Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1172536b-2edc-4ffb-9fca-b111f3d038a9.roa
File:                     1172536b-2edc-4ffb-9fca-b111f3d038a9.roa (raw, json)
Hash identifier:          LJfcIECf0Bs00qVHyFcGG3q1iTJpji/iH4SWaACi+jA=
Subject key identifier:   71:51:44:EB:1C:22:B8:6B:50:9B:8C:9E:B5:8A:72:AC:F6:A9:0D:48
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0A25599818E831EE08E6C8FBA2B7A1FCBFB43F18
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1172536b-2edc-4ffb-9fca-b111f3d038a9.roa
Signing time:             Sat 28 Feb 2026 05:20:12 +0000
ROA not before:           Sat 28 Feb 2026 05:20:12 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        176.32.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:25:59:98:18:e8:31:ee:08:e6:c8:fb:a2:b7:a1:fc:bf:b4:3f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 05:20:12 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=bbdf797f6cac982d95642d095f375a5dc6ff6d58a1c4ba6dc9d30589d2cc3725, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:53:9f:7a:50:9d:d2:72:9f:54:d1:01:5c:
                    9c:d0:ed:83:ea:4c:b7:f1:db:1a:ae:d7:b1:29:53:
                    93:cb:26:ce:ad:3c:e0:17:fb:de:2c:67:93:aa:6c:
                    9f:21:41:d0:11:a9:3e:55:48:1c:16:8a:24:e6:4b:
                    7b:01:cb:e1:67:fe:e5:f5:e1:75:7f:6d:6d:b7:8f:
                    e1:2d:a2:34:cb:44:3f:85:73:af:bd:85:d9:fd:79:
                    90:9c:91:52:18:f0:50:87:fe:48:d7:ea:2e:0e:14:
                    26:06:3b:43:8d:e1:89:b1:a1:11:ff:39:03:96:3c:
                    74:3e:a3:35:7f:21:58:6e:38:6c:2e:59:14:84:38:
                    78:4c:d3:b3:ef:2b:e6:e5:64:ce:18:d1:d8:16:44:
                    2e:78:c0:d5:3b:a9:56:70:bf:27:9b:bb:68:ad:1e:
                    8c:36:c1:29:92:f4:ed:ed:b7:5c:58:2b:ce:79:db:
                    0c:0d:9e:d5:d7:61:47:ce:78:26:b8:25:3d:b7:b5:
                    6f:e1:5b:b3:2b:8d:20:4a:7d:b0:cb:66:67:26:9d:
                    0b:45:b9:29:ad:b7:e9:09:de:b3:10:5b:7f:66:ab:
                    c5:32:4f:86:a9:1f:03:d2:71:2f:4d:80:c1:ef:ec:
                    ff:82:e2:63:64:a5:ed:8d:0a:c1:51:d8:54:aa:d3:
                    fe:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:44:EB:1C:22:B8:6B:50:9B:8C:9E:B5:8A:72:AC:F6:A9:0D:48
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1172536b-2edc-4ffb-9fca-b111f3d038a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.32.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:1f:1a:62:7f:f6:09:ab:a2:49:8e:f1:03:69:9a:09:f9:c0:
         5f:90:dd:8f:51:44:f4:90:17:f1:af:46:0e:8d:96:70:5d:b4:
         7f:ce:21:bb:1a:54:df:37:e3:17:1e:ce:47:75:18:eb:4d:89:
         a2:f4:39:01:12:32:e4:8c:a2:de:05:25:7b:e0:83:d5:7e:d0:
         8d:c0:6e:93:4f:40:ad:68:c3:69:bd:93:a3:0e:8a:cf:c4:6a:
         42:b0:59:9a:0c:ec:32:dc:b7:21:f8:1f:38:ec:18:9d:e9:cb:
         d1:e6:0d:13:a3:dd:ed:d1:f6:69:b7:d3:b9:16:84:ba:b5:e0:
         cc:3c:de:fd:c0:6f:1f:0b:3b:d2:1c:bc:82:65:73:d9:99:4c:
         0d:59:b0:72:ab:33:c2:8f:09:f2:b4:57:d5:00:98:d5:ab:33:
         99:7b:98:35:25:8d:a9:58:82:ba:b2:4d:eb:31:69:94:a3:70:
         05:f8:56:70:89:64:89:72:b7:46:7d:5b:83:7f:2d:a0:63:1e:
         3a:c1:d8:de:a6:11:53:2c:48:9a:5c:ab:58:65:bb:6f:a3:a7:
         d7:1b:72:ff:d2:55:93:a6:5e:1b:56:ab:07:f5:a2:5c:e1:11:
         43:a6:8d:2a:97:b9:47:a5:32:3b:b8:d6:c1:52:8e:6d:76:5a:
         33:2e:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----