Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/730c632c-0510-4eef-8649-b29c7a1d089b.roa
File:                     730c632c-0510-4eef-8649-b29c7a1d089b.roa (raw, json)
Hash identifier:          IFCjdkDmAgFmAJFpy05H8BAdRYTBI9N6/UFkBk3OKPM=
Subject key identifier:   DB:D5:2D:71:0C:FF:36:85:F7:59:7E:61:7D:B1:D5:CC:EA:33:19:6B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       30E387D127CAE18505E05D33D2F861EF43B89589
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/730c632c-0510-4eef-8649-b29c7a1d089b.roa
Signing time:             Sat 28 Feb 2026 05:20:30 +0000
ROA not before:           Sat 28 Feb 2026 05:20:30 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e3:87:d1:27:ca:e1:85:05:e0:5d:33:d2:f8:61:ef:43:b8:95:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 05:20:30 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=3ed8d168c156ff1b93c307b7fe589adea140ee7f574b8241e1e71b239beeb489, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:c4:b1:62:c1:a1:a7:e5:1d:87:99:6a:fc:
                    f4:06:ad:47:f5:9e:ad:21:bb:cd:f6:5a:1f:b8:67:
                    43:5b:ba:c8:7f:5d:67:8e:13:d6:fa:9f:13:20:9f:
                    03:35:e3:6f:b7:7f:d7:e9:b1:7c:19:d8:19:be:08:
                    3c:1d:c4:8e:f9:c2:d1:15:44:c0:6a:4a:b4:c3:89:
                    a9:3a:eb:9d:28:4a:1e:9b:81:7f:4f:c6:eb:40:19:
                    1c:35:4e:15:00:7a:1d:84:59:6f:69:b2:11:71:2d:
                    e3:f4:7e:00:6f:d8:bd:66:cd:47:c5:fd:3f:25:df:
                    78:50:66:b0:f6:55:87:5b:ce:5f:c2:b2:e3:3f:4c:
                    ac:eb:60:c1:b8:f1:9f:1b:f6:3e:d9:f9:7c:80:06:
                    23:1c:f0:33:65:28:11:67:70:cc:a7:68:9c:03:29:
                    25:d4:bd:da:64:7d:84:df:df:af:cf:18:0d:14:25:
                    82:9f:02:f5:4c:2b:99:1c:3d:1f:63:50:e0:97:be:
                    ed:0d:c5:61:ca:c7:6c:bb:51:ae:0e:94:70:6c:e2:
                    d3:1d:ee:b1:85:22:2f:c2:7a:5c:b9:48:1b:62:5e:
                    48:f8:b0:f6:3e:94:54:e6:6c:f5:aa:d3:17:0a:3a:
                    da:10:a5:01:67:6a:cb:4c:c3:5b:e0:50:d2:26:67:
                    c4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D5:2D:71:0C:FF:36:85:F7:59:7E:61:7D:B1:D5:CC:EA:33:19:6B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/730c632c-0510-4eef-8649-b29c7a1d089b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:1a:86:26:bc:a9:a1:c8:6e:77:4d:0e:32:9a:84:18:b5:7c:
         f8:c2:60:e2:ac:b9:e3:2f:75:d7:42:a3:8a:d7:a2:4e:82:70:
         45:00:a2:21:d3:ad:09:b4:98:51:52:7c:ce:62:7b:8a:2e:45:
         df:70:28:7b:5b:7f:25:0b:42:03:ec:51:49:4f:ed:11:b6:25:
         11:80:b2:95:f1:98:62:e6:ae:7e:53:04:68:9f:e5:e1:df:7d:
         ed:f7:cb:ae:82:50:ec:7a:5c:32:8e:ac:ce:6d:74:28:a9:0c:
         a0:b7:99:1b:f8:d7:4e:81:02:a8:21:ba:f1:ba:39:d4:a0:a1:
         53:55:07:0e:c3:d5:e8:5c:5c:e0:fc:01:aa:fb:b7:f0:a8:93:
         ea:bd:18:bf:6d:e8:13:47:84:3c:b0:1c:c5:07:00:58:e9:d7:
         85:50:09:b0:41:fa:53:b2:53:84:fd:b2:6a:72:23:24:55:e5:
         9d:55:82:c5:0d:70:39:25:f2:e0:ed:7f:e3:34:47:32:fe:62:
         fd:b2:f9:d5:bb:4a:0b:a3:c9:68:46:a9:bd:47:9b:b1:27:fd:
         9d:8c:27:c2:90:16:c9:67:84:ec:9f:dc:01:14:1a:bc:54:9d:
         fd:df:81:e8:4d:68:4d:b5:41:06:94:be:d2:65:8b:69:c1:03:
         c4:13:60:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----