Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f33bbfc1-aae8-4484-ae82-14a752715759.roa
File:                     f33bbfc1-aae8-4484-ae82-14a752715759.roa (raw, json)
Hash identifier:          TERnOecJIU6755x+bU5idfRs5cdRsYS60D/WBNT2rB4=
Subject key identifier:   34:E8:43:7B:59:61:60:04:EB:0D:3D:ED:B5:D7:1E:C2:3F:B4:6B:7E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5DBBA6380E44488F1D3F3169E1AE4E761628ED21
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f33bbfc1-aae8-4484-ae82-14a752715759.roa
Signing time:             Sun 16 Aug 2026 00:00:05 +0000
ROA not before:           Sun 16 Aug 2026 00:00:05 +0000
ROA not after:            Sat 14 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07e::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bb:a6:38:0e:44:48:8f:1d:3f:31:69:e1:ae:4e:76:16:28:ed:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 16 00:00:05 2026 GMT
            Not After : Nov 14 23:59:59 2026 GMT
        Subject: serialNumber=95a8e463782c79f61ac0f7ea8ca70298243b1ff4fa55cb6c48ee507564e43bb7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:0d:72:0f:72:53:aa:1b:46:02:1a:44:9a:
                    8d:54:6a:11:7e:59:02:86:09:c3:1f:6e:06:4c:41:
                    93:b3:5c:43:52:af:c6:a9:cd:77:f6:c7:5b:5a:19:
                    05:76:94:34:76:67:f4:65:71:a8:83:bf:3c:be:98:
                    b1:07:66:0c:54:58:89:43:64:e2:c2:bd:96:32:a8:
                    c8:88:7b:cd:d0:0a:63:f0:f8:de:43:0a:e0:40:f0:
                    f5:5b:b7:f5:16:9c:03:4d:05:36:06:49:4f:b0:5f:
                    73:4c:77:16:82:42:e1:e7:39:fc:54:93:5f:38:b7:
                    e1:43:73:60:a1:67:7b:53:5e:da:d3:eb:ea:ec:b9:
                    c5:c1:1c:f2:a7:48:52:d9:c4:c2:51:9d:55:1c:e2:
                    39:d1:0f:9a:85:11:b1:b5:50:96:dc:56:74:1f:14:
                    e8:6b:7c:b7:7e:0d:50:4d:b3:eb:56:73:1e:f0:08:
                    50:f8:56:5a:a5:4a:9c:c0:70:0e:0a:a6:f5:96:1f:
                    a9:28:5c:ae:11:2c:ce:29:0c:a9:6f:a6:7b:b7:f9:
                    f2:99:77:b7:dc:b5:63:a9:d9:9d:2b:b0:e2:ca:69:
                    08:72:fc:5f:0c:8f:43:23:67:d2:22:73:a1:3c:c5:
                    29:6b:01:90:d3:b6:00:af:e8:67:46:f6:51:df:42:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E8:43:7B:59:61:60:04:EB:0D:3D:ED:B5:D7:1E:C2:3F:B4:6B:7E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f33bbfc1-aae8-4484-ae82-14a752715759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07e::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:e1:67:4f:78:57:90:e9:03:fb:d8:f4:fe:2b:b1:80:59:f0:
         84:4a:23:97:0a:36:d8:69:b5:e4:55:af:f7:22:77:bd:19:d1:
         7a:02:91:4c:80:94:ca:d1:ac:d1:89:aa:fc:b1:97:98:91:68:
         f8:3a:e5:6d:7d:10:58:c7:78:26:20:c5:cc:57:86:e2:1e:64:
         85:c3:6c:7f:29:43:d7:e0:08:91:2e:9d:60:05:71:fd:13:f6:
         7e:aa:19:07:75:a0:61:c3:31:a9:dd:89:8a:a3:f9:de:3b:78:
         68:91:16:47:09:89:1d:28:1b:b1:83:fa:c1:3d:3e:df:dd:a8:
         cd:d3:86:7e:64:8e:ff:ef:1b:8d:d1:db:e6:8d:3f:72:b3:c1:
         98:c6:93:45:3c:c8:e2:eb:5d:56:c7:71:ec:1c:6d:da:90:ec:
         78:88:86:13:6e:49:0a:21:79:5b:a1:0f:f8:3a:16:37:e9:33:
         e8:e3:bc:2f:fe:9b:65:2a:d6:e4:38:e7:47:56:19:af:76:4f:
         47:28:e3:01:a4:32:82:76:c1:fa:e0:8d:e4:0c:d3:93:ad:66:
         f4:aa:db:72:98:3f:54:72:42:9e:96:ce:a0:55:85:88:32:a0:
         db:9b:37:ac:cd:b5:90:bb:24:26:dc:07:6c:38:08:8a:2f:8f:
         f3:6a:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----