Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376be0fe-aebc-4855-80a4-ea95cf413b51.roa
File:                     376be0fe-aebc-4855-80a4-ea95cf413b51.roa (raw, json)
Hash identifier:          D8ygzCHmOBH4OC/F+La6NIty2gwSD0cWMDecnIFIp8Q=
Subject key identifier:   41:22:80:97:0A:BE:31:B6:D6:6B:5B:E7:D6:E9:1B:6C:A9:4D:5C:73
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       51309C36D4F3558866F919C26F59C7E720B463C2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376be0fe-aebc-4855-80a4-ea95cf413b51.roa
Signing time:             Fri 13 Feb 2026 15:20:52 +0000
ROA not before:           Fri 13 Feb 2026 15:20:52 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d032:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:30:9c:36:d4:f3:55:88:66:f9:19:c2:6f:59:c7:e7:20:b4:63:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 13 15:20:52 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=d0b01acb29304e0481b425a8882abe2c4e36aa62b5ae07f759a719ac43a1d7b0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:d6:d6:0b:27:2b:58:ee:21:ca:2b:17:34:
                    5b:47:90:42:d6:e9:6a:3d:28:b4:e7:10:8e:ff:a0:
                    88:c9:a9:0c:7f:83:9c:54:cf:54:2e:0b:c8:87:5b:
                    78:a3:ef:e2:63:1d:62:81:05:d1:4c:25:1f:a8:aa:
                    c0:bd:d7:cc:f8:a7:d6:3a:9b:da:b0:2a:c2:d6:6c:
                    4c:56:ff:70:83:63:fc:81:e0:9a:cb:35:b3:85:30:
                    62:29:0c:78:ff:0b:f3:34:03:0e:e4:67:fb:2e:56:
                    d1:e1:9b:df:19:ab:1d:e3:fe:db:8f:d3:af:aa:eb:
                    b8:66:dd:b8:bd:9d:a5:46:1b:79:b5:b8:f3:c7:fe:
                    7c:39:6f:63:4b:0d:47:8f:e8:16:60:20:4d:9f:d7:
                    c1:71:28:6d:e6:7c:fe:69:b3:5c:c0:3a:52:66:68:
                    0b:70:bd:f7:d0:8e:a3:3b:70:d4:f8:5c:86:23:cb:
                    a8:90:fb:68:0e:c2:04:85:76:17:2e:0c:97:30:46:
                    8f:3b:27:af:3a:1e:71:23:63:13:ce:68:33:56:ac:
                    49:58:fa:c9:1e:bd:19:85:0a:c4:28:17:7a:21:6d:
                    84:65:3a:5a:8e:10:fd:31:c5:81:53:25:e9:2f:93:
                    c6:3e:ba:a2:05:17:0d:b9:89:93:33:49:0e:ea:60:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:22:80:97:0A:BE:31:B6:D6:6B:5B:E7:D6:E9:1B:6C:A9:4D:5C:73
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376be0fe-aebc-4855-80a4-ea95cf413b51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d032:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:cd:fb:94:64:e0:ff:99:1f:34:4a:f2:0b:4c:56:76:f7:35:
         98:35:75:90:9f:13:cc:aa:26:a8:a9:f7:de:17:61:93:2b:f9:
         bc:a3:cc:39:00:cd:53:e5:18:be:e8:8c:66:77:95:f1:50:ea:
         bb:49:d4:a4:93:96:6f:f9:70:df:bb:6d:59:0c:6b:7e:00:fb:
         6d:0e:07:c6:ef:15:6c:80:0d:63:6c:d3:8d:82:92:39:e4:eb:
         03:e1:ca:42:9e:91:75:52:29:64:b8:dc:b4:e0:c4:cd:60:b6:
         29:b4:54:b0:96:61:72:8c:52:76:09:6e:19:8a:fd:02:1b:84:
         aa:95:81:78:12:88:23:63:e9:a4:7b:96:32:62:47:ff:65:64:
         65:0c:94:14:f5:5c:ba:56:20:73:83:a1:60:81:19:26:07:4c:
         30:81:3a:32:8d:90:4f:1c:58:ff:ea:0d:c5:65:54:5d:0c:1e:
         84:1d:f4:69:8e:5d:b4:5d:22:e5:12:b4:bd:d1:95:98:cd:db:
         a9:a0:cc:9f:c8:f8:97:e6:4c:33:ba:c1:9a:55:fb:7d:94:08:
         c3:86:ad:49:f5:16:7f:6f:08:3d:e7:65:53:f1:ee:36:90:74:
         fc:9e:8c:57:2d:80:c0:10:c1:2b:2a:90:8e:e9:62:9a:25:5d:
         f3:b0:e4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----