Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/130bb518-ca36-43ed-b8dd-0345f5c1b3b1.roa
File:                     130bb518-ca36-43ed-b8dd-0345f5c1b3b1.roa (raw, json)
Hash identifier:          9FL3jjieS6Rei5EtE1um0SYEZLS1qYLyIJOevpEXt4s=
Subject key identifier:   46:ED:D5:92:B2:A2:42:A0:DE:2E:F5:71:65:A2:52:24:AA:60:B0:9C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       107A720258ABBFD1F2E05376F92B04AAAF30EC60
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/130bb518-ca36-43ed-b8dd-0345f5c1b3b1.roa
Signing time:             Mon 27 Jul 2026 03:30:40 +0000
ROA not before:           Mon 27 Jul 2026 03:30:40 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d059:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7a:72:02:58:ab:bf:d1:f2:e0:53:76:f9:2b:04:aa:af:30:ec:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:30:40 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=b156e328e3400360a1679c8c128ea10b7f6221819bfac34eccad1a4c64fbef63, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:e3:fd:8b:3d:56:60:59:b4:68:c0:bd:89:
                    04:73:90:cb:7f:77:f2:38:90:96:d5:56:80:b4:8e:
                    bc:4d:ac:88:17:7f:6b:02:82:5f:5b:1e:05:eb:d3:
                    f6:18:00:41:d7:b5:d7:c2:40:94:42:79:1b:17:96:
                    0a:6c:80:85:cc:d9:89:2b:3e:1f:44:6e:da:5a:be:
                    77:01:e5:b4:b8:d6:3e:5c:a0:68:29:7e:ba:af:43:
                    6f:75:19:de:3f:aa:83:78:82:33:58:41:a8:e3:cf:
                    8d:b6:d4:18:65:37:6d:86:bf:e9:38:69:3a:3f:82:
                    52:f9:7b:30:28:a5:a5:bc:24:ab:62:18:03:6a:ce:
                    7d:5a:1c:5b:b8:27:2d:9c:b0:68:40:99:69:30:39:
                    a7:e8:e5:2d:1d:7a:e0:56:63:c3:0d:7d:37:24:a4:
                    dc:fa:1c:f3:19:7e:ef:b6:fb:54:66:22:32:8a:2b:
                    0b:59:33:cf:f5:d5:ac:fe:31:e2:db:df:4f:9a:94:
                    62:24:81:bf:1f:cc:3e:7a:2d:11:dd:11:44:7b:44:
                    f9:44:c0:63:f4:e8:6b:76:8d:b9:48:6a:e2:94:bd:
                    b1:3d:32:40:e9:c6:cc:44:c2:d0:3a:47:b4:f0:a7:
                    e2:04:84:2a:d7:d3:90:6e:19:30:e2:9f:80:de:36:
                    60:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:ED:D5:92:B2:A2:42:A0:DE:2E:F5:71:65:A2:52:24:AA:60:B0:9C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/130bb518-ca36-43ed-b8dd-0345f5c1b3b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:04:ec:ef:11:c8:99:43:5c:36:1a:37:5f:ad:40:bb:94:10:
         53:49:c7:04:8f:b6:67:0b:c0:28:d5:22:8c:1b:20:8e:d2:5b:
         d9:0c:65:eb:ad:36:ae:e5:c2:a0:dc:19:15:f4:1a:39:0e:1f:
         99:dc:51:92:69:94:eb:a4:ba:eb:ef:86:ac:22:49:cb:57:50:
         8f:33:4c:b1:5b:05:fe:07:a4:97:36:89:90:c9:2f:ad:b8:7a:
         78:69:28:9a:6e:05:64:1c:86:0c:ad:9e:e4:7d:4f:63:dc:83:
         55:69:76:64:91:3a:8e:1e:04:6e:02:65:e2:02:7d:0b:5b:67:
         fb:6a:c7:9e:1e:4f:01:25:35:29:25:36:11:55:c7:2c:a2:68:
         ab:bb:8e:8c:3a:ad:7a:80:18:93:80:85:22:f3:58:10:e4:04:
         d8:05:30:9e:76:38:45:7d:51:68:f3:81:f4:b9:9e:f8:08:d4:
         b9:d3:41:b6:a1:67:99:9a:f0:e9:5e:9e:05:45:1f:c4:4d:9a:
         02:d1:e0:b5:86:d2:e8:5f:56:df:0a:f7:79:8d:76:c8:f9:83:
         4c:3f:33:00:a8:c1:d4:8d:97:c7:ab:ad:5f:79:c7:12:b2:10:
         cf:a8:98:d1:49:ca:c5:f5:f5:fe:5f:fb:77:6f:e8:56:11:b6:
         4f:eb:01:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----