Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f7a46ea9-b416-4218-a790-28cf84d702ce.roa
File:                     f7a46ea9-b416-4218-a790-28cf84d702ce.roa (raw, json)
Hash identifier:          sP0yFjydCiroxy6z78QnXo8zb0CnRA0jH2rdmc3k4Pk=
Subject key identifier:   A0:69:E2:47:35:5C:95:19:C8:9C:01:A3:F4:F8:C3:17:55:E4:D4:CA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       548CC2E0D5D12FAD04927B975A3E264D046BDE78
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f7a46ea9-b416-4218-a790-28cf84d702ce.roa
Signing time:             Mon 26 Oct 2026 04:40:39 +0000
ROA not before:           Mon 26 Oct 2026 04:40:39 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d026::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8c:c2:e0:d5:d1:2f:ad:04:92:7b:97:5a:3e:26:4d:04:6b:de:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:39 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=dbee6d6301b43c510731ef3af544f09a2b51b470c6e8f19e44ebf2f7d173e8c4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:28:a6:51:38:70:88:b3:1a:c2:11:43:56:1d:
                    99:49:4c:c4:01:95:0b:03:17:71:10:68:c7:ef:a4:
                    d7:a8:57:c8:42:8c:80:c2:dd:2d:3a:46:d4:d6:a5:
                    6b:28:bc:0b:1c:08:a1:9c:1b:2f:9b:fb:ef:fb:c6:
                    6a:f5:b4:d1:52:2b:24:3b:77:6c:2e:c1:88:27:bd:
                    12:a2:53:a1:ab:e2:72:10:7c:e2:7c:0a:b9:e1:1d:
                    84:8d:e6:b8:76:6d:c4:a6:aa:8b:7d:14:d8:20:fd:
                    ae:3f:b8:b9:a0:3e:bb:14:22:00:de:c4:eb:01:d6:
                    4e:55:0c:99:7d:ec:16:2f:98:54:11:4d:86:42:e9:
                    4a:28:fb:39:61:5f:2c:9f:1c:ad:f5:59:fa:c4:a8:
                    3e:04:f6:91:2a:43:0e:9e:fa:0d:03:14:28:2c:1e:
                    65:98:dd:ed:90:ed:76:ee:ae:1a:0a:30:76:6c:23:
                    cc:f4:dd:89:14:99:8d:af:6b:6c:6a:3e:2a:e3:b0:
                    ee:33:65:04:36:f1:89:bb:10:5f:bc:9f:1f:83:85:
                    bd:4a:b0:01:f1:aa:ba:48:9f:c8:60:fc:d8:81:e6:
                    d5:df:c1:40:34:9b:26:de:06:0a:11:58:8d:b5:d2:
                    dd:03:d1:59:b3:07:aa:de:0f:ee:77:63:e0:c2:0a:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:69:E2:47:35:5C:95:19:C8:9C:01:A3:F4:F8:C3:17:55:E4:D4:CA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f7a46ea9-b416-4218-a790-28cf84d702ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d026::/36

    Signature Algorithm: sha256WithRSAEncryption
         4a:5a:d6:4c:5a:78:6e:25:9b:57:2d:50:7a:2f:6b:0e:99:c1:
         0e:fb:67:62:ea:29:b8:d5:37:4d:54:84:38:38:74:84:81:40:
         df:34:bf:16:91:1a:e1:05:e2:1e:22:e8:72:97:d1:76:68:1c:
         bf:e1:1b:d8:8c:67:12:10:2f:48:17:7e:ff:65:a9:76:32:f3:
         16:39:e5:78:d6:91:84:11:a5:8b:bf:ae:97:71:d5:cd:d2:e6:
         53:31:c7:29:95:bf:7a:cd:29:26:65:89:5b:77:8c:00:e3:d1:
         f6:9c:81:48:7a:38:ec:6f:f1:06:6e:35:80:4d:1e:81:81:5b:
         ef:2b:37:ea:42:71:52:a8:ed:08:6a:b4:bd:1f:a4:1c:df:ee:
         1e:c3:b1:6d:fb:20:66:4b:56:6e:36:d4:15:17:ce:5a:98:7a:
         7e:95:40:6c:f1:29:03:e5:08:82:79:d9:96:71:8c:49:6e:40:
         c6:99:cc:27:25:e5:00:2e:3a:df:d0:33:77:f3:ba:9b:f7:5c:
         7c:79:72:f8:af:43:15:34:4d:93:d6:0d:5b:77:50:d2:6c:22:
         8c:51:f2:68:2e:a2:a3:e7:20:59:71:87:4f:85:8f:94:8f:a4:
         af:58:ab:0f:97:5d:2e:be:73:5a:0e:b3:4c:f7:d3:da:e0:71:
         e6:19:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----