Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a217acb6-25db-4f7f-bed2-0251978424c1.roa
File:                     a217acb6-25db-4f7f-bed2-0251978424c1.roa (raw, json)
Hash identifier:          vZgFjGehEJOIQc4x9c83aZ0Dq/KgCUxQvWSzRCDdhIY=
Subject key identifier:   D7:60:91:B7:4A:25:AA:CB:2B:EC:63:DC:AE:A9:8A:D1:96:DD:90:DF
Certificate issuer:       /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial:       0AB12D3597C188893D6901D0FD6457A189CCA8BE
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a217acb6-25db-4f7f-bed2-0251978424c1.roa
Signing time:             Thu 30 Jul 2026 01:30:56 +0000
ROA not before:           Thu 30 Jul 2026 01:30:56 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc0:840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 20:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b1:2d:35:97:c1:88:89:3d:69:01:d0:fd:64:57:a1:89:cc:a8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
        Validity
            Not Before: Jul 30 01:30:56 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=1735f5e17d9ed5532a7ec16d810369ac3f7f493df5451576e2f567f73d4c826d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:01:3d:ac:a5:7d:fc:cb:cf:62:98:7a:e1:
                    fa:61:a1:91:71:13:cb:0e:4a:2b:1f:3d:2b:d3:12:
                    45:d9:b3:4a:98:dd:f4:f1:d8:8a:9a:0c:5b:93:b2:
                    01:2c:27:6e:ae:62:0b:4a:7f:77:4c:6b:4f:79:1e:
                    f6:e3:5f:d8:e5:bc:a2:7a:2f:55:27:71:bd:9a:4d:
                    25:dd:2d:c0:70:0e:93:1c:ad:50:28:62:60:bd:ea:
                    de:fc:78:20:7f:20:45:c1:1d:79:52:3b:dd:13:34:
                    a3:0a:40:f1:8b:9d:64:bf:36:9b:bc:63:f4:69:70:
                    8e:5b:87:ab:ca:1a:f9:66:e2:99:f0:46:8f:f4:9d:
                    98:0a:51:7e:3e:e9:7b:0e:5a:87:c3:85:3c:ac:fe:
                    06:a4:0a:7b:61:42:31:e2:47:b5:9c:54:5c:9d:57:
                    c3:b0:1a:5e:26:a2:78:99:3e:3f:78:6e:5d:53:13:
                    3b:e4:cc:06:9c:c3:8f:47:8c:d2:31:38:19:93:36:
                    d4:c6:31:c8:5b:f6:77:7b:76:35:70:4c:6a:3c:db:
                    6b:04:a5:8e:b3:e5:15:f8:84:05:e4:d5:99:32:6b:
                    4f:7d:9e:8a:c4:46:90:bb:1f:ac:f1:d2:99:f3:15:
                    f4:89:69:c9:5f:e9:88:07:ae:aa:34:33:b5:ff:9b:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:60:91:B7:4A:25:AA:CB:2B:EC:63:DC:AE:A9:8A:D1:96:DD:90:DF
            X509v3 Authority Key Identifier:
                keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a217acb6-25db-4f7f-bed2-0251978424c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc0:840::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:de:15:ab:4e:88:c7:75:12:26:48:7e:af:17:95:c5:5c:66:
         dc:72:33:c2:4e:38:87:d7:66:1c:d3:14:59:d0:66:95:b9:c8:
         86:c7:5a:e0:8d:fd:6a:36:75:b1:80:58:31:40:41:9d:5d:a8:
         3f:a7:6e:36:1b:09:d1:78:62:cf:65:be:97:70:ad:51:c8:33:
         73:8b:08:d0:f3:d1:9f:2c:17:ea:15:ef:01:df:13:d0:5d:14:
         76:90:ad:f7:15:4a:c9:4f:d4:7e:d3:7b:08:2b:90:f0:d8:de:
         8e:10:c9:4b:36:5b:65:de:6d:fe:a4:81:03:f9:75:5e:9b:34:
         4f:05:99:16:b4:41:13:fa:20:78:55:43:08:79:65:30:bd:a8:
         c9:c8:e6:b2:13:37:d2:85:85:74:d0:75:8b:40:2d:c7:9d:e1:
         45:38:04:7f:8c:74:e7:20:1c:79:e2:6c:54:70:66:cb:0c:7e:
         9e:41:50:cf:18:30:0c:e5:2a:dd:e1:cd:6a:25:55:5b:86:5e:
         29:2f:58:f8:bc:a9:7d:28:7c:d1:7e:ff:64:ca:b1:9c:f3:4c:
         50:fa:4b:ce:3a:cd:01:cf:af:50:e8:1c:f2:c3:34:e8:e0:66:
         a3:f5:fc:03:25:7a:c2:79:6f:e4:aa:7a:98:64:f5:91:69:58:
         c7:b5:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----