Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa
File:                     edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa (raw, json)
Hash identifier:          twRLiCb0n6LGlyWowkj1QYGmhJVHaKeTOUIWhU6IUOA=
Subject key identifier:   AA:C1:23:1F:BC:8F:D4:8F:F8:82:00:3C:78:D4:BB:72:81:96:58:92
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       60F0D704AFE614825A1BA4CD50F2B8094BF0F883
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa
Signing time:             Mon 26 Oct 2026 05:20:08 +0000
ROA not before:           Mon 26 Oct 2026 05:20:08 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d014::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f0:d7:04:af:e6:14:82:5a:1b:a4:cd:50:f2:b8:09:4b:f0:f8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:20:08 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=d3e1ed1981831dba5fe98b448b64717b50e75d79a3a80e743c1190d8375c7405, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5d:f8:4e:3e:7d:07:e9:f3:72:21:2f:ca:c1:
                    f5:61:20:56:36:f4:a1:79:8c:4c:08:de:63:de:f3:
                    7b:33:84:c2:d8:d0:53:10:49:1a:1e:e2:33:3f:28:
                    d1:ee:91:a5:5f:f5:4d:38:a5:5b:de:39:60:f7:7e:
                    de:5e:3a:ff:47:fd:99:bf:41:3e:3d:41:bf:46:6e:
                    3c:64:64:b3:0f:63:08:55:d3:de:92:5d:34:a1:89:
                    da:71:c5:9c:73:e1:d9:c1:b9:eb:74:50:ef:c2:20:
                    b2:0d:c5:4a:56:ac:b1:a0:27:09:43:c5:e2:cc:be:
                    70:e9:cd:02:ee:d0:65:d7:cb:e1:10:4c:1b:41:ca:
                    c7:30:35:d6:40:c1:eb:a6:29:dd:85:06:3d:e6:93:
                    e7:f2:37:31:a7:b1:c1:3e:db:33:26:79:c4:96:7e:
                    f7:b0:de:4d:6b:0e:f3:25:2f:e6:81:8d:2d:da:40:
                    92:92:ef:a6:24:e5:54:e7:f0:03:1c:78:a1:fa:02:
                    85:d5:3b:67:53:9e:df:c0:77:a5:f0:0d:41:1b:b4:
                    ad:5c:5a:18:df:5c:8f:20:fb:f8:0b:4b:82:67:11:
                    df:40:ee:f7:6c:7b:17:4d:b4:b0:59:43:28:ca:73:
                    de:ac:5e:94:59:ee:6e:e4:fa:8f:b4:6b:91:da:34:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C1:23:1F:BC:8F:D4:8F:F8:82:00:3C:78:D4:BB:72:81:96:58:92
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d014::/38

    Signature Algorithm: sha256WithRSAEncryption
         97:2c:e5:9f:6c:4e:93:54:f8:be:04:d2:85:d6:ae:69:76:45:
         2c:d6:4a:6b:ea:b2:ff:ad:bc:de:c7:17:69:d2:b1:d7:c7:8c:
         7d:b6:30:e9:68:ee:66:e7:ba:30:2a:61:8c:c3:b6:7d:61:70:
         a6:9d:19:b7:48:40:ce:5e:c2:43:d2:a1:0b:e5:3d:42:b6:d3:
         d0:1b:b5:d3:59:fb:9c:6e:77:de:64:61:61:78:56:98:f1:6a:
         b7:9b:78:0b:45:6b:42:26:ec:1d:3b:5a:ef:d2:df:f3:fb:15:
         13:15:79:eb:de:41:53:fc:92:84:b1:e6:05:f8:b5:3c:8d:31:
         ca:f0:97:f6:ce:d4:b6:17:92:b7:57:b1:cb:5f:1d:b7:5b:0d:
         15:9f:28:b4:40:eb:36:39:f5:b6:64:b6:91:e4:67:d1:0a:09:
         2d:54:53:5c:f3:86:63:ed:cd:8d:ac:ba:f8:97:ac:b2:c4:df:
         e4:29:5b:5d:23:06:1c:18:19:24:72:17:82:91:df:85:82:2e:
         df:4a:e8:af:dd:11:02:5a:fb:3a:4a:54:8d:d4:74:0d:d0:16:
         e7:a9:41:ff:88:d2:0e:84:82:0e:8d:8d:97:7c:de:09:a2:6d:
         e1:17:de:da:48:bf:8a:28:47:74:4f:ce:c1:e3:59:92:4e:24:
         1b:4a:de:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----