Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7d242ad-482b-4700-888a-b677a178a4bf.roa
File:                     b7d242ad-482b-4700-888a-b677a178a4bf.roa (raw, json)
Hash identifier:          dhW9tS5Ojyl5SpBqs8UyN3Z2cjNcBguQ30qOL5Jde1w=
Subject key identifier:   50:6A:F8:E1:37:27:7E:09:D2:3B:3D:E5:84:90:17:14:79:FC:FE:F3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       53BA7601BD23E0EF259A28096853E2B6CA70AFF6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7d242ad-482b-4700-888a-b677a178a4bf.roa
Signing time:             Mon 26 Oct 2026 05:20:21 +0000
ROA not before:           Mon 26 Oct 2026 05:20:21 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:6080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ba:76:01:bd:23:e0:ef:25:9a:28:09:68:53:e2:b6:ca:70:af:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:20:21 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=9ca9d81092f54631a525b4b6fd82ff07d6004e4b23def5fa9d9fc843c3a77b47, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fb:9c:c2:fe:dd:21:b8:6a:67:0c:e2:d0:aa:
                    1a:67:99:2f:4f:5f:70:27:51:9e:bf:c7:0a:b9:a8:
                    ec:b6:e4:80:5e:12:f8:e6:dc:8a:9f:6c:f1:f8:42:
                    db:66:ed:0e:a7:2d:00:18:22:6d:ff:cc:5f:02:7c:
                    c1:99:28:0b:6e:ae:24:ea:fe:da:d0:22:ef:a7:ae:
                    15:87:c5:5d:f9:7f:a3:33:b5:9a:f8:62:87:80:53:
                    37:91:7c:f1:02:42:6a:47:d9:f8:87:2b:04:b1:42:
                    b7:a0:5b:a8:00:f7:5c:50:46:f9:c9:9a:35:ed:4e:
                    8e:d7:4e:52:5e:63:41:63:02:8b:e7:2d:5b:42:d8:
                    0a:01:8c:64:37:b3:08:06:fd:50:9b:ee:89:47:7a:
                    aa:aa:f9:e2:6c:a5:26:db:e3:0f:a3:98:e4:8b:80:
                    72:b9:d6:14:dd:c5:59:b0:d2:41:6a:f6:0e:c1:a1:
                    fd:cb:e9:e4:35:f4:3e:d6:1d:b7:33:e7:0c:84:d0:
                    f8:d1:2e:95:36:9a:f7:b0:8c:58:20:6d:3a:69:dd:
                    1d:fe:37:a5:35:87:e3:7a:21:74:53:4e:17:2b:70:
                    c3:75:15:55:2a:61:9b:6b:e7:b4:8d:77:52:24:4f:
                    b4:aa:1b:94:16:83:d0:a6:4e:0b:af:f8:83:7f:2a:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6A:F8:E1:37:27:7E:09:D2:3B:3D:E5:84:90:17:14:79:FC:FE:F3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7d242ad-482b-4700-888a-b677a178a4bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:8d:d0:87:e3:18:1a:10:dd:5f:95:2f:b0:76:de:56:66:cb:
         1e:74:86:89:35:ac:13:51:41:a0:74:78:5a:09:4d:0c:1f:a7:
         ed:72:ee:3e:d7:1a:16:71:a2:2d:3e:34:b1:f5:da:80:ef:3d:
         ce:ec:20:a6:68:09:95:bf:c9:04:5c:f1:46:21:00:ab:2b:93:
         50:95:fa:02:c7:6a:7f:2f:ba:bd:92:85:11:25:64:4b:d1:6f:
         bd:b7:04:4a:39:1a:a0:cb:ee:6e:0b:92:ef:b3:64:a8:e8:03:
         dd:f5:d5:18:ce:7a:d2:b5:63:6e:e8:b1:29:60:27:40:d2:13:
         ed:cf:e0:04:21:b3:09:1e:6a:ed:25:e9:3b:6d:4d:73:00:ba:
         a9:64:e9:cf:31:1d:52:8d:cf:3a:60:4d:40:88:7f:e7:68:14:
         49:99:49:dc:3a:a0:e3:bf:9b:48:71:7e:39:75:fa:de:ca:fb:
         9d:6a:14:91:d0:ee:5f:1b:39:47:a8:ce:49:67:7b:82:59:cf:
         15:1d:70:00:2e:67:5c:c9:13:fd:e5:a7:f2:1a:1d:06:77:98:
         bd:a6:1c:1f:7d:aa:01:aa:f4:a8:b2:4c:ec:fb:1d:c0:b7:fd:
         ee:1d:d0:c2:4c:ef:aa:f9:3d:88:26:75:9b:b6:99:bc:22:ff:
         15:82:0e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----