Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
File:                     0d8c280f-edb2-45fb-9207-8226dc900bb1.roa (raw, json)
Hash identifier:          xwfmXVhnKhRrF3dQpvaRg1Uu5CHghnAMUkoH95NCA4Q=
Subject key identifier:   FE:47:9B:AF:40:30:A7:85:54:68:9D:E9:A9:1D:32:CC:8E:2A:12:45
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0FB2DB253B0780687D4CA8BD2AB119062A2B6E0B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
Signing time:             Sat 28 Feb 2026 05:40:13 +0000
ROA not before:           Sat 28 Feb 2026 05:40:13 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:5080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b2:db:25:3b:07:80:68:7d:4c:a8:bd:2a:b1:19:06:2a:2b:6e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 05:40:13 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=f3fb23cb93662bc880361bf56f1b18b0fd7be422d8016f2b316411ce76b48f68, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:4f:4f:9c:6f:0f:4b:a5:5a:4c:77:dc:0e:
                    52:3c:1c:36:5d:f8:d9:6c:59:3a:3b:d0:5b:8b:7b:
                    34:fa:ab:84:20:de:ee:97:f1:3e:10:23:aa:6d:c3:
                    69:bf:42:ad:2e:e1:0d:53:20:c6:20:00:f9:d9:6f:
                    6b:1a:a6:1e:4a:44:f0:cb:1a:a6:36:74:a9:bf:b9:
                    6b:ce:a5:79:13:70:61:46:9a:48:4e:e4:0d:9b:86:
                    ee:ae:b9:29:e0:a0:85:dc:69:07:77:34:1c:4e:ca:
                    3e:c6:79:76:c0:75:58:a6:3a:71:18:77:fb:34:34:
                    c6:08:48:e8:fa:1a:75:a0:c1:f2:db:fa:2d:48:45:
                    da:67:d1:e1:92:af:15:0b:3c:58:ad:bb:a6:2e:e4:
                    53:12:05:75:39:04:e2:d3:8c:79:d9:cd:3e:fc:9b:
                    47:e0:4b:14:4c:e6:85:1b:b2:e6:dd:b1:a6:af:76:
                    ed:59:32:ad:df:37:7b:30:54:7f:b7:bf:59:a7:48:
                    98:bd:97:06:be:bd:0e:ea:f6:c4:ca:58:a6:01:0e:
                    c3:00:1c:57:a1:38:05:20:20:9e:b6:0c:bb:26:28:
                    50:75:a1:96:8c:2c:3c:68:3b:d4:8c:f1:be:dd:bd:
                    cb:a2:76:99:9b:b2:8e:a6:51:f0:56:2b:7d:8e:f2:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:47:9B:AF:40:30:A7:85:54:68:9D:E9:A9:1D:32:CC:8E:2A:12:45
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:5080::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:8f:d2:44:1f:48:d0:de:bb:dd:e2:0a:1f:10:44:02:5a:10:
         ec:a0:c2:08:77:71:af:d9:9d:a4:b2:38:e1:27:ef:08:0a:41:
         43:a9:b0:b0:25:54:b0:d9:e9:e7:ac:1a:91:ec:10:38:88:6b:
         82:72:95:d3:d1:e3:90:54:26:53:86:3a:7b:56:ce:b6:12:7e:
         1b:c5:ed:fa:b0:29:3f:8e:9b:80:59:d0:f6:26:b6:18:a2:95:
         9e:a7:85:41:68:eb:f0:85:72:e4:96:44:68:5c:1e:4d:8c:5e:
         e9:0b:66:08:ed:8c:2d:c1:fa:42:83:39:55:1a:80:64:e6:40:
         b8:ab:18:51:7b:99:f3:cb:1f:f4:99:07:ff:9a:78:70:60:89:
         d4:1c:bd:a9:ce:ed:54:66:4d:ff:4e:53:84:49:bc:06:a7:d1:
         5f:99:6c:eb:34:a9:22:f0:91:91:ee:b2:cd:73:20:c5:10:e7:
         e6:32:2e:52:6e:27:eb:33:fd:1f:aa:42:66:d7:bf:ef:87:2a:
         76:22:bb:dc:1a:52:dd:70:89:30:61:db:df:f8:b4:6f:a7:02:
         62:8f:75:3b:b7:a7:c5:c2:d7:55:db:3d:ce:7d:ad:0d:01:d1:
         2a:6f:f5:cc:72:b3:75:13:5c:c8:06:b3:89:f2:5d:2f:b9:7f:
         7d:d9:5f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----