Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa
File:                     e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa (raw, json)
Hash identifier:          tE4IrZ0NI7t5X94floLURjN8ImSUC0ex6ld/oNu2sfA=
Subject key identifier:   33:F5:07:9B:7A:77:16:A4:CC:15:C5:12:F6:5B:51:C0:9E:94:79:33
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       11F8A78F17E57FC3B086969BFC8F74E020930B70
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa
Signing time:             Mon 26 Oct 2026 05:31:09 +0000
ROA not before:           Mon 26 Oct 2026 05:31:09 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:c040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f8:a7:8f:17:e5:7f:c3:b0:86:96:9b:fc:8f:74:e0:20:93:0b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:31:09 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=f4f0e2498c8ed12bc8b0481aa9bec756566dd49998eae5cbd69dbc81c52a8b00, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6e:22:0d:8b:a8:b7:fb:08:ed:5b:8b:42:39:
                    c9:2a:7a:fa:05:bb:89:6f:5c:ae:f4:d9:b9:ee:36:
                    3e:19:63:96:de:d6:05:21:9a:15:e6:0a:95:f1:21:
                    49:bc:98:c7:ab:06:d7:f5:8f:ad:82:09:da:0e:ac:
                    ea:aa:dc:26:24:75:4f:0c:18:9c:ea:d8:c7:83:e2:
                    5a:f9:22:63:61:32:ef:e6:03:eb:d9:81:27:59:a9:
                    9e:70:90:a5:02:b6:9a:1c:8c:4c:9d:b9:03:3c:7f:
                    8a:9f:8f:a0:70:2d:5a:56:c3:6d:f5:b0:e0:c0:e6:
                    ab:9c:9c:18:bc:18:d2:7b:fc:a5:06:a4:2d:a3:12:
                    76:dc:2e:1a:d2:c9:3b:86:1f:db:04:e4:c1:14:7e:
                    f1:4b:4c:20:c0:ac:f1:7c:54:f1:30:31:ae:4e:8d:
                    d7:90:4e:e9:c2:5d:97:17:98:de:7b:da:36:93:61:
                    ad:3d:c1:c5:18:5f:1f:79:92:e4:15:6c:23:98:92:
                    d8:9a:ab:82:c9:a3:d5:3b:c1:1c:f3:3b:ee:a0:4f:
                    0b:b0:52:e6:4d:4a:a4:e3:ab:e9:8f:c7:0b:7b:d3:
                    5a:f2:02:f4:2e:4e:52:d9:a6:8c:3e:a8:48:ed:0e:
                    18:4d:2e:07:d9:7e:84:1b:95:7a:98:25:81:d5:85:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F5:07:9B:7A:77:16:A4:CC:15:C5:12:F6:5B:51:C0:9E:94:79:33
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:c040::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:95:34:28:aa:9f:57:6f:b4:79:d8:26:1c:14:7a:5a:d7:ba:
         93:79:5f:a8:cd:d1:5d:b1:26:1b:90:ba:58:8e:e8:5c:1c:6e:
         b9:87:5d:cd:60:c8:1b:0a:30:8e:99:f6:cb:13:92:5e:d1:ee:
         a1:fe:92:96:15:6d:6a:d8:e8:2d:f9:19:fc:ff:02:dd:ff:63:
         a5:fd:8a:6b:7a:95:f9:c9:90:ef:d0:30:87:b6:74:d7:92:fd:
         70:4a:74:86:e1:67:37:10:5c:f5:eb:71:07:60:90:9d:88:76:
         25:03:5d:5a:f6:8e:f6:c0:36:82:c0:60:73:fd:f7:3a:e1:1a:
         8e:61:1b:4c:50:a6:a7:3e:45:13:b4:c2:e3:cf:e7:ca:f5:ea:
         e7:54:06:20:95:f2:fe:3c:59:a5:c2:83:95:92:d3:1f:7e:01:
         d1:f1:5f:f0:78:bb:ac:6f:65:30:b4:c3:d8:fb:e1:99:62:bc:
         5a:4d:51:b0:b0:ad:47:da:50:24:1e:bf:60:52:6a:0e:d1:ef:
         01:48:17:37:60:86:dd:fb:5f:87:17:d8:db:75:74:d5:f1:22:
         8b:a3:b7:32:b8:3b:1c:64:18:03:c9:b3:c9:a7:39:01:f0:9c:
         20:9f:70:2e:80:3d:c0:1e:b4:81:74:50:d8:3e:e1:2c:80:f3:
         ef:5e:00:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----