Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18bb39c2-f781-4a31-8186-8ce4b7fab6c8.roa
File:                     18bb39c2-f781-4a31-8186-8ce4b7fab6c8.roa (raw, json)
Hash identifier:          U1JW4RIHS6eCUvXpSqRxweFdjiCc6aOZ7jLn/KvTklc=
Subject key identifier:   DF:F2:D8:86:A8:BC:1D:A3:34:9B:9D:C6:B1:1C:86:E7:0D:75:3A:8F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       73A99A43E55E96E58E08DC0BD2DCE6A894BA9012
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18bb39c2-f781-4a31-8186-8ce4b7fab6c8.roa
Signing time:             Sun 31 May 2026 01:10:07 +0000
ROA not before:           Sun 31 May 2026 01:10:07 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d033:b000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a9:9a:43:e5:5e:96:e5:8e:08:dc:0b:d2:dc:e6:a8:94:ba:90:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 31 01:10:07 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=16a230c870739e442b9ff7bccacb665ea43b7a4e8fc206a78327f93224be8016, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:d0:92:93:99:83:c0:be:59:92:da:2f:70:
                    43:3b:9d:68:b8:01:80:76:c4:d4:1a:60:c5:ad:9a:
                    e3:a9:68:12:53:27:59:22:34:a4:28:34:d6:af:a1:
                    25:aa:43:c3:c4:27:9c:54:8e:81:56:99:18:9c:12:
                    71:b0:fe:b1:81:53:9e:56:4a:df:51:0f:ba:e0:d5:
                    c1:f7:a6:f3:25:bc:9f:af:08:57:94:3c:bc:75:e6:
                    82:f8:ac:6f:15:e7:56:63:69:de:61:a8:99:df:7e:
                    4b:77:cd:f1:c0:ea:ad:c9:77:85:ec:93:92:b7:af:
                    c5:0c:2d:32:fd:a0:bb:71:cc:f8:e6:96:73:9e:d4:
                    aa:25:19:e7:24:b8:fd:df:39:07:fb:d9:a4:9f:da:
                    5b:54:3b:4d:d0:91:a8:27:f7:05:97:4a:a9:25:f6:
                    c8:e4:54:6b:57:64:c3:f3:01:4c:57:dd:5c:d4:63:
                    40:ab:78:88:eb:96:19:e4:c4:ac:4f:86:91:bf:c1:
                    db:d1:64:7c:ed:20:76:be:ba:0f:84:cf:fa:ed:27:
                    f3:d0:87:97:a2:0b:08:d9:58:48:d3:06:00:40:6f:
                    32:13:f7:35:e8:b5:39:f1:78:d0:2a:d6:1a:9c:fd:
                    a7:18:a0:17:7f:89:4e:17:7f:2c:35:2f:9f:e5:97:
                    e8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F2:D8:86:A8:BC:1D:A3:34:9B:9D:C6:B1:1C:86:E7:0D:75:3A:8F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18bb39c2-f781-4a31-8186-8ce4b7fab6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d033:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:34:1c:f3:1d:81:36:34:3c:b6:40:e2:d8:50:97:92:04:be:
         f9:48:29:0f:a9:fe:ab:0c:b9:50:41:b3:ba:e8:bc:71:57:68:
         d5:5b:bd:b1:b6:4c:34:ae:b5:79:ad:c9:94:a4:e6:a3:03:a4:
         66:bb:e7:49:9b:5b:e6:15:f0:66:78:f1:ad:21:2b:cd:2a:8d:
         cc:f2:46:fd:40:52:f2:43:87:e0:fd:41:46:2c:e1:fa:ea:f0:
         ad:63:4f:8d:50:6a:2c:98:dc:b1:bf:92:ef:1f:9c:d4:ce:ac:
         54:41:93:37:0a:2f:61:08:0f:55:00:ae:60:08:51:3a:e3:2f:
         08:b6:df:d9:da:8d:1d:3e:36:fb:52:47:48:e8:f9:22:01:0f:
         cc:cb:e9:22:d8:23:4a:e4:12:0c:51:79:b5:30:3b:ca:75:04:
         f7:43:69:50:d5:03:92:24:ec:5d:ef:76:b4:c7:33:43:c7:73:
         e0:ae:db:b0:88:9d:1f:d5:e4:0b:af:78:4d:c0:5b:9b:28:17:
         1f:aa:0e:59:f2:e2:5c:97:10:39:2e:00:b9:e8:c2:71:96:b6:
         b8:fd:66:ef:35:c4:b5:91:ce:47:7a:9e:a4:da:71:42:31:2e:
         06:85:56:c0:aa:7a:af:65:2c:60:2b:70:b4:cf:25:41:cb:7e:
         69:e4:2a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----