Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e15fa0a2-08ef-450a-bcc6-d556e4fd19b1.roa
File:                     e15fa0a2-08ef-450a-bcc6-d556e4fd19b1.roa (raw, json)
Hash identifier:          bDvVsH9LFCydN218Eph21nffc2KA0xrHNcdXlL8y6+M=
Subject key identifier:   C4:68:D6:C9:CC:BD:D7:6D:9F:38:AB:2E:5A:75:9A:D0:59:78:A5:3D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3BD54CD4EC4B79C319B21F786F1F84273E53FA3C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e15fa0a2-08ef-450a-bcc6-d556e4fd19b1.roa
Signing time:             Wed 19 Aug 2026 01:10:21 +0000
ROA not before:           Wed 19 Aug 2026 01:10:21 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d:8080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d5:4c:d4:ec:4b:79:c3:19:b2:1f:78:6f:1f:84:27:3e:53:fa:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 01:10:21 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=70ceb2f289d1df879ce4fe74949de718753770f4fa913840eae26da807d82211, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:88:02:87:77:c5:da:42:0d:f7:74:a9:3d:
                    0e:5a:27:89:81:e9:38:cc:22:25:24:c3:62:fe:67:
                    ee:2d:9c:5e:cb:6f:e8:40:34:2e:16:b3:40:ff:ef:
                    6d:a3:71:cf:45:39:8e:14:06:aa:1f:ad:6e:c4:0e:
                    10:39:e6:33:8c:1f:ea:78:cf:1f:e1:0e:28:e5:7e:
                    ff:e6:d6:40:8e:2c:30:b8:74:92:67:df:1b:42:c6:
                    57:62:f5:51:b4:82:40:dd:cc:08:97:0c:6d:3e:be:
                    dd:a6:42:ca:56:81:92:5c:04:b7:a2:cc:e6:bd:fb:
                    c8:06:2c:6e:0d:0d:94:7c:19:bc:8b:69:1d:e7:59:
                    9b:05:10:45:73:6a:a9:74:71:c5:0f:87:b4:34:d9:
                    c0:3b:17:15:4e:f0:06:4b:e6:a5:d8:d6:9c:7f:94:
                    9d:4f:6f:75:76:87:7d:ba:e6:91:f2:fb:a5:bc:bc:
                    4b:e7:00:74:db:81:a9:f9:b8:28:2c:ef:ed:5e:ae:
                    9c:f2:04:0f:6c:d8:26:20:da:0c:7e:74:b5:95:ce:
                    24:33:ae:75:da:00:9a:86:00:b6:7f:c3:5d:f9:e7:
                    f6:af:53:d6:3a:ad:44:2d:86:1a:18:21:b2:cd:c0:
                    10:9f:88:8a:88:dd:a5:ec:2a:a8:f6:d8:bb:f8:d9:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:68:D6:C9:CC:BD:D7:6D:9F:38:AB:2E:5A:75:9A:D0:59:78:A5:3D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e15fa0a2-08ef-450a-bcc6-d556e4fd19b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d:8080::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:47:90:6f:0c:1b:fb:ca:d0:02:d7:c9:ae:2a:aa:88:19:0d:
         f1:aa:4b:ee:a9:f9:b6:2c:fe:7b:62:b5:c6:00:a4:ee:08:e4:
         01:40:3e:aa:d6:86:68:cb:f6:a4:dd:78:4b:67:4b:26:cf:02:
         a2:08:db:79:32:79:66:a0:b4:21:41:eb:57:ac:b0:50:fd:34:
         3e:b7:3f:ea:1b:59:b3:d7:75:2c:a9:82:6b:90:9f:4a:e0:7e:
         34:02:4c:55:5d:dd:90:b3:de:c0:84:93:0a:d7:eb:cd:dd:93:
         61:82:45:99:90:8a:8f:e7:e5:c0:c4:9a:fb:fd:19:59:05:67:
         ca:f2:15:cb:5c:c5:fa:d2:fd:2d:ab:31:f5:f8:83:bf:64:7d:
         35:e8:fd:61:1e:a5:6a:14:dd:fb:ef:b9:9a:27:2e:80:4e:41:
         33:a9:b3:ee:77:32:9b:1f:71:f3:25:4a:b3:db:b1:01:cf:aa:
         12:de:ff:54:91:ca:23:23:3f:ae:72:05:52:c9:86:77:76:61:
         af:1c:97:00:31:aa:64:c0:5c:ad:69:af:3e:9f:5a:87:6d:18:
         f2:0b:40:f7:7c:53:f3:52:e5:29:98:9e:58:43:20:2f:09:2f:
         6f:9b:98:86:df:d7:9b:c2:fa:75:a8:7d:52:78:12:84:6b:2f:
         d8:9f:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----