Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fad76837-d6e1-4885-9781-3088c0b0c06c.roa
File:                     fad76837-d6e1-4885-9781-3088c0b0c06c.roa (raw, json)
Hash identifier:          l7pPbLFZgE+HMzmJDpmZeO+DH9gJ21dWzN7IZV0vZJE=
Subject key identifier:   73:D5:82:5F:14:2B:8E:46:BA:F7:AC:C2:57:A0:38:04:55:29:62:FF
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       027DC6C8B319BBBAF793C9E549931EC08CAFF3F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fad76837-d6e1-4885-9781-3088c0b0c06c.roa
Signing time:             Mon 26 Oct 2026 05:21:01 +0000
ROA not before:           Mon 26 Oct 2026 05:21:01 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d038:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7d:c6:c8:b3:19:bb:ba:f7:93:c9:e5:49:93:1e:c0:8c:af:f3:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 05:21:01 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=f06002c24ced46b3ebbfcaafb013df4d42a3d68ef46b8af5bd40b36cf6a07dcc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:cc:6f:a3:05:78:bc:b6:c2:4a:fa:60:2c:
                    64:d1:c1:90:3f:ea:e7:78:0e:89:ec:00:0e:b0:2e:
                    8e:db:29:e3:8c:69:64:30:d3:62:5f:ec:61:71:f7:
                    f5:ba:69:b6:83:d1:03:7a:d2:ac:ed:9f:2b:16:20:
                    c0:5d:44:ef:94:a1:4f:d7:4a:e4:af:24:29:94:45:
                    ca:55:34:85:db:f7:36:8f:7b:02:e3:56:89:fc:1c:
                    52:41:9c:0c:cb:cd:64:3c:ac:28:6e:5c:9e:46:07:
                    f5:4b:34:28:b6:67:11:8c:0b:2c:7a:2f:d1:7d:3e:
                    3b:25:8c:cc:12:57:6a:b1:dd:71:d5:ce:73:92:21:
                    e8:b7:c0:7e:7c:8e:75:d4:8c:0b:7b:05:61:48:65:
                    25:04:97:0c:9a:0d:8d:58:d3:8c:6c:92:bd:8c:13:
                    b4:c1:b1:e8:4d:7f:e3:8b:e3:ec:35:8a:06:03:cd:
                    5a:64:5f:39:24:cc:3d:5a:6b:13:1a:59:57:23:5d:
                    46:6b:f9:2b:57:d2:62:88:3e:15:ae:5d:8d:8d:34:
                    0d:02:26:04:fe:b9:c7:93:95:a8:3b:08:51:ee:81:
                    9d:bf:1f:86:79:ea:83:77:29:0f:0d:64:df:f7:3e:
                    c4:d5:99:d6:79:0a:3d:ca:ba:05:87:dc:42:30:0e:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D5:82:5F:14:2B:8E:46:BA:F7:AC:C2:57:A0:38:04:55:29:62:FF
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fad76837-d6e1-4885-9781-3088c0b0c06c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d038:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:65:ef:64:6a:08:31:37:99:76:f6:87:89:d4:a4:c1:d2:f2:
         8f:2d:c2:2b:8e:fc:dd:1e:7e:86:c5:ca:a5:40:a2:ee:52:a9:
         e1:75:5f:eb:50:51:01:31:23:6d:12:82:26:09:24:49:e4:0d:
         f9:ca:76:0c:9a:75:03:d0:af:5d:f9:93:93:8b:90:3b:c2:9a:
         87:f0:a9:22:b4:e4:28:51:84:01:2c:24:62:f7:12:bc:6e:d8:
         08:37:d3:e3:7e:65:47:e9:7c:68:f5:cb:d1:00:b0:00:e3:26:
         98:55:24:be:cf:15:5a:dd:da:17:d7:bd:7f:5e:b3:9c:45:4a:
         63:da:a2:f0:d1:63:76:5f:a4:1a:9f:6b:3b:ac:ea:a4:9c:6d:
         ef:47:49:e5:d6:81:20:2d:d7:20:7e:ce:a6:db:d3:aa:06:92:
         24:ef:f5:d7:46:24:31:0d:5d:ba:c6:f2:e6:e5:3f:60:3e:70:
         ea:10:10:ae:47:c6:25:45:56:b6:20:05:81:13:f4:ba:24:5b:
         6b:8f:c3:4d:03:e0:0c:29:f6:c7:25:09:ec:ff:fc:54:1a:9c:
         56:f9:da:73:1d:d4:af:b9:8b:7a:33:37:f7:1c:33:cf:08:72:
         ed:e7:09:a1:b9:98:27:21:58:5b:d6:7b:2e:c4:b8:e5:b9:d6:
         f5:23:29:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----