Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e678418-1e4d-4843-bded-3c28c17eebf8.roa
File:                     2e678418-1e4d-4843-bded-3c28c17eebf8.roa (raw, json)
Hash identifier:          8ks53bzhCMahkHG3aHn8CSd5JY/WusWcdLMU88NndKQ=
Subject key identifier:   F4:A2:B8:F3:1C:7E:E1:19:77:9F:A4:D0:09:DB:73:13:91:96:21:EA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       348E25AA25224424AA657AB4AF4264CD69CC3E30
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e678418-1e4d-4843-bded-3c28c17eebf8.roa
Signing time:             Mon 27 Jul 2026 03:20:42 +0000
ROA not before:           Mon 27 Jul 2026 03:20:42 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d059:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8e:25:aa:25:22:44:24:aa:65:7a:b4:af:42:64:cd:69:cc:3e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:42 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=455a0113cd02c0d909cb2f3905cedc79a7a09d419282c7907ee60090f1d1cd9e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:91:d7:fc:56:6f:3f:eb:de:b0:cc:5d:1c:
                    bd:ea:5d:fa:17:db:cf:3d:10:6f:18:2a:ae:eb:a9:
                    76:f3:74:8d:32:91:78:53:6f:1d:ec:e9:97:2c:47:
                    f7:19:6a:e5:b7:5e:d3:40:ca:07:10:1a:6d:2a:f8:
                    eb:21:ef:39:74:02:80:8e:4b:22:c5:7f:12:9f:8a:
                    3f:ec:44:2a:df:23:be:5e:18:bd:48:f2:0f:17:5f:
                    32:42:68:f0:5f:b6:4d:4e:be:1e:6e:ee:86:57:fe:
                    af:30:6d:42:9c:6e:18:df:6b:4e:64:cf:92:18:f9:
                    63:b6:f5:f6:5f:e4:5c:a1:09:34:6d:f0:e7:da:ae:
                    02:fe:c3:76:01:4c:9b:1f:cf:1f:e0:f4:28:5a:54:
                    d7:8f:b2:75:3c:e7:58:18:2b:51:76:2b:e4:6b:5f:
                    13:5e:fe:db:11:36:24:90:49:82:36:56:dc:54:0e:
                    75:18:30:27:b2:f5:62:53:69:27:c3:c1:ed:8f:e0:
                    76:92:dc:92:31:29:4b:48:76:c4:a8:1b:46:fe:16:
                    c1:99:9a:9f:6a:f8:d5:66:2d:9b:a9:9c:3a:ac:74:
                    ff:43:ad:73:6f:7c:33:34:61:81:4d:26:bb:fe:1f:
                    80:ad:f9:6b:bf:52:d0:9d:8a:fd:16:af:1d:86:4a:
                    43:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A2:B8:F3:1C:7E:E1:19:77:9F:A4:D0:09:DB:73:13:91:96:21:EA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e678418-1e4d-4843-bded-3c28c17eebf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:b8:c4:31:fa:9f:85:8e:6d:e3:b5:bf:4e:77:15:c0:d1:
         9f:59:9d:53:74:85:81:45:1b:0d:ea:06:0c:fc:de:85:a9:b2:
         31:ee:7b:b6:fb:08:bd:80:e4:78:40:9a:b2:66:65:71:41:c1:
         d2:c5:d4:f7:88:61:c1:f3:9e:71:8f:7e:b5:79:88:01:c6:a1:
         c4:52:ac:13:48:f4:0a:bc:f4:2e:35:c3:42:bb:70:ea:cb:df:
         fb:92:fc:75:8e:62:42:ce:27:08:6e:9a:7c:4e:94:e5:f8:f2:
         f2:a2:77:de:58:dc:1c:ee:68:07:9b:5d:e7:66:5f:17:76:26:
         67:88:92:0c:1d:7f:37:c6:cf:e7:85:5e:82:2f:8d:4c:cb:dc:
         5c:00:07:90:4c:65:f1:ed:18:2e:79:0a:b3:59:38:37:2f:8b:
         04:5a:63:ca:d3:e6:1a:45:f8:5e:63:a6:d8:1d:5f:c1:75:69:
         a2:a1:ab:a0:b3:7a:2c:ea:dd:a5:e4:f3:e3:3b:e1:df:9d:b9:
         bd:97:c2:bc:3d:e7:60:2b:15:e0:28:5b:87:9f:b6:6d:20:50:
         4e:e9:6a:b8:05:ca:27:b6:b3:29:58:a3:43:c2:35:d5:1d:7f:
         6e:86:f0:6a:2f:63:80:16:43:2f:d0:1b:c6:8f:f6:7b:b5:24:
         88:de:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----