Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
File:                     d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa (raw, json)
Hash identifier:          85aqkfhwdxZYMfCRhcgyXtpJ72n7THly7Y209QPUCxI=
Subject key identifier:   85:A0:9D:A6:72:7A:E7:12:90:14:E5:13:E5:25:03:17:A3:6D:C4:2E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3000866AC19CA05598D5A2C2D628C074ED916E4B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
Signing time:             Mon 26 Oct 2026 05:02:56 +0000
ROA not before:           Mon 26 Oct 2026 05:02:56 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d024::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:00:86:6a:c1:9c:a0:55:98:d5:a2:c2:d6:28:c0:74:ed:91:6e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:02:56 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=a5ee9803dd654b08e69014bd9fb47cf6516a7bff4bd8a2e108cbcc9e7bac2aac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:dd:42:cb:de:98:f3:a5:57:f9:05:1a:26:
                    91:fb:3b:02:8b:0b:71:1e:60:02:fb:af:1d:c7:b4:
                    5e:a6:e6:22:40:73:8b:ff:ff:b3:e0:77:23:b9:0c:
                    62:c1:8f:b6:b3:3a:91:05:b2:55:76:16:e7:b2:94:
                    2a:2c:47:b0:0b:de:a3:e4:61:7b:b2:b1:0c:82:97:
                    ea:8c:af:4e:cc:fe:0b:70:45:2a:9c:11:c8:cc:16:
                    77:5b:c0:bd:c4:67:00:8e:5a:4b:05:85:0c:e1:e0:
                    3b:90:94:1e:da:ea:0a:58:26:e5:ea:96:47:b4:c5:
                    cd:c8:64:95:ea:0b:3c:46:a6:1a:64:29:5a:76:20:
                    e7:93:f1:eb:14:25:f8:3d:a7:9a:8f:f0:dc:95:f2:
                    be:34:03:06:35:cb:e6:73:a6:8c:92:d2:85:b1:60:
                    cd:87:a1:47:8f:6d:72:b0:22:e5:fb:ea:bf:f0:50:
                    c8:8f:3b:cb:b8:03:9b:11:f1:45:2d:7d:3c:fb:81:
                    17:82:c8:17:44:60:a4:2a:c5:ff:67:bc:a2:e8:2f:
                    6c:31:b7:5b:a1:75:14:27:9a:fa:fd:35:8a:93:a5:
                    69:d9:a7:7a:d9:39:c2:6b:b9:a6:38:00:bc:09:11:
                    ec:44:fe:d4:b3:b9:64:04:60:f6:f2:64:8d:cc:c8:
                    46:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A0:9D:A6:72:7A:E7:12:90:14:E5:13:E5:25:03:17:A3:6D:C4:2E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d024::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:74:61:97:66:e4:d6:77:12:cd:f4:fe:4b:82:3f:c9:75:bf:
         68:2d:cf:ba:f9:75:56:bd:00:a2:ee:1d:d6:96:87:15:67:ad:
         08:f4:8c:39:ef:ca:1d:fb:2a:00:f6:28:7a:f4:3b:9b:db:57:
         1f:2a:d7:53:92:29:28:74:7f:5a:2d:41:9d:82:63:ea:2a:1d:
         b5:6b:07:34:53:7c:8c:42:fb:73:d7:b1:fe:40:70:dd:3c:d9:
         6c:22:4a:b3:48:18:55:63:1e:90:df:cf:cb:0b:90:8e:86:1a:
         b3:fa:db:a6:d2:ae:75:f2:9a:17:bd:d5:b3:c2:45:8e:14:e9:
         b5:3b:19:64:4e:38:1f:04:fe:6f:fa:b3:bb:99:40:d1:cc:22:
         b1:c9:cb:e4:7f:6e:c7:a1:94:4e:d4:88:05:51:a2:ab:cc:73:
         e5:0e:2d:7f:01:c8:be:69:02:e5:6b:fb:78:0f:1c:ff:e0:3b:
         12:61:4e:ce:fb:f2:4c:c1:fe:3c:32:ff:50:25:87:89:34:22:
         2f:52:36:6b:9a:d8:72:43:64:99:93:9f:b1:18:01:97:6e:6e:
         75:46:90:22:26:9d:fd:75:09:a4:bd:17:c3:b8:07:72:a8:ba:
         ed:53:95:12:00:c0:aa:9b:a7:b0:83:87:53:cc:91:7b:df:73:
         24:5b:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----