Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed4fb2e2-531d-453d-9efc-d69a8a9e2312.roa
File:                     ed4fb2e2-531d-453d-9efc-d69a8a9e2312.roa (raw, json)
Hash identifier:          J5rEwOpLqm5XJtaKltACoswqavTlB9aQHV9sFqz2F5I=
Subject key identifier:   FE:E3:DA:61:68:E4:6F:C9:F8:4A:30:3E:5A:0F:A5:B9:B4:AE:E2:C0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2E9D8396AC94EB41D43629EFB7892520369CC3B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed4fb2e2-531d-453d-9efc-d69a8a9e2312.roa
Signing time:             Fri 23 Oct 2026 01:50:06 +0000
ROA not before:           Fri 23 Oct 2026 01:50:06 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9d:83:96:ac:94:eb:41:d4:36:29:ef:b7:89:25:20:36:9c:c3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 23 01:50:06 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=a0c19e37f5f2a5d085bba4aa5c726106ce1ac74bcb015a9172d844c5e39f8e13, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:2b:04:2a:3f:dc:de:f7:6a:27:80:68:6e:
                    48:93:cb:f5:a9:80:dd:2f:1c:c6:a1:b7:b0:3d:c8:
                    54:57:f6:1c:07:2b:6d:17:32:62:84:de:ea:89:c9:
                    d4:23:0c:df:9c:8c:9b:5c:33:7c:6d:e6:92:ba:20:
                    c4:31:4f:d4:b8:f9:0c:bd:f5:40:19:38:03:4c:8e:
                    77:86:e0:57:17:94:a5:0a:b7:e2:c2:6d:7f:c5:41:
                    0d:e3:e0:44:1e:8b:ef:a4:8c:8f:17:6b:6e:f1:52:
                    77:2d:64:ed:b5:27:cb:bd:25:64:73:6e:20:34:0a:
                    04:97:5f:ac:26:05:a9:58:95:5f:af:39:96:05:97:
                    45:96:c3:66:bc:e7:2c:07:73:37:c2:15:ff:b2:e9:
                    82:8c:88:4c:6a:91:35:f5:43:c8:d6:01:bb:1d:7d:
                    4a:eb:f9:8e:c7:59:1c:bc:ab:63:0e:ad:f5:d5:8e:
                    ca:2e:60:c9:fe:b2:42:60:2e:e5:de:4b:29:4e:be:
                    02:17:2d:77:89:fe:d1:91:2d:90:be:55:b7:9c:8c:
                    a6:e6:9d:74:24:4f:61:5c:aa:60:6b:08:a3:fc:ee:
                    6d:54:a8:c5:e2:c0:34:9d:df:96:53:34:2b:80:e7:
                    68:76:77:dc:ea:9e:ba:83:6b:87:5a:a1:94:a7:a0:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E3:DA:61:68:E4:6F:C9:F8:4A:30:3E:5A:0F:A5:B9:B4:AE:E2:C0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed4fb2e2-531d-453d-9efc-d69a8a9e2312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:ec:a2:c4:31:bf:fd:75:00:04:16:d1:d5:da:72:39:1a:63:
         69:2b:b8:42:6e:c8:2e:b5:93:e3:8a:35:8a:6c:ae:a9:aa:ad:
         03:9c:0d:44:7a:9b:d1:83:2c:f4:2c:78:85:ce:36:48:e2:d6:
         04:c3:f9:be:bb:1b:71:e2:a5:84:48:14:7b:c4:50:4a:69:88:
         d9:bb:fe:86:4f:68:2e:44:71:b2:8a:46:99:db:9d:48:8c:8f:
         b4:a7:d4:a5:18:c0:1b:c5:b8:51:2f:11:05:98:13:eb:40:1e:
         4a:ca:5d:6e:d8:e7:26:b0:87:8f:f5:3a:57:4d:4e:ee:92:e3:
         05:ae:a3:6b:61:b0:5f:cf:e4:e6:0c:bc:60:8e:98:4b:42:36:
         dc:e8:33:28:41:21:3e:f4:d9:12:c8:3b:6b:99:37:e1:e4:35:
         9e:90:19:da:d1:9f:40:ad:bf:ef:89:88:46:79:ba:29:fb:7d:
         a6:19:87:1f:1e:22:ec:f9:4b:68:56:1f:6d:a2:c7:dc:d3:26:
         61:04:b5:77:96:c1:34:a5:36:2f:c9:f4:3a:26:4c:b8:fa:e6:
         b8:fe:7d:2f:63:ba:a7:88:5b:da:25:02:ad:ae:e1:e6:ad:f2:
         6c:ab:1d:4c:72:d7:74:ed:42:64:8a:9f:be:e0:b0:0e:22:a4:
         31:59:12:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----