Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa
File:                     2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa (raw, json)
Hash identifier:          AdySSBpf0VVRzBhobqlgOudUP6ezgvd/w+pv/incpH4=
Subject key identifier:   FD:7E:6A:98:2C:CC:B7:4E:80:40:3E:97:7A:E0:40:D3:21:B9:FA:E4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2522A7E94B83DE61C809C61DACC06098F0722258
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa
Signing time:             Fri 15 May 2026 03:50:09 +0000
ROA not before:           Fri 15 May 2026 03:50:09 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06c:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:22:a7:e9:4b:83:de:61:c8:09:c6:1d:ac:c0:60:98:f0:72:22:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 15 03:50:09 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=59eea683460e69daeac03702ed7b5721068a18e3114734b408cd73d7c8db972a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:8f:5b:e4:e6:49:43:f2:d0:ae:fe:7f:6b:
                    fc:44:ef:db:d0:33:43:ca:52:0b:2e:c6:d4:ed:c2:
                    47:8f:84:f7:b8:d1:be:49:e2:9d:ec:d4:7c:bb:d6:
                    ad:f1:85:3c:20:97:2c:e2:cd:a8:3d:6c:70:ae:ce:
                    1e:bf:88:f2:97:92:d4:2e:6f:d4:75:63:e0:2a:71:
                    67:0a:87:1a:8c:df:8a:f4:2c:26:a5:52:1d:ae:bf:
                    74:65:9d:ff:c6:12:e1:3a:38:c3:5c:c9:3a:3e:3b:
                    26:2c:7d:35:22:aa:2d:08:02:36:03:d2:61:d7:00:
                    a3:84:db:c1:fc:1e:67:9f:16:51:c1:de:e8:a1:15:
                    38:a2:36:38:89:1b:80:c9:be:38:3f:43:cd:73:50:
                    cf:fc:47:1f:6b:bb:67:6b:15:e5:17:c1:3d:f5:16:
                    66:3a:61:7d:6a:c1:dc:6f:f4:25:6b:4f:54:18:d3:
                    f5:ab:22:fa:0e:d4:f8:3a:5f:ca:09:ad:57:15:53:
                    26:1c:62:bb:b7:37:a4:5d:e5:5c:34:eb:7e:d2:37:
                    dd:2a:79:c1:b6:fe:3c:f9:c0:c5:26:43:c9:0c:2e:
                    9c:9f:29:66:77:69:e2:89:85:c6:10:d1:ef:5a:11:
                    3b:e0:56:76:8b:e6:10:6c:c6:a8:ec:e7:9d:d8:70:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7E:6A:98:2C:CC:B7:4E:80:40:3E:97:7A:E0:40:D3:21:B9:FA:E4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06c:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:d9:32:b1:72:83:db:e8:bc:ad:84:c6:7f:fd:93:d8:af:59:
         63:c2:c4:b1:3b:f5:b8:70:7f:9b:a2:13:03:7e:52:8d:02:72:
         1b:95:5e:50:e7:d0:16:81:15:c7:54:d0:b9:e2:24:f9:b2:3d:
         b0:e2:82:1c:ef:ae:b4:d6:3b:b5:de:5a:c4:1e:53:75:4b:62:
         0f:d8:a8:f3:64:1d:05:47:46:4d:c9:79:48:ef:49:52:f4:85:
         0e:9f:d4:cd:04:f4:89:db:b4:5e:df:96:38:1f:65:7a:39:ed:
         82:21:7a:de:7d:98:8d:88:a8:5c:ef:fb:a7:ad:53:74:80:3d:
         1b:71:f4:e1:2d:73:42:91:73:a8:7d:7f:f8:71:e5:ce:0e:db:
         ef:93:fe:c7:0a:ad:51:f4:4a:69:bb:7c:65:ee:58:b0:81:82:
         7b:d3:fc:b1:15:02:bd:8c:9d:b2:1e:89:a4:63:cf:61:f0:e8:
         28:a9:6e:60:6b:30:b6:02:bb:7b:61:8e:5d:3b:03:49:5b:e2:
         a4:f4:65:80:0f:98:fd:55:94:6d:9c:88:b6:69:56:8e:23:c0:
         c6:f7:21:2c:78:80:5d:32:34:37:52:4f:11:19:ab:9c:61:74:
         78:7f:98:bd:85:e0:38:29:8a:d9:0d:a3:c1:e8:a9:d6:14:51:
         cb:67:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----