Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c6065d-431b-4a4f-98c4-f607358ee480.roa
File:                     a6c6065d-431b-4a4f-98c4-f607358ee480.roa (raw, json)
Hash identifier:          jens/DVGzx+vbwsE22d7UDcG/9UwnOITz7hGtcveozw=
Subject key identifier:   BB:0F:E3:5C:28:25:66:3F:B0:7B:79:56:84:20:2D:A4:48:C6:5E:A8
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       39291D677B2051B96AA7F207B75FDD745BBF1049
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c6065d-431b-4a4f-98c4-f607358ee480.roa
Signing time:             Mon 26 Oct 2026 04:30:29 +0000
ROA not before:           Mon 26 Oct 2026 04:30:29 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d06f:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:29:1d:67:7b:20:51:b9:6a:a7:f2:07:b7:5f:dd:74:5b:bf:10:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:30:29 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=3eb5f140219f031e4d4b3a3ad72228cb36ab1461250802726ad1349b77b27f6c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:8a:6e:ac:70:57:d6:76:01:02:bc:83:18:
                    e9:44:29:03:84:73:a5:cd:80:b3:03:c4:ff:36:60:
                    77:17:28:14:c7:55:71:b0:66:84:83:e2:b7:e2:3d:
                    b6:ae:a2:83:61:c6:ea:83:d3:16:ed:de:29:50:17:
                    67:d3:1c:d9:a2:e3:53:d2:b4:b9:3b:58:46:46:1a:
                    6e:03:fe:72:42:23:1e:c3:7b:b3:0f:fe:99:fc:ec:
                    72:35:1b:7b:5c:9a:e0:96:d2:87:40:1a:79:aa:38:
                    cb:33:a6:79:d5:9c:3d:20:14:6c:ca:65:44:18:4d:
                    a0:ea:90:f5:2d:4b:87:82:f2:80:88:65:bc:41:8f:
                    cf:c7:c8:78:4f:d5:6c:be:54:52:fd:d0:e3:98:43:
                    b5:6b:89:da:93:09:01:11:96:02:a5:cf:75:d1:ee:
                    e1:9d:1f:81:89:9c:aa:63:75:16:1e:e2:f7:00:7c:
                    01:e2:cd:57:37:0b:83:43:1c:97:94:4d:24:0e:75:
                    bb:f3:1e:f6:97:49:18:b2:17:7f:24:fd:78:77:cd:
                    d2:56:b6:24:74:6b:df:e5:b2:69:98:7f:89:a3:f3:
                    9d:5b:f5:cd:4f:f0:47:de:57:c9:20:56:44:ba:54:
                    f6:1f:5c:22:a0:9e:e4:27:10:c9:c0:0f:d4:1f:ee:
                    67:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0F:E3:5C:28:25:66:3F:B0:7B:79:56:84:20:2D:A4:48:C6:5E:A8
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c6065d-431b-4a4f-98c4-f607358ee480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:2c:16:95:84:d5:58:05:dc:14:47:90:b7:c0:9f:9c:0a:4d:
         a6:f7:59:c9:1b:fa:36:b2:25:63:e6:9e:8c:ec:25:67:fc:52:
         a3:97:e2:3f:90:42:bd:c7:51:aa:c0:8e:b8:c9:5c:8c:d7:81:
         91:87:20:c0:a8:37:10:2b:4e:ea:3e:05:53:2c:e7:e3:a7:9d:
         79:29:e9:dd:08:c8:7b:0b:b4:45:f0:d3:13:7d:72:b4:58:90:
         9d:62:63:98:88:ce:cd:76:58:8a:85:70:bf:a4:80:bb:b7:f2:
         b2:5f:c6:59:ad:c4:9a:93:8e:46:55:77:69:88:19:c7:10:93:
         b7:58:62:2a:8e:af:45:62:dd:cb:5a:2f:75:d9:3e:c6:da:5f:
         60:1a:c1:f0:3b:9b:82:3b:9c:f4:d2:c3:8b:54:b1:84:7f:f1:
         8d:17:7c:c1:70:69:1e:8d:27:43:b8:92:d7:fc:8c:29:db:dc:
         0b:5e:e6:32:e4:51:8a:08:85:20:a7:04:8a:06:d6:60:c6:c1:
         4b:3d:ce:26:68:de:0f:80:1d:eb:db:af:f0:04:79:eb:68:d2:
         7d:3d:49:6d:d6:99:be:20:61:2a:87:91:54:4e:4f:72:50:40:
         0e:65:99:39:7d:d7:c2:65:f3:f9:5e:c2:c8:43:16:78:95:0e:
         36:c1:f0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----