Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdaa6de6-00d3-4d18-8aa0-0bf82888d36e.roa
File:                     bdaa6de6-00d3-4d18-8aa0-0bf82888d36e.roa (raw, json)
Hash identifier:          u35lJuwYQgeKsaz8jZL5t0yZ12VAKtoIMTkf8xzznII=
Subject key identifier:   BB:A8:DD:50:5D:9C:97:26:B8:32:E9:3C:CD:14:C8:A7:1D:32:6D:D5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0BC56D8A9E5AE4E304ABD11CE13CAD5A8DBFBCC9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdaa6de6-00d3-4d18-8aa0-0bf82888d36e.roa
Signing time:             Sun 18 Oct 2026 01:30:34 +0000
ROA not before:           Sun 18 Oct 2026 01:30:34 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d030:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c5:6d:8a:9e:5a:e4:e3:04:ab:d1:1c:e1:3c:ad:5a:8d:bf:bc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 18 01:30:34 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=f9a39100425480f960b1702b09286a7edc44119d86276e79445b1a3127e261de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dd:bb:20:d0:d9:34:6b:3c:6a:c1:63:14:d4:
                    fa:64:c3:2b:49:bd:23:5a:a7:1e:75:5c:1b:d3:cb:
                    1d:4e:d5:56:59:90:06:cf:12:8c:44:7e:b7:69:77:
                    97:5a:50:c2:5a:cf:93:c8:4e:9c:f8:0d:31:a2:98:
                    93:78:aa:20:f2:3f:1d:a9:b7:6f:73:e5:6f:7c:60:
                    f3:d9:6c:1a:a4:f5:0f:4c:de:71:7c:f5:76:09:f5:
                    0a:b9:10:70:87:c4:b0:f9:60:f6:b6:93:28:bc:b6:
                    a7:f1:ca:29:e3:99:0f:a8:22:3f:69:09:1e:2a:b8:
                    a8:c0:d7:35:62:c3:1f:bb:ea:14:5b:83:1c:d4:fc:
                    33:b0:72:e1:7b:09:3a:8b:ec:22:fb:f7:71:6e:21:
                    1c:48:b9:53:1a:16:55:a6:4e:3a:c3:7b:4c:e8:8e:
                    8d:13:1c:ab:c9:5c:6d:12:ec:52:62:67:c8:a0:48:
                    b4:55:de:ba:01:87:32:3b:bc:3f:4d:f6:a2:37:2e:
                    87:b2:34:f0:e1:7d:f8:b9:0a:64:cc:d3:5b:dc:d3:
                    0c:93:19:ce:66:2d:9e:78:e2:81:2c:c4:39:3b:dd:
                    ff:19:a6:4e:55:62:bc:bb:37:e8:2e:c1:dc:f4:f5:
                    f1:87:e6:37:f5:c6:25:2e:98:f1:05:13:0e:b5:d0:
                    a9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A8:DD:50:5D:9C:97:26:B8:32:E9:3C:CD:14:C8:A7:1D:32:6D:D5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdaa6de6-00d3-4d18-8aa0-0bf82888d36e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d030:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:1a:42:f5:9b:60:c9:1e:17:55:ed:12:d6:bf:8d:64:cf:82:
         de:e2:cb:02:c9:c7:db:46:f9:cf:bf:11:59:aa:57:a8:95:42:
         79:ed:68:e9:ec:c9:8e:46:4d:35:31:f8:f1:98:04:cc:56:5f:
         5a:98:fc:52:5c:97:ba:16:25:fd:2a:2a:16:29:7b:5f:f2:1c:
         f8:1f:6b:f7:ab:1d:16:33:a8:ba:d6:9f:b3:26:05:88:56:4a:
         7a:13:5e:11:99:db:43:63:bd:2a:92:b4:36:97:57:4c:5b:a2:
         01:e8:50:d2:0c:72:b7:21:c3:66:d4:be:ce:fc:33:59:3e:66:
         45:41:0a:41:47:53:27:c6:e1:32:0d:d7:16:d0:a4:b3:7e:f2:
         ab:1a:91:ea:a8:7d:55:8c:5d:3d:73:77:4d:0a:c9:fb:61:9d:
         dd:62:70:62:1c:13:d2:26:ff:11:55:52:b9:6a:ca:e8:b2:27:
         d4:51:b0:29:c0:55:d2:47:ac:b3:c1:b8:9a:42:89:91:a8:ac:
         04:22:22:b9:8b:27:77:e0:f8:e7:d7:28:9f:93:b9:3c:d7:62:
         41:ae:c4:99:ee:8e:1a:19:5e:ba:6d:30:a7:6f:f1:6d:00:88:
         95:ca:7a:9c:47:4b:40:0c:df:00:2b:27:f8:bf:de:20:06:86:
         81:04:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----