Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aef26e1c-70a2-44fb-82b0-e16066070362.roa
File:                     aef26e1c-70a2-44fb-82b0-e16066070362.roa (raw, json)
Hash identifier:          gWDgOAVJWt0dOc2edNIbfpq3p1r1tboWLuoozUwtL6E=
Subject key identifier:   3B:C3:43:99:B5:CE:04:0F:27:8F:DE:1E:EF:C4:EB:60:DB:A2:59:ED
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3196D57ECF9E741FB78693BEE39C3D613D7C60B6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aef26e1c-70a2-44fb-82b0-e16066070362.roa
Signing time:             Thu 29 Oct 2026 01:02:49 +0000
ROA not before:           Thu 29 Oct 2026 01:02:49 +0000
ROA not after:            Wed 27 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d062:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:96:d5:7e:cf:9e:74:1f:b7:86:93:be:e3:9c:3d:61:3d:7c:60:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 29 01:02:49 2026 GMT
            Not After : Jan 27 23:59:59 2027 GMT
        Subject: serialNumber=196eb6d3293460d49c7b074bd4a2f39d5461a1b8bb8ed9e529cd9ffe65ab6a7f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f1:68:17:1a:c6:18:e1:6e:b7:74:df:5e:b2:
                    e7:3b:8c:94:ce:0e:3a:b5:f1:7f:bf:57:ee:9c:1a:
                    97:d7:88:cf:81:ed:07:f4:d3:33:0f:0f:e7:c5:3d:
                    15:de:1c:61:d8:fa:40:c4:e9:74:68:43:36:ad:19:
                    d6:fe:39:a7:a8:2e:70:32:ee:d4:60:54:20:e6:fa:
                    e6:d3:47:19:18:71:8d:e1:10:4c:fe:8e:ce:00:1b:
                    b8:18:1b:53:1f:2a:83:0f:86:c1:a6:f2:00:83:cd:
                    0f:fb:f3:bd:9b:ec:8d:8b:1e:a6:af:da:ac:59:1c:
                    45:81:dd:f8:d4:6e:4e:df:56:31:38:b9:57:5f:09:
                    d5:8b:29:d3:62:20:93:8e:d2:b8:36:85:38:89:44:
                    af:0a:de:d1:1c:11:d5:47:39:87:92:3f:b0:64:96:
                    d0:42:2a:38:24:10:84:cb:dd:21:08:b9:0b:de:4e:
                    d6:ee:76:28:9b:e7:6d:87:24:7e:44:2e:79:34:72:
                    37:39:b0:29:98:6e:3d:c4:a4:23:96:cc:39:a4:09:
                    47:7d:20:2e:4b:61:47:ce:1d:fa:6f:02:40:b4:9a:
                    93:69:ae:bf:91:ac:ad:36:cc:eb:36:6d:36:c3:85:
                    95:ce:7c:a8:92:1a:cc:0d:56:4f:39:d1:8c:c9:70:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C3:43:99:B5:CE:04:0F:27:8F:DE:1E:EF:C4:EB:60:DB:A2:59:ED
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aef26e1c-70a2-44fb-82b0-e16066070362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d062:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:55:3b:32:38:68:90:e8:c4:32:fd:0e:91:d8:4d:3c:13:8e:
         18:b6:28:b6:1a:a1:e3:b4:7b:70:3e:0a:2f:3c:5c:6c:92:71:
         02:3b:76:f1:e5:6c:53:95:f5:3c:84:5e:b6:cf:82:cc:03:9f:
         7f:8f:b1:a6:48:0c:77:3f:fa:57:1c:d8:d4:0c:88:29:46:00:
         af:41:79:a5:a6:83:51:eb:50:54:fc:32:20:69:eb:89:7b:a3:
         5a:22:e8:74:79:ed:80:38:c0:39:36:9c:44:ef:fd:58:b9:c5:
         90:7a:6e:15:6f:1f:33:02:24:9a:f6:19:02:03:70:12:7d:22:
         7f:26:51:85:03:86:82:76:cd:83:33:60:fe:59:c1:49:3a:35:
         6a:bb:60:e7:fb:ca:e3:6e:5c:54:7c:ea:ae:db:32:16:7f:6e:
         60:14:05:09:44:c2:9f:8f:b8:15:4e:7c:06:0f:aa:7a:e4:92:
         1b:0c:51:30:34:00:dc:9d:99:31:fe:8a:c6:b7:36:c6:1f:11:
         bc:8b:11:95:d7:f1:b4:8f:b0:d1:98:77:0b:ed:e0:03:d1:52:
         29:6e:e6:ca:8e:ef:af:86:7f:03:b7:8f:b4:c7:72:7f:b0:3c:
         a2:c2:ec:41:77:e3:fc:f9:a6:33:7a:85:ab:52:ed:f8:e5:df:
         fc:e5:61:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----