Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f10836c1-eb91-4c58-a561-3a113c9a8129.roa
File:                     f10836c1-eb91-4c58-a561-3a113c9a8129.roa (raw, json)
Hash identifier:          +1ZegApoEewDpaw/Yta9rCGwG+eXrXsOKglAw7hkINE=
Subject key identifier:   04:6F:E9:F5:03:DE:44:01:1C:A6:D7:26:E9:E5:26:6E:A5:DC:F2:84
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7A5D2221E7C030F18A470CD781DA095E5DB69A5E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f10836c1-eb91-4c58-a561-3a113c9a8129.roa
Signing time:             Wed 19 Aug 2026 01:00:58 +0000
ROA not before:           Wed 19 Aug 2026 01:00:58 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07d:c040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5d:22:21:e7:c0:30:f1:8a:47:0c:d7:81:da:09:5e:5d:b6:9a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 19 01:00:58 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=0addebe0b4885b84d3d779e415f4475d7cc7e3c89a7ee677ba97460bdb268466, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:46:84:d5:37:85:2b:1d:47:0f:8c:76:1a:
                    3d:e1:b4:25:fb:f2:c8:74:97:eb:48:bc:bd:9d:fe:
                    7d:27:f4:c6:60:3e:8b:fb:f5:58:0a:b4:8e:aa:0e:
                    1c:3e:92:13:c8:89:fa:64:0c:4b:cd:6e:5c:d8:ff:
                    f7:0f:c2:8b:52:f5:13:df:e0:95:07:64:1a:43:4c:
                    8a:b5:8e:fa:1e:69:7f:9b:5f:f8:bd:4c:9c:3c:f8:
                    04:e1:7b:21:c1:ca:7e:10:c4:67:d7:d0:c8:53:26:
                    71:9e:c7:21:bc:86:f6:8e:5a:0f:16:4f:93:82:9f:
                    46:4e:2a:82:35:6d:ff:35:cd:c2:33:f8:4b:9a:3d:
                    c3:4d:78:16:2e:3b:bd:55:68:75:42:cd:99:e7:8b:
                    ca:61:77:5a:7c:64:6c:ce:7a:3f:80:ea:d5:93:72:
                    2a:1d:65:80:68:30:a7:91:33:66:aa:86:5b:64:96:
                    de:15:19:8f:16:b4:f6:5a:3a:08:80:02:87:9f:92:
                    93:7a:ad:d2:7c:4b:70:b8:87:7b:2c:2c:9b:6a:4e:
                    5e:24:0c:e5:c2:da:df:98:55:d8:c9:33:51:83:55:
                    55:79:96:bd:51:14:5c:6b:9d:b9:fb:06:6e:b9:0f:
                    b5:70:3e:45:a4:67:74:e3:9d:c0:70:08:f5:00:59:
                    a2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6F:E9:F5:03:DE:44:01:1C:A6:D7:26:E9:E5:26:6E:A5:DC:F2:84
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f10836c1-eb91-4c58-a561-3a113c9a8129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07d:c040::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:12:b8:9f:bd:fe:bf:0a:8d:aa:cb:81:2e:c9:67:1c:c0:
         4d:43:60:4a:db:15:79:cd:a3:f8:af:dd:fc:93:bc:74:c9:fc:
         ea:f4:87:da:7a:a1:3b:55:f5:24:09:e9:0d:46:c2:c9:ab:1a:
         6e:27:83:b0:d7:cd:14:0e:4a:5d:43:af:86:10:e1:6c:0c:85:
         50:d5:eb:b2:48:3c:3c:c2:22:7a:5f:a3:1c:04:1e:86:ea:7d:
         e9:64:22:8f:d7:60:00:dc:26:3f:b8:af:dd:82:89:24:9d:23:
         e7:8a:7d:6b:db:b1:f0:e4:8b:19:66:c7:74:8a:1d:a1:bd:bd:
         b2:c2:a7:e3:45:fa:d6:4e:bd:13:e7:82:a9:47:e6:01:a2:a7:
         3b:c8:d3:b9:b0:41:bc:95:f1:8e:6e:b0:36:62:4c:39:b8:8b:
         e4:a6:72:10:db:4f:51:eb:4e:3e:bc:1a:85:ca:28:9a:33:2d:
         ab:dc:81:7e:93:2a:73:35:ea:ea:12:b9:7c:4d:c4:92:e5:37:
         7d:bc:24:86:53:f4:c1:6a:28:d7:11:7a:6f:d8:4c:94:fc:56:
         8b:44:1a:fb:52:10:04:7d:74:16:8e:1a:21:1f:5e:37:2d:0e:
         a0:d5:9e:b2:53:ff:36:a3:a2:53:c7:f6:9d:02:43:91:d5:ce:
         7f:bf:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----