Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff4816c3-2e55-42d8-a2fa-8e7ac7375d0e.roa
File:                     ff4816c3-2e55-42d8-a2fa-8e7ac7375d0e.roa (raw, json)
Hash identifier:          TkpC7EqTbBUQq9qoYwv9ls/GhpfswjmZxTJ0kbEH/gE=
Subject key identifier:   91:49:87:2C:0B:51:F9:B6:65:3C:7D:DA:7F:7F:CF:C8:B8:65:FB:A4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       37C2132F333055F84ED62C723FFFBC6087FE6D69
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff4816c3-2e55-42d8-a2fa-8e7ac7375d0e.roa
Signing time:             Thu 15 Oct 2026 03:30:14 +0000
ROA not before:           Thu 15 Oct 2026 03:30:14 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d074:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c2:13:2f:33:30:55:f8:4e:d6:2c:72:3f:ff:bc:60:87:fe:6d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 15 03:30:14 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=13ea827b465bd9c4218778caa934118bf4fe8b141c8a42f59cc59f3d3c8ababc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:b7:8e:98:97:2b:a1:6d:ef:52:83:ff:2e:
                    51:2e:28:8f:79:eb:2f:b6:ed:2b:5f:ad:a1:e4:01:
                    d1:74:64:78:56:e2:9c:05:a7:42:17:dd:2b:80:57:
                    09:a3:9b:d1:e3:4a:d1:d7:74:89:ed:81:9a:9f:df:
                    5b:1f:4a:be:ee:90:c1:b2:7d:80:00:64:3d:ef:b5:
                    7b:6f:ea:ee:a8:2a:4a:68:ac:67:d3:d8:b3:82:f0:
                    91:3e:89:0e:e5:14:92:2f:e1:9b:39:06:43:cb:94:
                    db:95:f1:84:3f:dd:9d:4d:9f:72:e3:74:de:5f:82:
                    c7:49:2f:44:77:8e:b8:36:c1:11:f8:b5:a8:37:d3:
                    c3:f7:b9:82:c1:4b:cf:29:e8:75:a2:b3:bd:32:e9:
                    54:c6:e5:93:a7:9f:1e:d0:c3:d0:b0:59:8e:c0:33:
                    be:01:5b:83:1f:35:e5:75:8a:8a:4a:97:e2:4f:17:
                    b7:8e:c8:3a:12:f8:d6:6d:2a:b7:b5:c8:4f:68:c7:
                    7b:7b:e6:7b:97:de:37:70:c9:8d:5a:e0:e9:a5:ef:
                    20:e4:a6:83:34:4e:4a:c3:5b:ad:1d:29:f3:c8:c6:
                    8d:68:ec:8a:02:fb:f2:dd:8a:e9:d1:90:f4:3e:bf:
                    fc:6d:b2:1a:bf:09:4d:5f:54:7a:00:6e:61:31:4e:
                    db:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:49:87:2C:0B:51:F9:B6:65:3C:7D:DA:7F:7F:CF:C8:B8:65:FB:A4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff4816c3-2e55-42d8-a2fa-8e7ac7375d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:b4:03:cb:1d:d6:28:69:8e:b0:c1:80:f7:81:88:0c:7c:82:
         c9:c0:40:df:7d:96:58:cc:43:04:24:f6:e9:2a:7a:4e:3a:57:
         95:cb:a7:00:95:69:e9:4e:09:ff:73:cd:58:a2:6a:8e:c6:2a:
         73:04:3b:b9:2a:48:23:6f:be:73:d4:b4:21:8b:57:c6:7e:40:
         e3:fb:9e:1a:7e:d3:d9:7f:50:bf:26:3e:a5:7d:c7:6b:df:e0:
         82:7e:3c:2b:63:26:a5:59:ab:5d:16:ee:68:58:94:c7:41:e8:
         97:7c:ba:c1:d6:02:0b:54:01:e9:34:ea:8f:27:7e:45:bc:dc:
         1d:93:b2:12:c2:38:a9:c6:f3:ea:a3:06:00:b0:8e:87:8a:1b:
         2c:55:01:35:65:3c:84:72:ed:cd:bf:8a:db:30:49:25:43:37:
         58:f1:95:9e:ee:f2:f5:9f:d1:e3:a1:8a:ff:e7:64:1f:fd:4b:
         7d:ee:37:18:61:0e:96:10:68:b6:6c:be:4d:16:93:8a:c7:82:
         01:9e:a9:d6:f9:b8:1f:05:bb:1d:bd:80:3e:1e:2a:a0:ef:04:
         44:a3:3d:7f:63:00:2d:b8:18:30:03:7d:c0:3f:db:89:67:d4:
         4f:a5:9f:0e:52:2b:60:05:a7:a8:18:28:7f:d7:d2:fe:59:ad:
         74:fa:ad:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----