Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7fb9ce3-e814-4cb1-abaa-41df47ac8057.roa
File:                     e7fb9ce3-e814-4cb1-abaa-41df47ac8057.roa (raw, json)
Hash identifier:          T9kVV0eS3EtakIKbbdO2S9t4jyMF9/yUUBQLql0X+bc=
Subject key identifier:   12:38:BA:F7:9A:86:05:25:F4:8B:EA:55:EC:DF:50:C0:D4:16:C9:D2
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1FD5AD7510F95529F04BFC8E4FAF65BED1C67409
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7fb9ce3-e814-4cb1-abaa-41df47ac8057.roa
Signing time:             Sun 23 Aug 2026 00:00:03 +0000
ROA not before:           Sun 23 Aug 2026 00:00:03 +0000
ROA not after:            Sat 21 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d5:ad:75:10:f9:55:29:f0:4b:fc:8e:4f:af:65:be:d1:c6:74:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 23 00:00:03 2026 GMT
            Not After : Nov 21 23:59:59 2026 GMT
        Subject: serialNumber=a801d6d58605d77b35fe4f5368df85d7ae078ab77edb8f795335e7f5a33834b8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c4:b0:f0:13:e5:2a:aa:46:1b:6e:3f:18:76:
                    be:5f:3a:a7:b6:64:60:d2:c6:01:28:f3:f2:cc:39:
                    9f:a0:09:36:f1:8d:44:88:0c:87:5f:f3:13:d7:3c:
                    e1:2e:08:cb:36:90:77:a6:f6:47:6f:ba:17:77:62:
                    ee:84:b2:fc:de:5a:9b:f9:b5:61:5a:b1:f0:8c:2c:
                    1a:09:f9:c5:39:1e:95:64:58:75:93:6f:5c:3c:77:
                    7e:ce:be:33:d4:b8:a3:90:8b:28:47:bf:39:5a:bd:
                    01:96:3b:71:34:2d:90:f0:1d:eb:d2:fb:d2:49:d6:
                    f4:8d:1d:d9:4e:5f:d8:1d:bb:39:b6:5a:3b:f1:f9:
                    cb:1f:47:78:05:bb:a5:3a:ed:fb:38:0b:4b:2a:43:
                    f4:25:5b:f8:11:2f:c1:68:84:12:7a:17:fb:69:83:
                    fc:bf:54:3b:26:b9:09:3d:5c:d1:c7:45:a9:04:c6:
                    15:d6:e3:4a:6a:82:7f:0d:19:67:24:e2:62:a2:07:
                    26:cb:61:d7:04:72:aa:46:a2:4a:c3:a9:55:8a:8c:
                    63:4a:d6:dc:e7:20:9e:9b:1a:b7:aa:21:5a:68:3a:
                    ee:5f:bc:86:5e:54:cd:ff:33:30:4f:72:7c:8f:70:
                    db:fb:59:d9:b9:a8:e8:e2:9b:35:83:72:0d:92:89:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:38:BA:F7:9A:86:05:25:F4:8B:EA:55:EC:DF:50:C0:D4:16:C9:D2
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7fb9ce3-e814-4cb1-abaa-41df47ac8057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:14:8f:e1:11:4f:a2:63:e9:de:b5:9c:0b:e5:80:d8:48:43:
         3f:a7:d3:ca:c9:eb:a8:15:7c:0a:26:be:ac:ad:b8:66:99:fc:
         f2:6e:b6:c3:14:9e:99:4a:9c:9a:55:4e:83:fa:9a:b6:69:2f:
         5d:66:26:f2:65:a9:5e:6d:ad:9d:28:d0:52:75:8c:1f:a8:8f:
         aa:69:62:ef:e9:53:90:d1:1d:8a:11:cc:29:39:6e:d4:e2:b8:
         2e:67:e3:ca:7f:b0:1b:c4:45:7e:5f:a2:53:1a:7f:4a:87:46:
         a5:0d:f2:2a:fc:8e:fb:71:75:a1:34:dd:1f:4a:03:b6:b2:26:
         8d:55:9d:f8:75:b1:33:23:8b:9c:e1:d9:2d:c9:52:94:60:ad:
         f9:3b:23:d0:04:dc:0c:b2:28:ea:31:21:a3:bb:fe:a3:3a:6f:
         c1:60:af:cb:cc:09:90:b6:6d:d9:f4:63:9c:dd:ec:9f:0c:fd:
         ed:13:14:e1:f5:6a:6e:92:0d:ba:04:a8:41:e6:3c:44:43:3a:
         7e:ac:17:e9:6f:5f:30:e2:6a:d1:e6:c2:6c:85:f7:05:e5:c5:
         2e:37:d3:fd:2c:80:4d:23:32:88:57:ea:66:6d:5e:0a:af:b5:
         39:37:fb:54:2d:19:da:8b:48:a8:25:0f:48:87:57:0b:99:2e:
         51:88:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----