Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
File:                     e875eadd-6478-4ac0-8792-06722aa80dd0.roa (raw, json)
Hash identifier:          ru2PgA5VRmUJ9ZG55RzyY7BGB+KD6hLTfUjRYh3xhxI=
Subject key identifier:   D2:C0:0A:A7:31:71:75:EC:17:34:FC:4F:07:F3:54:69:FF:23:35:5C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       53B27CEF416615EED6898EAFC306C5EF0B34DA25
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
Signing time:             Mon 26 Oct 2026 04:50:54 +0000
ROA not before:           Mon 26 Oct 2026 04:50:54 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:20c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b2:7c:ef:41:66:15:ee:d6:89:8e:af:c3:06:c5:ef:0b:34:da:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:50:54 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=48bfe47d76cdf9f59eafbeaed1fdd511557adcbe98360261739308beea34ab07, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:67:f0:7e:90:99:68:be:a6:0b:1c:ce:03:
                    54:a4:0e:5b:1b:e3:ef:67:1f:e4:d0:bf:55:3c:72:
                    fb:2d:f0:fd:87:bd:fa:a7:c5:fa:a0:ef:8f:76:67:
                    6f:51:78:30:83:93:dc:d0:e9:ea:45:47:4c:3f:ca:
                    cd:94:c8:ee:f1:7c:0b:70:ba:3a:c9:f9:7e:ef:cc:
                    6e:fa:e0:7d:ad:d2:4c:cd:99:78:25:e6:88:ca:ac:
                    8e:c8:e3:03:80:ce:13:36:c9:28:b8:ae:5e:6f:e2:
                    a9:f6:5a:48:41:22:41:7b:d2:7c:e3:d9:85:99:12:
                    ed:7b:18:8c:93:19:89:a6:a1:f5:92:76:1c:45:ae:
                    d8:51:f0:b2:e8:5b:2a:a4:fb:0b:a7:3b:ca:ac:b7:
                    b4:aa:7c:5c:c5:cf:c8:a2:66:c8:89:51:5c:21:eb:
                    72:00:49:ca:20:50:0e:09:5a:69:85:de:fe:e2:0f:
                    c8:b8:c5:eb:43:d5:9b:dc:25:cc:a1:27:30:36:f8:
                    0c:74:fd:f4:ae:2b:a9:d7:14:60:d8:6e:18:b4:48:
                    ee:33:56:cd:d1:fc:4a:78:32:b6:70:0c:04:0f:7d:
                    54:d5:67:aa:85:03:cf:dd:7e:73:73:71:62:45:dd:
                    2d:40:32:aa:79:03:eb:1d:26:5e:20:a7:24:54:1e:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C0:0A:A7:31:71:75:EC:17:34:FC:4F:07:F3:54:69:FF:23:35:5C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:20c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:4c:14:e3:00:db:49:fa:d7:1f:ed:08:b6:15:9c:7c:c3:d1:
         86:b6:13:da:41:11:02:86:b8:2f:09:a6:95:c7:42:08:0a:20:
         fe:a1:04:35:ec:18:de:1c:9e:ed:25:92:30:ce:e7:0c:8b:35:
         c0:d2:6f:c4:55:34:d0:59:74:5d:84:c2:7a:2b:66:0d:42:c1:
         18:d9:5a:6b:e6:61:44:7b:6d:48:a9:60:91:24:91:7d:09:8a:
         18:cb:65:6c:24:ba:a8:88:89:41:9d:9f:78:f7:e8:04:52:5e:
         64:86:9c:d6:81:dc:ec:2d:74:7e:27:f4:50:41:ed:7c:03:e9:
         3f:a3:7f:61:47:bf:3c:6d:24:fb:ea:a4:c7:47:9f:e8:25:73:
         e7:1e:ae:98:31:4c:5c:b5:ec:fe:68:46:43:25:b4:e6:28:7c:
         ef:c1:23:2c:bb:fb:a1:e1:af:4f:8c:69:73:f1:a1:9c:a7:30:
         9c:0e:82:8a:24:3f:13:77:3e:68:e1:73:e2:d2:ea:55:3f:db:
         59:13:1e:4a:79:d7:d6:16:9a:a4:d7:11:bc:a8:5e:42:e8:06:
         22:04:71:aa:d1:04:47:53:85:17:81:c7:dc:bd:17:bc:41:90:
         61:95:57:d6:a8:08:43:a0:ab:a3:ed:41:b7:f0:24:5f:0e:eb:
         7b:ee:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----