Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
File:                     acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa (raw, json)
Hash identifier:          iSslSHC7RcqydLgioyLFrFk8ZtYIbvsEMSBlU7kCfJg=
Subject key identifier:   EB:2D:8F:19:22:5E:96:53:48:36:C5:EB:A5:62:D4:01:A1:1D:77:44
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1F6F8F069F4D576023DE934343EF472A8EDBF047
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
Signing time:             Mon 26 Oct 2026 05:10:30 +0000
ROA not before:           Mon 26 Oct 2026 05:10:30 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:6040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6f:8f:06:9f:4d:57:60:23:de:93:43:43:ef:47:2a:8e:db:f0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:10:30 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=e007a25069335532cc29964fa83652cd7c9d1b43ace11157251762c0b1b043d9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:31:75:06:6e:29:27:fe:ac:b1:31:ae:d1:
                    08:99:83:eb:2c:aa:b9:b5:1b:56:d6:7d:b6:cf:2c:
                    56:36:bc:d7:b4:14:ba:ff:59:3d:88:b8:e1:07:7a:
                    e1:28:fd:a4:a5:2e:c9:23:d6:4b:be:c2:26:e9:93:
                    d2:43:41:b2:e8:93:e7:ca:e5:65:b9:e6:47:d9:75:
                    5f:ce:4e:b2:ff:eb:2e:1c:d9:ac:a5:c3:2a:7f:d7:
                    be:fc:24:22:66:b5:93:4c:0e:c6:14:fa:71:2d:6b:
                    4a:f3:85:ac:ef:78:b8:7b:2b:2d:4f:65:39:93:a7:
                    23:56:29:c7:7c:cd:0a:16:0b:93:2a:5c:4a:ef:b1:
                    fe:f5:89:ee:cb:a0:c0:97:fe:de:ea:fd:3c:0b:c6:
                    64:68:2c:0c:85:96:7f:de:1d:d6:8a:af:57:de:da:
                    74:1c:95:1f:2a:45:9b:b3:63:a9:f4:a8:50:b8:64:
                    4c:5b:4f:6b:c6:9d:1c:9f:98:e0:64:41:92:c4:35:
                    3a:b6:63:f1:4d:1a:b7:fc:6c:41:22:06:2b:99:06:
                    f6:bf:a5:66:46:96:ef:f9:95:27:83:43:ae:21:b3:
                    d1:9c:5f:c3:54:f8:c9:28:49:a1:4e:47:26:0a:64:
                    60:b4:f1:c9:06:bb:e3:49:c3:8f:73:26:f5:75:0f:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2D:8F:19:22:5E:96:53:48:36:C5:EB:A5:62:D4:01:A1:1D:77:44
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:6040::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:0a:65:aa:3c:39:2e:36:dc:bf:83:e1:e6:44:58:5d:9c:83:
         d7:ed:13:0d:72:ba:8e:a0:84:28:c8:ae:08:5d:e3:bb:24:5c:
         d2:b8:f4:f3:57:c4:2c:95:8f:78:df:2f:ff:1a:40:8b:87:17:
         2a:19:ef:b1:58:77:25:cb:5d:a8:80:2b:51:2a:c9:54:db:92:
         ad:8c:af:41:b4:d2:e8:3f:34:56:cb:2f:a7:86:57:8c:df:0f:
         4c:d3:b6:a0:37:87:33:ad:60:6d:bb:87:e9:b8:46:b4:08:5b:
         1f:64:8c:a3:bb:8e:9f:99:b0:05:8f:34:ef:c8:0e:f0:00:b9:
         75:6c:ef:8d:fb:f4:b3:65:64:f5:64:b7:97:6c:78:45:65:ea:
         5b:11:99:94:20:6e:bd:91:a8:cb:8f:27:72:29:ef:e1:45:92:
         45:ed:3e:74:39:d3:80:6a:95:69:ce:d8:ad:9d:0b:5f:1d:f2:
         71:9a:e8:48:4c:07:46:0d:48:1e:1f:a2:77:77:9f:6e:4f:30:
         4e:70:50:84:5a:41:5e:80:21:b3:35:7b:14:f0:36:90:a6:52:
         f3:13:d8:1c:21:48:e1:f9:67:d1:35:83:59:4b:2e:c4:7a:c0:
         10:9d:02:bc:ec:e8:cf:e0:3d:66:33:eb:ea:fb:91:9d:38:b9:
         8e:a0:5b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----