Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa
File:                     ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa (raw, json)
Hash identifier:          NZYfSVB6GgKwc4cDb6kUwrrJHmL0qdsxmYFl18340LQ=
Subject key identifier:   A4:A0:03:E6:B3:F5:95:8F:FC:CD:D8:E2:A8:61:9A:75:01:C2:59:11
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4530D21CD425FD5845A5AFB799F1FB091E816700
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa
Signing time:             Mon 26 Oct 2026 04:50:23 +0000
ROA not before:           Mon 26 Oct 2026 04:50:23 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:30:d2:1c:d4:25:fd:58:45:a5:af:b7:99:f1:fb:09:1e:81:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:50:23 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=310ca83e99667f6de3bffeffd88a032c83e8dfcd649cb4e4dd491cb1c820f180, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:38:62:e9:4e:72:c8:f9:15:4e:83:10:b7:04:
                    54:64:5d:00:26:fe:da:b5:8e:2c:95:41:c3:0a:b5:
                    df:2b:d9:9b:e1:ff:e4:3d:bb:dc:d9:79:06:19:6d:
                    f2:78:cb:c9:47:28:a6:1e:4e:06:a5:bb:ff:59:12:
                    bb:31:42:a3:aa:e9:a4:b2:da:ab:c2:df:1b:fc:86:
                    00:8a:ee:b8:ce:8a:8d:1e:2a:c9:b7:55:21:57:8b:
                    83:d5:be:81:00:23:f0:12:0d:8c:f9:c6:a5:91:7a:
                    a5:d5:72:3e:26:d9:2c:c9:df:6d:9d:81:74:e0:77:
                    7d:df:b6:62:57:e6:30:1c:25:5e:9d:f6:a4:0b:05:
                    f5:df:58:2c:4c:86:fe:2c:06:0a:c0:cd:1f:7a:1a:
                    21:94:f9:a5:4c:52:66:60:05:69:34:77:14:02:c6:
                    e4:c0:50:d9:ba:18:0e:cd:8a:5c:a9:d8:1b:4d:ea:
                    b9:cf:0d:6d:b3:b2:07:e1:62:2a:57:87:eb:f5:73:
                    43:47:38:ff:30:d7:7e:56:16:27:ee:64:e5:d6:d1:
                    c1:f9:bf:3b:1a:de:13:31:89:9a:ed:56:6b:98:ea:
                    41:38:dd:c6:81:73:43:a7:3b:8b:5f:45:15:08:ea:
                    b3:c8:2e:25:fe:40:cd:c4:6e:97:a4:67:83:be:7f:
                    6f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A0:03:E6:B3:F5:95:8F:FC:CD:D8:E2:A8:61:9A:75:01:C2:59:11
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:7b:81:8c:c4:d3:b6:e5:6e:f3:3c:72:2f:fb:62:9f:c5:e7:
         22:46:f6:9c:8f:ec:d3:23:6e:e9:c2:a1:1a:57:56:03:4d:6a:
         bb:d5:b1:c8:78:dc:39:35:92:0a:cf:60:00:f9:a3:2f:4d:c2:
         68:1d:11:f1:30:14:55:f4:03:23:27:ff:a2:04:80:c5:a8:ce:
         5e:5a:42:4c:85:48:cf:60:d1:e6:f1:a5:18:c9:67:8c:c4:5c:
         61:11:88:b6:b9:b8:f5:87:7a:40:10:b0:d2:2f:92:f6:d7:55:
         58:a1:aa:77:8b:e1:17:d9:e5:8c:66:f5:42:0d:1b:53:75:1e:
         99:ba:80:67:fe:86:e8:67:3b:49:8a:33:ed:06:c6:72:3e:13:
         58:71:c5:bb:e0:1b:02:cc:67:f6:1b:ce:1c:16:4a:31:17:d0:
         74:91:dd:06:a0:68:da:65:59:9c:3b:fd:3c:fc:68:03:b4:b7:
         ee:58:ed:97:8a:6b:ea:5d:32:bc:c7:24:92:07:14:62:e2:83:
         52:42:25:72:f3:e4:fb:20:dc:e6:cb:c2:bb:3d:28:e6:df:96:
         2e:36:06:23:eb:a4:59:36:68:1a:cc:ec:ff:06:93:f9:45:b4:
         42:e9:a8:f9:74:04:a4:59:a5:4f:c6:c4:37:8d:9c:61:f5:f5:
         d0:de:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----