8d:c9:1b:a9:41:58:c3:1b:43:ed:
                    b7:d2:35:1c:cc:6e:4a:b2:4a:4a:68:9f:7b:cc:3c:
                    99:fc:bb:e3:f0:09:05:8e:79:b2:02:9e:e6:9f:08:
                    14:3e:4d:7b:34:b3:0f:89:63:c0:79:53:86:63:27:
                    bf:4c:43:95:9c:40:dd:fb:8f:d4:c5:78:7e:0c:bc:
                    bd:8a:b2:ed:b0:df:a8:82:d4:7e:72:14:48:e1:cb:
                    b0:71:89:4f:2f:ec:5e:38:11:e8:eb:6d:7c:88:20:
                    5c:86:03:32:9d:85:2f:5f:7c:e4:11:7b:db:89:02:
                    a5:8f:ef:dc:16:ae:60:52:5a:f8:55:3e:3b:78:5b:
                    9c:aa:2b:f6:a4:1e:5c:ca:55:fe:fd:f3:56:57:c7:
                    72:03:d5:3a:60:17:a0:90:78:11:b6:74:49:84:34:
                    11:38:0d:7d:25:1b:ff:fe:20:22:ac:b2:13:08:53:
                    6c:cf:89:ad:75:41:b2:61:9d:fd:c1:5c:a4:6d:ae:
                    80:45:0f:e2:ea:e3:ab:5b:e4:b2:9e:07:54:30:5f:
                    42:e6:7f:bf:fa:b1:4a:22:ed:a1:7c:33:87:37:ce:
                    e9:ac:b5:6f:e4:c4:79:0d:cd:e8:5a:85:ce:8b:70:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1F:60:B9:2C:C1:F5:FA:E3:4B:87:7B:8F:DE:79:AC:7F:75:EC:4E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a37b3e49-cec5-4def-b3ef-5356277d82ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d038:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:35:df:ff:68:34:fe:06:3c:e4:d2:c5:c1:47:60:94:5d:f8:
         4f:92:7c:6d:79:e6:d8:d4:1e:2a:12:3e:51:86:d3:5e:dc:29:
         04:e8:8d:51:5d:c2:e4:3c:5e:75:33:c7:51:80:8e:0f:eb:3e:
         f7:c8:ce:b2:5c:70:23:24:6c:b9:c8:09:c8:3c:94:bf:89:ba:
         9c:ef:b0:ef:62:a6:84:bf:7d:38:2f:a0:70:92:cf:f7:a5:f7:
         cd:66:2d:a2:fb:e6:6b:a0:f6:37:3e:e4:0b:d1:80:2f:a4:8c:
         4a:f4:d2:91:93:8b:b5:19:dd:8c:42:04:a4:bf:61:61:a7:f7:
         67:5b:2b:35:b3:25:d2:73:a0:23:41:5f:3d:35:04:77:17:8e:
         c6:ab:eb:5c:b3:a2:e0:7f:2e:10:91:93:1c:3a:f8:c4:ce:3a:
         60:26:47:1e:b8:a0:57:0a:81:45:35:88:ea:03:62:a6:1d:9a:
         a9:9a:c3:38:28:3e:4c:57:89:7b:52:4b:60:4f:d2:51:09:28:
         c1:b1:23:78:89:9e:26:45:f4:13:14:6b:4c:f6:9c:a8:11:82:
         ab:b1:99:e4:3b:72:f6:87:a5:f4:9c:42:c3:06:d9:b4:85:7a:
         c1:49:00:9b:cd:62:c7:ac:8a:28:46:46:fd:c2:ca:76:28:62:
         f2:f3:d4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----