Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
File:                     28181159-5695-4944-b901-f84b836b4d8f.roa (raw, json)
Hash identifier:          Yug/5nOsLiO+2v2QuJrlrXozipQ+HQabQ419eOyXqN4=
Subject key identifier:   77:29:0F:63:81:7D:55:48:3D:EB:2C:04:A3:EC:BF:F1:E6:84:17:04
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       074BB6A3B77814B5B86671A4A1551D06DBE73BEF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
Signing time:             Sat 16 May 2026 00:40:07 +0000
ROA not before:           Sat 16 May 2026 00:40:07 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d076:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4b:b6:a3:b7:78:14:b5:b8:66:71:a4:a1:55:1d:06:db:e7:3b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 16 00:40:07 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=7f08a17793302719a93cde63de8292bfca8b4b496fb7b1248a6bff0caeb05bfd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2d:20:68:c4:31:80:f9:65:11:c9:80:3b:93:
                    f9:bc:44:fa:26:b5:5b:b0:1b:a2:5b:cf:04:5b:04:
                    89:f9:63:17:92:c6:13:f6:90:f7:63:cf:a4:24:7d:
                    cc:d6:51:46:69:1f:06:bd:2d:ce:33:fe:02:8b:c3:
                    fd:f4:69:6d:67:f3:2a:b2:90:b9:76:2a:45:b2:55:
                    25:0b:fd:cb:4f:59:fb:38:bc:10:71:ab:09:44:0a:
                    2b:f9:a2:61:15:e1:7a:f9:f8:ce:d6:16:f2:a5:ba:
                    e9:6f:7c:be:e1:76:e7:b5:f1:66:c2:a0:39:1d:ef:
                    f6:23:cb:33:14:b9:8c:0d:6a:b0:76:a5:10:67:ff:
                    e2:c6:0f:15:73:08:31:3d:75:77:94:98:53:cf:38:
                    7a:47:d2:41:ac:68:a7:91:56:1f:ee:5f:df:f7:4a:
                    8d:3b:db:08:b6:d3:2f:dc:55:63:8a:65:ac:6a:53:
                    78:8d:e1:9e:84:4d:ca:c3:6e:5a:a0:f0:53:cf:68:
                    6e:61:04:91:e4:0a:63:e9:6d:53:39:fe:20:82:6e:
                    66:a1:53:97:c8:1c:07:86:87:a8:83:7c:01:7f:dc:
                    88:38:2a:bc:99:47:ce:b0:2b:a8:2d:2a:5f:fd:18:
                    ad:d1:11:bf:e7:9b:95:01:07:3b:01:be:5a:18:3e:
                    b4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:29:0F:63:81:7D:55:48:3D:EB:2C:04:A3:EC:BF:F1:E6:84:17:04
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d076:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:42:52:96:d2:b7:5d:42:ac:fd:e3:48:75:49:79:f0:b9:69:
         f7:18:95:b3:e1:fa:17:31:08:8d:eb:cf:dc:0f:0e:e8:31:d7:
         74:bd:32:2c:e6:a5:b8:11:93:31:fd:b5:9e:be:2f:b0:08:5f:
         55:3d:9c:9e:5a:1b:a1:f6:d4:4f:ed:3f:7f:3a:94:a7:07:53:
         f5:5e:f8:01:2c:78:0b:26:21:df:41:7f:c2:c3:ac:45:87:67:
         2b:3e:b8:ed:3a:85:40:2e:26:6d:5f:11:04:d7:22:ca:82:7d:
         1b:33:2f:4e:57:e5:d4:4c:34:41:16:13:44:01:08:20:1f:30:
         1e:ec:ea:d5:8d:48:c3:ae:1f:e2:bc:47:0d:24:e9:c3:68:20:
         87:10:f4:c6:db:18:09:1b:fc:bd:70:b8:d9:22:aa:72:9b:fe:
         9f:bb:a6:44:9b:02:f1:60:2c:42:25:81:e2:f5:0f:3e:47:8a:
         49:f9:09:bd:5e:11:af:04:90:d5:35:ef:c6:1c:8e:e1:1b:a9:
         f2:44:5a:71:7f:b9:0c:91:ad:06:28:fe:ae:36:84:13:e2:dc:
         10:e0:f2:3b:6c:68:aa:a4:ce:f2:b7:f9:e5:73:f8:f0:96:18:
         91:cd:39:18:11:7b:31:dc:c1:33:80:ab:fb:f9:f6:c1:4d:d3:
         83:22:6e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----