Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a3909fa-da3d-4cd8-918f-7755304d49d1.roa
File:                     4a3909fa-da3d-4cd8-918f-7755304d49d1.roa (raw, json)
Hash identifier:          V4TRA2K3+RPFsJ4cb4E86ZzkRAxScIsOjYUmpRmFeVs=
Subject key identifier:   05:9E:CC:94:05:E0:92:00:93:79:BF:C0:B0:B7:93:2A:D9:5B:12:D6
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       42A5928E36E22636DABC9B7172F473292654BE5F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a3909fa-da3d-4cd8-918f-7755304d49d1.roa
Signing time:             Sat 28 Feb 2026 05:10:31 +0000
ROA not before:           Sat 28 Feb 2026 05:10:31 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d06f:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a5:92:8e:36:e2:26:36:da:bc:9b:71:72:f4:73:29:26:54:be:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 05:10:31 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=b877426b40bc7061ef6f3c24dc3cde6cb9b6fdce1816cfedcf93ee37890717ea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:54:54:64:76:6e:d9:d9:f2:82:bb:d8:eb:01:
                    ec:a3:23:6c:81:55:df:a2:1f:43:1e:ca:05:55:b8:
                    54:7d:77:8d:f1:68:1e:90:81:ef:39:86:13:8b:df:
                    85:7e:17:b0:9a:53:ea:b0:e5:89:0f:96:f4:19:19:
                    1d:64:bc:ca:e6:65:d0:40:67:30:1e:85:11:b5:56:
                    30:20:a9:9a:2e:f9:bb:44:1b:73:97:98:aa:53:cd:
                    30:cc:e9:b9:b8:82:c4:2a:e2:c1:fd:54:04:bd:c5:
                    b1:33:ee:92:c5:11:46:d8:c5:e9:cb:f1:e2:3c:31:
                    f7:2c:4f:fc:2d:81:9d:d4:71:ac:8a:ba:8e:31:aa:
                    61:08:94:df:1b:cf:ab:17:f4:ca:d7:c3:fa:12:1f:
                    39:6c:79:f2:07:9e:d2:a3:65:aa:ee:33:a2:0c:ff:
                    7a:54:22:6c:18:23:0b:f8:4b:2e:93:30:3c:b6:7b:
                    61:0c:d4:75:9e:f9:be:87:6e:47:4e:ce:77:df:9a:
                    93:cb:06:1d:38:33:64:28:ad:e7:ca:19:d7:78:88:
                    59:d4:c1:b0:bc:23:1b:74:f4:32:92:13:46:7f:96:
                    0b:69:2d:bc:4a:52:8f:ed:af:02:e2:3c:54:1e:cc:
                    ac:d8:cb:af:19:9f:d3:fa:5f:46:07:96:67:cf:76:
                    b4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9E:CC:94:05:E0:92:00:93:79:BF:C0:B0:B7:93:2A:D9:5B:12:D6
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a3909fa-da3d-4cd8-918f-7755304d49d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:05:fb:6f:a5:20:3f:45:cc:9a:02:df:8f:36:52:f2:ce:4e:
         66:f5:a3:3c:68:91:cd:aa:39:13:fd:55:6a:4a:12:9e:12:d0:
         76:b0:fd:f3:73:ce:fa:7f:5b:05:a0:5c:f6:87:f1:3a:7f:15:
         db:96:9d:3a:ce:91:06:07:16:86:23:ba:cb:f3:61:48:ea:70:
         46:3a:95:57:aa:40:6b:fb:98:2f:13:5d:3d:85:cb:a2:7e:b7:
         8a:3e:4a:8a:5d:a7:c2:d9:b8:a3:af:97:4a:02:cf:64:b7:a8:
         03:26:1d:19:15:5d:65:df:68:af:2e:f0:c3:1b:31:3c:51:b7:
         c6:35:6a:8d:d6:51:2f:8f:2a:25:c5:2b:58:68:09:e6:f7:0b:
         16:c8:ab:26:69:8e:41:1e:75:73:a9:88:e3:58:2f:3b:14:f9:
         ca:79:84:61:63:28:69:b7:22:e2:f5:c3:d8:eb:d8:97:b0:85:
         95:29:4a:bc:7b:6c:11:1f:62:d7:95:c0:c1:71:1b:91:94:41:
         9e:f5:68:fe:40:41:d1:b5:74:f0:2b:7a:02:47:cc:f0:10:38:
         3d:18:ed:7f:ce:b0:06:50:f2:28:68:94:1f:67:ea:e0:99:0c:
         7f:d0:46:50:13:e1:76:07:c4:0b:9d:f1:bb:2e:d0:c8:58:b7:
         c4:f0:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----