Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab7811c0-f548-43b8-897d-fac68de3433a.roa
File:                     ab7811c0-f548-43b8-897d-fac68de3433a.roa (raw, json)
Hash identifier:          kpF0lI7VLZ3skpXB18AIwjV8glO2UmPrgwBSENZRgu0=
Subject key identifier:   1C:56:5F:86:A7:8A:F4:0C:33:62:ED:A5:D0:AE:74:23:A6:30:3F:64
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       159810F731F9659D8967D0FF3CCE1500F683B9F5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab7811c0-f548-43b8-897d-fac68de3433a.roa
Signing time:             Mon 26 Oct 2026 05:10:54 +0000
ROA not before:           Mon 26 Oct 2026 05:10:54 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:98:10:f7:31:f9:65:9d:89:67:d0:ff:3c:ce:15:00:f6:83:b9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:10:54 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=acc33afc84b3dd3ea1921f6b335c32df9dffaccc91d829e9897c2abd152e3a25, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:97:cb:ff:1e:be:60:59:e0:4b:69:e6:83:
                    7c:a4:c5:33:6f:69:1a:1b:4f:f2:93:c8:90:01:1c:
                    fc:e0:3a:c9:ec:4e:c3:8e:8d:ff:b5:cf:dc:16:47:
                    0c:a5:e8:a7:8e:7a:a1:e1:77:6d:6f:9b:5d:70:e7:
                    1e:54:de:18:3e:ce:c1:f0:fc:3c:c3:5c:6f:3b:09:
                    0f:9b:67:cd:3b:0e:0c:4f:5f:d3:28:83:8c:bb:ca:
                    78:c2:ca:41:dc:91:7f:15:18:41:a0:d7:2f:36:82:
                    ae:8a:80:2c:a3:a3:57:b4:83:22:20:53:65:8d:e8:
                    e2:84:18:bc:42:96:2e:81:5a:ec:c1:d8:f7:5c:30:
                    bf:50:63:21:99:df:5d:20:56:09:6e:ef:da:02:6e:
                    8f:3e:9b:68:7f:a2:60:ac:98:c4:bf:ea:35:8a:bc:
                    e8:b2:7f:05:ac:a3:97:54:c8:ca:fb:6a:7b:8b:a9:
                    ce:dd:c9:cb:0b:4a:85:0e:0b:09:ed:00:04:88:5c:
                    0c:c9:23:03:a8:c5:70:78:f4:7d:a8:b4:43:01:26:
                    1c:f3:2a:fe:0d:22:e4:2f:73:07:22:c4:63:27:13:
                    89:cf:da:f2:89:7d:9a:0b:8e:77:23:dc:ef:ab:2d:
                    16:e7:57:bb:eb:01:54:c3:63:b1:00:d3:e9:b3:41:
                    28:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:56:5F:86:A7:8A:F4:0C:33:62:ED:A5:D0:AE:74:23:A6:30:3F:64
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab7811c0-f548-43b8-897d-fac68de3433a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01c::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:e3:27:83:a3:6a:cf:82:a8:53:34:4c:9e:83:dd:c5:af:f1:
         c1:3f:15:7b:46:39:ec:3d:eb:b7:b2:97:3a:a7:ec:34:ae:2f:
         39:79:2c:9a:1a:51:48:66:dc:ff:59:a0:29:8d:d9:44:ab:87:
         f5:94:46:da:30:0b:4a:fd:62:26:8d:27:9f:ed:e1:4d:f2:d4:
         fa:6e:30:72:53:1d:17:ee:8a:36:d6:ea:c1:80:c0:77:f7:3b:
         5f:28:82:8a:11:5c:81:1e:c0:a4:49:0f:66:b3:8a:96:da:7d:
         a2:aa:83:17:05:18:bc:45:d6:b9:90:8d:4d:7d:f3:1a:bd:07:
         62:ed:34:ad:48:be:a0:49:17:13:d2:5e:2c:f9:59:70:87:1b:
         0f:59:5c:85:06:cd:67:61:be:e0:58:05:05:46:cf:84:53:f0:
         b0:96:1e:29:c8:0e:d9:ef:b7:00:af:86:3e:03:b7:37:3e:8d:
         c7:9e:35:50:ce:96:c7:00:c7:af:54:b6:10:10:0d:70:1b:dd:
         60:92:60:62:b8:6a:90:c4:af:2b:c7:2d:d5:4a:61:aa:79:8e:
         03:14:32:90:24:e7:8e:4f:10:4d:9c:58:0d:51:a6:6b:11:ff:
         36:59:97:50:85:cb:b0:e8:91:10:90:10:90:0d:09:24:15:44:
         5b:74:20:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----