Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4811639-eec3-4653-a07b-9777ebef5f33.roa
File:                     b4811639-eec3-4653-a07b-9777ebef5f33.roa (raw, json)
Hash identifier:          +MQDfqDxE6C/LHwmI70UJJClu2dfA1dzhQVGkvemnTg=
Subject key identifier:   60:5F:12:D7:C3:B8:90:27:BB:BE:21:5A:82:4E:C3:58:E0:80:C3:08
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       752F1EFC1143FDBCA0D3DD7E13E609FBAFD7E451
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4811639-eec3-4653-a07b-9777ebef5f33.roa
Signing time:             Thu 15 Oct 2026 03:20:21 +0000
ROA not before:           Thu 15 Oct 2026 03:20:21 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d059:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2f:1e:fc:11:43:fd:bc:a0:d3:dd:7e:13:e6:09:fb:af:d7:e4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 15 03:20:21 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=1dafcd1a7199e1803eff20637d2775f544438bb329ff64d6672bc7aa889a8d4d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:af:88:ac:13:25:eb:de:18:de:94:26:b9:9d:
                    66:77:c9:25:70:7e:7a:fe:66:c2:15:c2:b6:08:a4:
                    46:d5:3f:b8:7f:a6:a8:81:13:a7:e6:ff:c6:16:b4:
                    ea:95:67:dd:1b:3a:79:ea:72:a8:15:a1:98:df:9d:
                    89:b8:5d:80:26:b0:b6:98:f4:02:0d:0f:9a:5d:53:
                    b0:f4:72:66:7c:5d:40:cd:fc:b2:2f:24:1d:c6:7d:
                    36:5d:c9:26:45:22:0b:21:7b:42:e1:83:17:06:df:
                    90:e7:67:6e:01:4b:b9:f9:b6:89:15:95:ec:e9:2a:
                    92:c8:49:4e:78:56:c0:b7:18:fe:11:c3:37:f5:f7:
                    93:9c:80:40:4e:40:b7:f5:79:69:cb:81:be:35:04:
                    f8:6e:02:a8:d1:6f:54:24:ac:85:c0:15:6c:b7:eb:
                    d4:1b:2f:86:a1:78:72:42:a1:98:8d:7e:cd:67:0e:
                    43:4f:e4:e3:a1:33:8e:0b:a4:79:b0:37:97:72:ba:
                    89:bd:e4:d4:52:0f:d8:44:cc:8a:ac:43:6b:bb:ab:
                    6b:5a:e8:59:57:cc:8e:b2:ef:0b:db:55:97:45:f9:
                    c2:ee:5b:e3:70:cc:91:30:74:38:10:56:4a:0a:1a:
                    21:4c:31:af:e6:dd:25:07:33:25:9c:10:0e:e9:ae:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5F:12:D7:C3:B8:90:27:BB:BE:21:5A:82:4E:C3:58:E0:80:C3:08
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4811639-eec3-4653-a07b-9777ebef5f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:b2:1f:3d:57:ed:1a:c6:cd:a2:80:d1:18:02:8d:ed:29:6c:
         6f:02:0d:83:4e:db:83:a8:ba:95:d7:d8:56:18:55:df:12:f2:
         99:52:33:51:32:9c:0f:d5:48:eb:24:14:d6:9f:7c:4a:a1:52:
         a5:79:6c:92:bc:c5:4f:f3:c4:d7:33:39:05:67:1a:da:6e:63:
         b2:d7:f3:f4:b0:b6:26:82:35:e6:eb:d1:0a:f1:27:58:6f:c3:
         2a:d1:75:c8:21:ba:5b:83:36:b8:0b:24:9c:2c:d4:70:04:f1:
         68:1d:22:10:91:46:e4:db:4f:19:69:2a:ac:58:70:fc:c9:11:
         6a:f1:84:43:2f:9d:55:4f:1d:25:ed:2a:2c:dd:52:f0:2c:07:
         d7:16:b8:d1:00:23:03:57:24:96:f0:a8:6e:9f:f3:5b:1f:a8:
         a8:16:fc:f1:10:13:0b:78:7d:94:ed:e8:ff:f8:72:02:73:a1:
         81:e7:bd:ea:5e:79:6d:04:8d:c5:dc:25:25:67:83:29:76:e6:
         f8:31:44:a2:11:a6:6c:a5:a6:e2:38:aa:1d:d6:71:01:c4:29:
         89:ff:6c:a2:d4:e1:85:70:2e:a9:09:f9:25:7f:46:8d:7b:44:
         4b:5b:d6:12:98:f3:7f:cd:ec:8b:59:73:fa:03:6f:e4:bc:cc:
         3f:6b:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----