Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ff0a46-4c68-43b8-be33-3f3098623685.roa
File:                     d7ff0a46-4c68-43b8-be33-3f3098623685.roa (raw, json)
Hash identifier:          msbJCEfJiYtZvLX2o9wl0oummkjeZ5L/8ABnfsZvmmw=
Subject key identifier:   62:AC:D1:E5:15:7D:62:7E:41:E2:82:30:1B:9B:BB:69:3C:53:8B:17
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       77C75E64D9F0DF17F6FDAEE52D9FE878EAC529D7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ff0a46-4c68-43b8-be33-3f3098623685.roa
Signing time:             Mon 26 Oct 2026 04:40:54 +0000
ROA not before:           Mon 26 Oct 2026 04:40:54 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:80d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c7:5e:64:d9:f0:df:17:f6:fd:ae:e5:2d:9f:e8:78:ea:c5:29:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:54 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=25347ea4cd68704a336277e4449dd743a9af58231b13814a89ac0e6f645bf679, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:91:00:c3:04:a7:98:f3:51:96:b9:1a:67:c7:
                    9c:85:8f:cd:72:ec:24:50:06:d6:cf:55:45:5a:d9:
                    51:8e:19:b6:94:ba:24:ed:0e:ea:9e:53:54:41:92:
                    3a:81:48:a5:42:a6:c5:0d:3a:c1:31:1c:9c:0f:bc:
                    a3:a7:1a:32:a4:71:59:19:22:7d:95:ba:c0:b7:a4:
                    a9:e7:0b:6f:39:20:23:1b:48:4a:a8:52:f1:22:24:
                    6a:51:5d:50:0f:2d:b7:d1:99:2e:6b:be:88:ca:5f:
                    18:fc:8e:17:f0:3f:01:58:72:0d:c2:08:b4:95:12:
                    2f:4a:f5:01:c1:69:eb:68:ac:2a:80:d8:79:3a:de:
                    fd:bd:8c:9b:10:1a:da:0e:4e:8b:3d:14:d1:af:ca:
                    7a:a6:04:07:d9:21:c6:67:b4:06:ee:da:4b:7d:64:
                    bf:09:55:20:25:c7:ac:91:da:50:92:e5:53:51:53:
                    b9:19:8d:ec:48:9e:04:91:9a:19:75:cd:87:b3:18:
                    22:ed:f2:8d:d3:a6:25:3c:ab:0c:80:7e:1d:82:70:
                    a8:c4:20:27:18:11:82:ae:24:d0:c9:67:d0:b3:66:
                    ee:c5:ee:ba:95:24:91:d5:e5:be:d7:ba:c0:07:85:
                    01:50:87:c0:ad:b9:b0:ba:ba:bc:de:4e:ad:49:be:
                    ce:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AC:D1:E5:15:7D:62:7E:41:E2:82:30:1B:9B:BB:69:3C:53:8B:17
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ff0a46-4c68-43b8-be33-3f3098623685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:80d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:23:c8:07:07:d1:0e:08:95:62:03:4a:5e:2c:9c:4c:a0:a4:
         bd:f9:af:c5:b0:43:d2:0a:98:4a:53:da:b6:7e:b2:ad:cf:15:
         25:be:f1:04:96:8c:1a:97:da:9d:ff:dd:4b:8c:48:93:9e:31:
         68:5b:df:c5:33:5a:74:a7:4a:db:2d:19:88:6b:d9:1b:1e:6b:
         2e:84:f4:02:ce:21:46:ce:33:aa:9b:65:37:1e:da:91:38:47:
         1f:de:1e:9b:35:16:71:75:a4:89:ad:29:e4:d7:af:4b:a2:8a:
         5b:b4:7f:4e:6e:2e:63:d3:82:f3:c1:d3:ec:c1:e1:b5:d0:2e:
         df:a3:79:b5:22:f3:30:a1:8e:70:0b:1a:64:fc:2d:d9:7f:6d:
         6f:34:f0:c8:b4:f7:1e:b9:91:e5:50:fc:48:21:5b:c4:a9:7c:
         07:f8:cd:4c:a1:7f:87:6e:2b:d2:9a:00:08:d9:dc:24:70:80:
         0f:ea:10:f9:54:40:5e:66:78:5d:17:1b:a2:05:eb:bb:93:83:
         69:0d:bc:61:f9:27:86:d1:7b:66:48:cb:04:3e:90:57:d4:e4:
         36:45:a1:b0:46:cf:ad:a8:82:7e:33:3e:24:5b:4f:9a:16:93:
         48:27:d1:b3:a6:58:b5:44:dd:80:48:8f:66:59:7a:1d:87:60:
         27:73:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----