Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e234d9fb-5639-4264-99c1-35b39c1e56b5.roa
File:                     e234d9fb-5639-4264-99c1-35b39c1e56b5.roa (raw, json)
Hash identifier:          iXhSAlo9ZEsMDTh9sSyZHYjuqF1WR7oEqNAXjIKDlhE=
Subject key identifier:   9D:72:CD:18:12:03:7F:2F:F5:9A:3D:9D:16:E8:18:E8:3A:E4:3A:E0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       538932BF477FB12E6E59296BBCA9835AB464ACCE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e234d9fb-5639-4264-99c1-35b39c1e56b5.roa
Signing time:             Mon 26 Oct 2026 04:50:13 +0000
ROA not before:           Mon 26 Oct 2026 04:50:13 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d06f:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:89:32:bf:47:7f:b1:2e:6e:59:29:6b:bc:a9:83:5a:b4:64:ac:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:50:13 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=7fcaf9b1df7c448196c9a09269d917c148b660d2fc15f793779f79ba37f386c6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:33:23:7e:06:7b:97:05:ba:de:c1:cf:78:ad:
                    d1:7a:6f:42:72:23:44:45:53:28:24:f8:21:4b:86:
                    a5:10:78:67:b4:9f:33:7f:8e:1d:ed:26:8c:68:10:
                    95:ae:17:d1:46:d5:eb:21:23:3e:f1:7a:3c:91:63:
                    e3:63:0d:46:c9:49:c9:eb:21:26:0e:79:e5:5d:07:
                    38:51:3f:55:69:2d:35:15:21:30:c7:c6:eb:6a:a2:
                    c8:4f:81:49:99:29:f6:32:39:0f:65:0e:8f:32:72:
                    e7:b5:66:b9:76:8d:08:b8:c8:a4:61:35:b7:67:76:
                    28:49:04:5f:4a:51:6e:ff:cd:6f:aa:e9:20:5e:c1:
                    c1:a7:f0:58:01:ac:1d:06:96:a3:74:f7:3a:da:e6:
                    99:9d:cb:ac:1b:25:0c:fa:52:e7:66:86:9c:ab:b1:
                    dc:18:9e:59:46:e3:3f:72:d7:b7:b1:00:20:3b:71:
                    fd:85:81:85:82:7b:c5:71:e9:13:87:aa:84:07:c7:
                    fd:8a:70:5b:94:a0:7d:c9:56:ce:cd:36:ac:7f:07:
                    18:5a:3d:42:fa:b5:a7:fa:dd:6f:e5:7f:7f:aa:24:
                    f6:01:59:c1:64:7e:dd:29:f7:8a:96:4a:44:ee:ad:
                    d4:01:ec:27:0a:d7:e5:9e:d4:cc:26:9f:c1:3d:f0:
                    06:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:72:CD:18:12:03:7F:2F:F5:9A:3D:9D:16:E8:18:E8:3A:E4:3A:E0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e234d9fb-5639-4264-99c1-35b39c1e56b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:b7:a9:6e:90:18:ac:c8:12:15:7b:b8:5b:9e:27:bf:1a:65:
         51:13:04:89:c8:a6:56:21:f2:f4:df:4e:36:c6:a0:ab:19:71:
         54:4e:18:a5:e4:8a:8a:5f:95:97:84:49:f3:04:17:3b:76:60:
         f9:49:d0:63:ae:d4:53:25:97:1b:42:4d:82:75:5d:2d:b1:47:
         98:29:ce:64:5b:f0:db:b2:b1:90:24:19:43:4b:4a:b5:78:cc:
         d9:b3:3d:fd:b2:18:3c:9b:a7:37:6e:92:12:fc:0e:b1:3f:6e:
         22:64:3c:9c:a5:27:ee:23:4d:59:25:e0:24:0c:e4:0a:d0:ef:
         d6:e0:3b:d0:10:33:9a:3e:de:58:fb:3b:56:48:2f:39:ec:d5:
         41:95:67:ef:b2:ec:fd:ee:74:e1:6a:2f:2b:d4:15:85:f7:38:
         64:d7:e6:3b:ae:ba:87:c7:9b:58:7e:80:56:48:a5:ee:70:e1:
         f7:f4:05:a3:c0:91:be:f9:df:35:40:30:e7:65:6d:7e:a2:0f:
         f7:72:43:f6:15:4e:46:5a:b9:6c:d4:ec:c0:ed:61:55:86:dd:
         29:6a:b0:3d:d9:0c:00:35:f9:be:50:39:6b:e4:23:b9:3c:fc:
         fa:0e:fd:5b:62:73:d8:e3:9c:6c:b3:60:90:d6:bd:bf:8a:2b:
         e1:cf:7b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----