Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04c34ea1-cddb-45aa-979f-bfe1fa0995af.roa
File:                     04c34ea1-cddb-45aa-979f-bfe1fa0995af.roa (raw, json)
Hash identifier:          QY7BUK2Vjy0HUVfuotO8PR/mM6kHnwXfMsI2iVnr43M=
Subject key identifier:   31:FA:45:75:E2:F7:D2:25:5C:45:56:3F:E9:1B:FD:A3:3F:A4:05:9D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       53391482DD918A63DED022D55430DC7A4A2EEA03
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04c34ea1-cddb-45aa-979f-bfe1fa0995af.roa
Signing time:             Fri 13 Feb 2026 15:20:48 +0000
ROA not before:           Fri 13 Feb 2026 15:20:48 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:39:14:82:dd:91:8a:63:de:d0:22:d5:54:30:dc:7a:4a:2e:ea:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 13 15:20:48 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=a47f420ef6437ae7b4dee6afc13e8871f95a887c3098bab4e5ad4e19077c8573, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:61:91:92:36:61:49:f7:5e:1d:5d:55:9a:0d:
                    b4:f9:53:a5:18:44:c3:a0:8f:2c:6b:9c:e2:97:c8:
                    01:97:6f:a2:21:4d:a9:89:99:c3:cc:68:61:b6:33:
                    7d:4b:c6:a0:7a:4a:0a:0e:ca:ed:03:9d:89:cb:24:
                    4e:c4:2d:d5:8a:b7:1d:6d:41:0a:7f:d5:59:4b:d3:
                    49:7e:4d:5c:ff:f0:7f:df:fe:df:16:a0:66:92:31:
                    20:af:e2:6b:ee:0d:b6:c9:01:8d:26:6f:16:10:2a:
                    fb:58:c0:3f:49:3d:40:f3:ea:cd:3d:3b:4e:34:16:
                    36:67:13:a8:ad:03:87:36:d9:9b:2b:8a:80:24:6b:
                    49:20:22:3a:57:73:de:f8:6a:4d:0f:65:8f:24:90:
                    3b:7f:16:44:15:62:ab:ce:ac:72:5a:ee:ea:32:77:
                    c1:38:c9:b7:05:7b:72:c3:e0:86:55:c6:10:1b:a9:
                    ac:fa:0b:e2:87:08:c0:e5:10:9e:06:76:91:46:33:
                    de:2e:21:fd:e7:67:d4:82:37:56:17:84:50:46:e9:
                    db:73:5b:0a:d3:fa:46:13:68:f0:cd:2b:19:7f:49:
                    f1:4b:ea:70:82:74:51:a2:e3:80:4b:4b:e4:2d:59:
                    6c:c4:de:0a:70:b3:34:5c:c5:e1:10:f5:48:ef:a3:
                    d6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FA:45:75:E2:F7:D2:25:5C:45:56:3F:E9:1B:FD:A3:3F:A4:05:9D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04c34ea1-cddb-45aa-979f-bfe1fa0995af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:13:45:61:0f:4d:69:a9:75:a0:6e:be:b1:c6:71:e9:2c:88:
         3e:d8:05:bb:99:71:94:fb:b7:b7:a0:a8:9d:90:3d:dd:80:46:
         70:02:ba:6b:16:f0:bd:c8:a4:5e:60:3a:1e:2e:5d:70:19:59:
         66:22:42:7e:e2:13:b0:38:d6:7d:c9:43:df:3f:b2:eb:fa:c1:
         5c:e9:db:0f:8f:22:49:c0:90:32:66:3d:9a:30:4e:55:7d:0a:
         93:7e:ba:2a:ea:45:2b:51:c6:34:a2:1b:6c:6c:b9:31:13:87:
         06:a3:f7:1e:49:7d:72:5c:24:41:7d:34:0d:35:5a:a4:80:30:
         75:20:87:e1:7f:52:44:20:56:08:b4:55:ae:89:87:5b:d1:c6:
         bd:27:27:1e:01:af:22:6d:e4:fe:3c:1d:47:50:35:c7:92:31:
         fd:6b:5f:cd:2b:34:b7:42:ff:8d:15:22:f9:9e:fc:8e:31:7d:
         35:d3:dc:bd:a8:cd:61:40:e7:f1:62:16:4b:f1:03:9e:09:76:
         a9:1c:2e:76:e2:46:75:b3:3a:0d:88:bd:74:99:f4:cd:cc:ad:
         de:68:a4:0e:a9:ba:16:03:e9:6e:80:43:a7:fc:0d:f3:66:e7:
         1b:6f:f2:12:29:2b:5c:02:69:dc:4f:f4:87:65:45:78:a4:3d:
         3d:82:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----