Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e584cad3-b485-48b5-a920-636e55268d8b.roa
File:                     e584cad3-b485-48b5-a920-636e55268d8b.roa (raw, json)
Hash identifier:          c3HeHdL+Rm/ElXGl3aEd8lsdK747VH/lsQfkaRCv7ls=
Subject key identifier:   C0:9C:B6:E6:8F:04:5A:78:36:BF:EA:79:89:FB:79:0E:23:DE:BA:8F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6C307CA3D53E4F553CCB83651ED15E481F617301
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e584cad3-b485-48b5-a920-636e55268d8b.roa
Signing time:             Mon 26 Oct 2026 05:20:48 +0000
ROA not before:           Mon 26 Oct 2026 05:20:48 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:20c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:30:7c:a3:d5:3e:4f:55:3c:cb:83:65:1e:d1:5e:48:1f:61:73:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:20:48 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=45778d79a14542398920848e2ff13eec2d4bab0dc5494884cf2b80a53ff5b03a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:dd:ba:b4:17:c3:e0:6f:00:c6:0e:ba:3f:
                    30:fc:99:44:ba:4b:db:c6:0f:0b:61:97:aa:d2:6c:
                    1e:14:f0:c7:eb:3f:36:50:66:bc:a6:41:9a:1f:c5:
                    41:b3:0d:21:a5:fb:3a:07:51:be:51:6c:ee:7d:3c:
                    37:cd:f3:73:03:13:f3:82:4b:fc:53:32:d8:45:8f:
                    51:aa:3c:78:f1:83:f2:cd:f1:33:bc:fc:75:45:11:
                    f2:c3:e2:0e:ac:4a:af:49:b7:01:3c:a0:cf:a8:47:
                    9c:d7:3d:29:2d:59:f8:9c:39:f6:4f:2a:36:1a:92:
                    01:77:ce:8b:81:c2:12:b4:30:d2:c7:b4:57:3e:e1:
                    1c:6f:39:fc:80:4b:63:32:5c:8a:67:b9:1f:89:96:
                    a9:97:ec:f1:79:18:db:68:41:17:10:0b:80:13:2d:
                    90:9d:6f:ce:57:23:f1:10:bc:19:36:4c:8f:ee:f0:
                    c2:2d:18:10:fc:a2:69:45:77:73:7e:7e:c4:4c:e1:
                    d9:2a:fc:eb:48:cc:98:25:ee:4a:b9:57:c0:fd:9f:
                    df:92:44:88:d9:30:87:b6:62:fb:9a:38:cf:a0:4e:
                    a7:f7:14:d2:9e:d9:a2:4e:c6:5d:f8:19:b9:b3:39:
                    37:b9:1a:d3:6e:2b:31:66:84:fc:d6:16:52:8a:9c:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9C:B6:E6:8F:04:5A:78:36:BF:EA:79:89:FB:79:0E:23:DE:BA:8F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e584cad3-b485-48b5-a920-636e55268d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:20c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:27:bf:73:2a:02:4a:0d:e9:1c:2c:3a:5b:a3:cd:5a:81:d6:
         18:ff:19:ba:41:29:5a:8d:58:cd:b8:78:f0:40:48:37:71:4a:
         8b:f6:11:4a:71:18:0b:69:7e:55:0f:69:2e:1c:fe:16:93:32:
         6a:e7:52:90:f4:10:d1:26:1e:2a:b0:e3:cb:5d:37:5c:16:31:
         4a:b8:76:15:f5:20:10:72:22:d8:48:96:08:a1:59:63:43:e3:
         7a:79:a7:4c:e4:4f:60:db:ca:59:b9:e8:ef:17:b0:46:5f:90:
         15:ba:b9:c3:66:57:fc:96:8c:f7:23:22:51:30:44:43:aa:55:
         0f:17:6e:d1:f4:92:89:3c:3b:be:17:cb:0c:5b:05:3b:7b:62:
         27:dc:e8:04:5d:ed:22:8c:60:d6:ae:71:0f:35:28:22:a1:a5:
         b0:64:3e:9e:95:be:b6:bb:d4:b9:aa:97:f2:80:e5:a6:bf:44:
         23:29:22:ec:a2:e9:8f:c1:9a:62:26:e4:9a:4a:a7:16:78:ac:
         2c:8b:c1:e4:c7:61:7c:3c:e7:16:d3:fe:95:99:3a:a5:ff:9e:
         2b:d4:cf:10:fc:74:8d:0b:08:1a:e5:30:e5:ba:09:8e:90:14:
         7e:4a:fd:07:1a:7b:b0:d2:80:8a:26:01:11:1e:2b:f7:c2:e3:
         5a:5a:4c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----