Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa988028-efed-4415-9900-806e803d3c43.roa
File:                     fa988028-efed-4415-9900-806e803d3c43.roa (raw, json)
Hash identifier:          Ml5GLAcipX/IYywdbO5HfXmvEJnFtxPHu27//6h6UjE=
Subject key identifier:   23:1F:01:6B:2C:1D:B5:24:62:4B:9D:8A:93:8A:7B:3F:50:CF:8F:A1
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1CDB5218F8A2314CDCE9756EFCF4765C51FA8294
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa988028-efed-4415-9900-806e803d3c43.roa
Signing time:             Thu 12 Mar 2026 15:36:45 +0000
ROA not before:           Thu 12 Mar 2026 15:36:45 +0000
ROA not after:            Wed 10 Jun 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d05a:8020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:db:52:18:f8:a2:31:4c:dc:e9:75:6e:fc:f4:76:5c:51:fa:82:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 12 15:36:45 2026 GMT
            Not After : Jun 10 23:59:59 2026 GMT
        Subject: serialNumber=ebe9507b7c26382d3e644c6e2cbcbdc0c524d22c1ac965c59397b74d1bd5fc20, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:62:83:ee:a0:73:08:6c:17:09:bf:25:01:f5:
                    b2:c2:88:28:bd:24:e3:91:cd:b2:a9:8a:a5:34:f7:
                    9d:3d:9a:6c:e0:fa:85:36:90:e0:e3:a8:ff:16:89:
                    e6:78:38:20:3c:fc:47:aa:9e:cd:0e:8a:44:9f:ea:
                    22:7a:3b:1d:73:8c:5f:26:ae:ea:24:5e:a2:f2:fe:
                    a7:d3:6d:62:37:cf:5e:85:2b:e4:dd:cd:55:b8:72:
                    34:c2:9c:18:52:02:a8:e6:49:be:36:55:2a:78:92:
                    6e:76:61:24:6a:3d:ca:a8:0e:1a:0e:af:49:e3:03:
                    bf:82:bf:95:44:68:4b:66:b5:34:a7:7f:87:06:bc:
                    13:3b:4f:31:96:77:76:07:24:d6:21:37:65:fb:8f:
                    72:a1:f1:c8:4c:85:51:52:7d:54:d8:ad:6b:33:6c:
                    fd:7e:84:3c:c9:73:53:ec:0a:32:bc:8e:c8:6a:09:
                    be:35:4b:e2:03:41:30:dd:65:67:21:43:2d:01:d1:
                    61:cd:d1:08:81:6d:1f:3f:15:b1:a0:62:14:05:c2:
                    ce:a2:c8:ea:66:a6:41:d1:98:7a:74:39:41:b9:4b:
                    be:bc:82:58:0d:4a:ee:89:62:49:c1:d1:17:2e:cb:
                    71:59:f1:fd:3b:20:ab:14:ce:2a:b1:d2:52:ca:0a:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1F:01:6B:2C:1D:B5:24:62:4B:9D:8A:93:8A:7B:3F:50:CF:8F:A1
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa988028-efed-4415-9900-806e803d3c43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d05a:8020::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:1b:11:74:d1:f3:3b:08:e3:13:c2:9d:ca:27:9e:bf:05:da:
         d0:14:02:8d:79:cb:ee:97:9d:10:95:08:5c:6e:07:8c:fb:9a:
         f6:30:4b:72:aa:65:9a:ec:8f:49:d7:64:fb:f1:21:06:b9:95:
         b8:01:81:8e:5b:de:0f:f3:f8:19:2f:08:64:90:fc:5d:b0:c0:
         f8:f5:bd:74:0c:dd:0e:5f:51:c4:98:08:b1:82:43:b1:0a:d2:
         e8:3d:b5:84:1f:79:dd:66:cb:14:7e:41:74:8d:d9:95:e1:44:
         1c:4c:b6:72:a4:aa:03:d7:c0:33:55:eb:01:af:f3:ae:01:b4:
         85:0f:76:d5:e2:dd:38:5b:d7:02:10:88:ae:4d:38:03:ff:ad:
         02:00:7d:07:9f:a6:dd:91:76:39:28:2d:a8:b9:d4:ae:78:ab:
         32:e1:60:14:2f:eb:41:2b:90:4f:f1:35:13:a2:ca:5c:69:94:
         9d:2d:16:df:0e:c2:94:25:03:4d:05:9d:57:ad:5e:ee:d8:e1:
         e5:ca:5a:28:b0:3f:38:40:05:2a:ff:85:b2:bd:99:55:b3:dc:
         8e:04:23:0a:85:56:69:35:06:5b:a8:cf:f7:2c:3f:56:13:2c:
         10:22:1c:01:94:58:63:f1:da:9d:de:f0:73:84:85:09:e2:49:
         ad:e5:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----