Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5d90627-5c82-4eb2-998c-0e6a0f3ba566.roa
File:                     b5d90627-5c82-4eb2-998c-0e6a0f3ba566.roa (raw, json)
Hash identifier:          dQg3BAQRx+20+YSDEviTIipzxcC5w4qf/J98dXNK7Yc=
Subject key identifier:   7C:45:4D:81:AF:D3:4A:29:24:C7:34:F0:2A:B5:82:7A:6E:DB:D7:15
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       70784DA995F298953A87BA45540B3CAFDD459766
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5d90627-5c82-4eb2-998c-0e6a0f3ba566.roa
Signing time:             Tue 18 Aug 2026 18:13:01 +0000
ROA not before:           Tue 18 Aug 2026 18:13:01 +0000
ROA not after:            Mon 16 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d033:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:78:4d:a9:95:f2:98:95:3a:87:ba:45:54:0b:3c:af:dd:45:97:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 18 18:13:01 2026 GMT
            Not After : Nov 16 23:59:59 2026 GMT
        Subject: serialNumber=0f3cf621246fe76f994fb5c91ef3c7acb1daf0c41e18ff557151d5c4ec9e4362, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:cb:fc:96:9b:8b:eb:1e:7b:64:7e:9c:fd:
                    13:76:08:fc:d5:f7:57:26:09:e8:ee:5e:17:33:17:
                    b3:6e:3f:9f:51:41:96:32:90:32:09:67:4e:ec:83:
                    f5:42:42:a4:dc:46:4f:2e:b2:85:1e:0d:ac:30:a1:
                    53:87:43:de:cb:e1:98:60:01:f7:41:4f:19:d0:f4:
                    57:a9:d1:6e:7d:af:bd:ae:f9:05:83:37:75:d7:45:
                    c7:a6:3b:4a:5d:55:25:6d:f6:20:82:54:74:b9:f3:
                    5e:34:6f:d1:e9:a7:7b:42:b3:4b:f0:09:5b:e3:ce:
                    16:41:12:b8:01:97:b0:b8:84:b7:99:b4:6a:05:84:
                    f8:87:96:12:7d:41:00:ac:b4:a8:42:6b:3f:3b:0f:
                    d0:30:d1:43:63:60:16:5d:5e:e8:55:90:df:e5:ff:
                    05:25:6f:2a:a0:41:23:24:ed:e4:68:0c:9d:44:b2:
                    3a:33:8a:9d:70:09:0e:fd:54:8a:d9:64:b2:35:0c:
                    99:62:d1:8a:18:4d:ac:e4:1a:f8:e7:0a:f2:5c:c5:
                    dc:92:73:d0:11:9b:13:53:4c:f8:1b:8f:e9:8e:4f:
                    99:4c:07:2b:17:81:bb:a5:73:af:62:9f:76:88:6d:
                    4d:6f:3d:ae:c6:ae:e2:a5:98:0f:81:2a:1c:68:5d:
                    a3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:45:4D:81:AF:D3:4A:29:24:C7:34:F0:2A:B5:82:7A:6E:DB:D7:15
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5d90627-5c82-4eb2-998c-0e6a0f3ba566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d033:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:10:4f:cd:0c:b9:10:a3:29:a2:ab:c4:83:37:23:b6:53:8e:
         09:bb:de:9e:8e:6c:f2:ca:90:de:1a:0c:20:6f:19:b8:82:f6:
         26:21:c1:a5:3f:32:26:77:00:da:d4:fb:be:eb:2b:48:5e:66:
         17:13:8e:2d:6b:7b:62:d1:e7:8c:f9:ee:64:3f:6f:b5:97:e7:
         64:ea:ef:60:bc:50:52:b0:27:80:85:07:af:03:a7:66:77:05:
         e7:6d:32:69:74:e6:ec:54:a4:5b:0d:75:59:54:d5:59:3f:eb:
         c8:f8:0b:e3:ad:fe:92:f1:82:c1:8f:a5:7e:e0:18:6b:2b:16:
         b7:70:d8:d9:a9:78:18:27:4f:98:e8:be:0d:03:74:5e:70:ef:
         04:8a:30:ec:d0:fa:48:b1:49:14:18:e3:37:93:bd:04:06:82:
         f1:54:b5:54:5d:68:46:7d:80:9f:3b:c4:7b:0b:be:97:3b:c1:
         81:52:f5:18:a5:11:52:ed:19:c8:8d:c4:75:c9:d5:38:80:78:
         d8:0e:fc:5d:9e:d2:19:25:5d:5f:8b:fa:79:57:14:53:ac:20:
         9d:9f:e1:66:da:95:c1:07:ff:f4:46:75:b3:a3:86:c5:bf:e5:
         9d:a0:5e:cf:23:fd:ca:f0:37:a2:36:15:10:cc:47:2c:e1:69:
         c3:6a:7f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----