Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67233a4e-590e-4497-a72c-fe940d42b798.roa
File:                     67233a4e-590e-4497-a72c-fe940d42b798.roa (raw, json)
Hash identifier:          p7j/OrzfkT8m5vW0jW/qCEfHhDLWaKqpfieSoA5QLnw=
Subject key identifier:   DD:4A:56:53:68:19:72:E6:FD:FB:9F:B8:E1:DE:C5:F0:14:6A:22:10
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       473BA02DEF4B3D3D8264EAE0D79EBCFAD76FEFE2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67233a4e-590e-4497-a72c-fe940d42b798.roa
Signing time:             Tue 19 May 2026 05:40:49 +0000
ROA not before:           Tue 19 May 2026 05:40:49 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3b:a0:2d:ef:4b:3d:3d:82:64:ea:e0:d7:9e:bc:fa:d7:6f:ef:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 05:40:49 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=b7f94706bf9705ff9a103ba17d324f155cc0065fdb6ebf86caec2cc8a0843fcd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:12:21:39:8e:56:e7:f3:c3:a8:bf:93:c3:
                    03:3e:e1:c9:71:88:93:db:73:a8:7a:46:04:f0:54:
                    03:5e:94:6f:4c:f5:44:15:87:95:b6:d0:48:3e:93:
                    99:e6:ac:14:79:ef:64:fa:2e:1f:74:73:58:b6:6c:
                    e5:36:16:3f:52:1c:83:33:9e:a0:e0:ef:aa:a2:13:
                    a0:b1:aa:2d:8e:7c:ab:c9:df:7d:2c:5d:06:d0:e5:
                    ad:9f:91:cd:bd:39:b3:5f:fa:a9:86:11:76:04:73:
                    49:f1:d7:1e:e6:4b:b4:f4:3b:74:ab:cf:f1:bb:78:
                    9e:aa:f3:42:89:dd:9d:59:8d:7b:4b:72:f3:93:3a:
                    8b:87:40:e4:f6:05:49:a3:21:65:ca:31:02:a2:1f:
                    60:ee:c4:8b:92:e5:91:84:1e:b5:dd:23:97:65:e7:
                    b3:41:ef:7c:0d:24:20:30:4d:c9:c0:9a:96:cf:dc:
                    a6:bd:31:eb:fa:d4:ee:1b:23:4d:7c:1c:57:6a:87:
                    90:ac:da:1d:e2:0f:0d:f7:34:53:df:9a:63:5c:b4:
                    ee:96:19:64:15:d0:44:b3:d3:dc:8a:87:8b:9d:a1:
                    43:75:10:cd:39:5b:cd:fa:22:b9:c8:1b:a1:e2:f5:
                    81:72:5a:71:d8:5e:2f:f7:b8:82:30:7a:ce:fd:ba:
                    0f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4A:56:53:68:19:72:E6:FD:FB:9F:B8:E1:DE:C5:F0:14:6A:22:10
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67233a4e-590e-4497-a72c-fe940d42b798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:1b:02:72:ab:76:51:76:aa:4c:dc:92:02:8e:e3:bd:fe:21:
         8f:28:b9:ab:b4:1a:6e:59:c6:78:f9:51:d0:05:52:b3:b7:38:
         91:62:de:ab:5f:f4:fc:f6:4b:a7:d2:4f:30:35:f7:99:27:cc:
         62:63:92:3e:1c:01:4d:fc:b0:83:18:56:97:c9:30:59:5a:e4:
         a0:58:ad:98:b4:2f:2e:8a:a6:25:17:21:64:c0:63:7f:23:63:
         a0:1f:46:a0:c3:34:0c:bd:4b:22:8c:28:94:39:d7:a7:5b:d7:
         c7:3d:9d:7e:28:78:28:8c:c3:d0:95:32:fc:51:a2:9f:94:4a:
         6a:49:de:21:ef:0a:5e:0e:1e:cb:cb:9a:4c:39:83:94:9f:74:
         fc:12:f7:87:fd:27:73:a3:66:4c:d1:cd:bb:4f:cd:89:68:ed:
         a6:31:f4:6c:39:3c:f4:3f:14:55:71:9c:e7:a3:9c:b9:51:58:
         0b:6a:be:38:84:9c:4b:db:e4:da:14:4e:27:22:94:5f:dc:65:
         48:d1:d1:42:9c:c1:5c:4b:a5:a1:49:3d:e1:b7:41:8a:4a:d3:
         24:88:df:21:b3:17:e1:ed:c9:0a:3e:c9:03:d8:a6:dc:3d:28:
         d2:4a:02:73:f0:cd:40:88:4e:4c:c0:78:a9:cf:e9:af:bc:0d:
         8f:8a:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----