Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
File:                     a75e35f5-c55c-41e8-b026-54c892c68ea2.roa (raw, json)
Hash identifier:          bKobH0SiepOl7f1EkW4w71r7iXfjH54BnJnNhSv31oU=
Subject key identifier:   58:CA:1B:31:B4:77:67:91:37:A6:00:7E:E8:8A:2D:EA:A6:4A:02:F4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       20776F3037F0D979D95AA036D784857DA4870BF5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
Signing time:             Mon 26 Oct 2026 04:30:46 +0000
ROA not before:           Mon 26 Oct 2026 04:30:46 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:90c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:77:6f:30:37:f0:d9:79:d9:5a:a0:36:d7:84:85:7d:a4:87:0b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:30:46 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=f67752e4ad984cb6c2c2b44f42900a303690adfeb54031699ac5bf989b31c88c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:e7:3c:66:20:3b:75:08:f9:8d:77:90:32:
                    0e:6a:22:5b:64:4f:08:53:1c:05:a1:9d:51:93:2f:
                    c7:f9:f1:3e:0b:a5:2d:52:4d:ca:ab:9b:fe:4b:66:
                    c8:df:e2:ad:96:fb:c5:9c:53:fc:24:a0:de:3e:02:
                    f5:ed:21:e6:d5:89:e6:fd:7c:b2:ec:7f:a3:e9:c1:
                    c0:2e:c1:ee:b8:c7:2a:ef:d7:4c:cd:83:88:9f:c5:
                    85:f6:91:80:37:37:df:30:5e:8d:75:a2:36:75:39:
                    da:ac:6c:18:c2:9e:3f:d0:82:7c:76:02:97:9f:01:
                    a7:52:c7:eb:28:97:c9:c8:19:c3:7f:27:14:bb:c0:
                    af:cd:1b:66:4b:d0:4e:5b:bd:a1:e3:7c:cd:22:53:
                    2e:da:16:3f:6a:0a:a4:44:65:c0:6d:a8:56:92:65:
                    12:1c:be:72:53:cd:58:f6:e1:78:9e:8a:0b:7e:67:
                    98:36:4d:9e:5b:b0:ac:a4:7f:8b:8e:76:f7:d5:d3:
                    df:5b:d9:70:a2:48:6a:80:2e:19:3d:93:86:b4:59:
                    a1:18:06:41:4d:c9:d7:4e:73:69:d0:d6:1f:a6:bd:
                    32:f2:dd:c8:38:b1:b7:90:ab:8b:04:1e:c1:c4:12:
                    d5:2e:62:a5:fb:9b:ee:4b:fc:c5:1a:2d:22:7a:a3:
                    9f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CA:1B:31:B4:77:67:91:37:A6:00:7E:E8:8A:2D:EA:A6:4A:02:F4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:90c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:27:85:ff:fe:44:5f:23:3a:b3:3c:fc:44:5e:5a:b9:2f:a4:
         09:40:5d:27:23:93:3b:2b:4a:89:5e:e2:29:6b:ff:c6:3a:4b:
         04:0c:2e:d4:c9:27:a1:82:ac:73:5b:06:f2:d0:8f:d2:cb:2e:
         c8:6e:5c:e4:e0:81:8b:0c:cb:f6:7a:44:49:13:5f:cc:81:98:
         0a:ac:70:86:ac:2c:f3:d7:9c:26:32:7e:2c:4e:2a:e2:be:12:
         f2:07:29:02:66:4f:c4:ee:a4:66:9d:50:e0:16:24:63:b5:a4:
         fc:89:ce:9c:9e:be:dd:a8:a4:61:aa:95:94:17:b9:43:46:bd:
         78:0c:10:d2:af:8e:fe:61:23:0b:2f:bd:f6:8f:4d:f4:ba:08:
         1a:eb:f8:6a:b9:3b:29:cb:73:4a:d2:68:a2:0c:8e:b3:a3:59:
         e3:5a:f6:36:ab:44:be:33:6a:41:69:df:df:42:a8:23:60:86:
         2b:bc:07:b5:16:52:00:a6:9c:35:52:97:dd:4d:7f:3b:e9:de:
         e4:c8:1c:1b:1b:9c:36:1b:65:b9:2e:ec:99:00:f6:e7:4a:32:
         6c:b5:e0:8c:e5:d7:e7:01:88:c6:fe:68:0e:ed:cf:9f:7c:c7:
         bd:cd:5c:6a:61:75:2a:d2:13:90:32:26:b5:35:02:88:ae:c2:
         12:e6:c7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----