Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cda3712d-34a6-428d-a694-19bab377c44e.roa
File:                     cda3712d-34a6-428d-a694-19bab377c44e.roa (raw, json)
Hash identifier:          z8eYEI6PZaeZb26X+ym/+OkMjtgCZlILZW+re4ReGeM=
Subject key identifier:   FC:DD:50:5B:A5:49:66:44:C0:B4:2D:D2:71:BE:F6:B5:EF:38:3E:D2
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       71E74FA0713993D7218FBA98F95F026C3783C6E8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cda3712d-34a6-428d-a694-19bab377c44e.roa
Signing time:             Mon 26 Oct 2026 05:10:55 +0000
ROA not before:           Mon 26 Oct 2026 05:10:55 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01e::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e7:4f:a0:71:39:93:d7:21:8f:ba:98:f9:5f:02:6c:37:83:c6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:10:55 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=ce4b939d9ff2710f44b9281dfbe07e9d258c29ad9efa67876b916b12174a073d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:1b:df:d0:6d:e6:7a:cf:05:f6:58:7e:44:
                    ce:9c:04:df:3a:08:88:e0:43:ed:d3:f8:8a:53:89:
                    e1:a0:2f:8b:df:33:fc:95:86:e8:1b:e8:da:2a:50:
                    b4:18:a4:a2:3e:d4:16:2d:2f:a1:15:c3:f8:0d:67:
                    5f:4f:fc:80:64:dc:e2:9f:1b:88:60:5a:d4:3f:46:
                    79:8b:92:f5:74:cc:78:67:ad:7f:3b:1f:9d:f3:d3:
                    d2:83:17:94:9e:4a:bc:b2:f5:39:ae:ee:2c:53:50:
                    6b:26:77:48:58:ea:b2:ae:ad:0e:2a:82:95:9f:07:
                    d4:f8:4f:39:60:10:67:a5:38:e6:82:4c:1e:d1:a3:
                    71:0b:26:76:9b:7a:5e:1f:2a:7c:82:0b:be:a0:82:
                    35:80:d5:50:1f:1d:ca:a5:79:44:bb:01:82:13:1b:
                    8f:39:2a:f6:6c:d8:e0:15:11:0c:ea:2e:fa:d5:6c:
                    d8:8a:78:b2:f3:5b:b9:a4:f0:8d:81:54:30:fd:0e:
                    a4:ca:0e:91:f3:04:14:a9:ff:86:01:d1:42:5c:4d:
                    95:85:38:61:d8:f2:2c:f9:ca:f5:23:ba:be:d1:36:
                    59:8b:3e:06:46:42:87:79:db:bc:0b:3e:6e:eb:c6:
                    f5:e9:ce:9a:fd:18:de:23:ac:3f:61:65:35:81:4b:
                    cf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DD:50:5B:A5:49:66:44:C0:B4:2D:D2:71:BE:F6:B5:EF:38:3E:D2
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cda3712d-34a6-428d-a694-19bab377c44e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01e::/38

    Signature Algorithm: sha256WithRSAEncryption
         9f:07:92:81:9b:35:94:fe:ef:3e:55:12:58:37:5b:a4:97:7e:
         52:4a:b0:9e:8b:17:7c:97:85:f3:55:6a:89:51:7c:d6:6b:aa:
         20:9f:97:c0:4c:a0:3e:34:99:ad:9a:e9:28:a7:49:75:43:f6:
         96:9c:13:da:4d:fb:25:55:32:26:06:0a:a8:c2:15:d0:80:a3:
         40:ba:15:98:b2:bb:1c:b3:07:fb:e5:3b:a8:3e:36:25:91:ce:
         54:25:f0:3e:e2:2f:ed:a8:6e:7a:33:19:14:a6:9f:e6:1d:48:
         2f:d3:8e:51:6c:b8:4b:15:90:f3:50:ed:d9:4a:cf:02:64:70:
         e2:56:7f:24:a2:5b:38:a7:f6:3a:54:7d:71:81:9b:70:ce:b4:
         37:f7:68:ab:3f:44:70:f4:51:bc:b2:65:00:a2:3e:1e:93:1d:
         d4:9e:74:07:b2:07:d4:9f:cc:54:36:d9:9a:7f:04:5a:13:4b:
         4f:a0:e9:08:53:ab:e8:0c:65:a8:f4:de:e7:2b:13:ea:91:f4:
         48:22:31:3c:6c:ed:1f:64:bc:b7:90:83:47:60:ca:e3:3a:a3:
         77:31:f3:f5:a6:c4:34:a9:87:88:61:8d:07:e7:a7:ba:c1:25:
         4d:b5:2a:63:0b:c6:dd:a7:70:6b:ed:c4:9b:81:87:ef:88:d6:
         85:ea:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----