Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757087af-5baf-4a2f-a9ec-dbadb47313e2.roa
File:                     757087af-5baf-4a2f-a9ec-dbadb47313e2.roa (raw, json)
Hash identifier:          9S5pziYG6U36blpsPjhnDbSyV2uOWDLCFtTHRtBl+dQ=
Subject key identifier:   3E:0C:E9:1A:C3:D0:1E:60:8A:43:84:03:DB:92:7C:B8:2C:AD:AF:DB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       12D228CC0E67EB11FE21808CC22257231B51EF21
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757087af-5baf-4a2f-a9ec-dbadb47313e2.roa
Signing time:             Sat 28 Feb 2026 05:20:12 +0000
ROA not before:           Sat 28 Feb 2026 05:20:12 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:50c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d2:28:cc:0e:67:eb:11:fe:21:80:8c:c2:22:57:23:1b:51:ef:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 05:20:12 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=7943cff32e6cd7bd7bb78340f94fb31ae0bf6685f9ba01ab1faba3b6b498aa00, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f4:b3:85:01:d7:bf:8f:e1:e6:0c:70:23:02:
                    15:a1:12:db:42:50:4a:9c:92:b1:b8:7b:4f:bc:20:
                    1d:b2:10:ad:dc:c1:db:23:76:fc:46:1d:41:48:4e:
                    74:1a:55:c9:9b:ba:7b:03:91:16:ce:6b:be:43:e7:
                    36:1d:12:2a:9c:a0:b1:d4:44:f3:b1:cd:12:8f:dc:
                    53:7b:01:b2:90:12:46:01:55:7e:e2:91:5e:77:90:
                    f5:ae:e4:43:23:74:6c:d2:21:ae:96:29:f2:06:2f:
                    27:b1:3d:e6:46:79:23:ce:a1:c4:48:eb:9e:98:91:
                    93:ef:3e:c0:db:cd:26:f4:18:cf:1b:55:e0:2e:bf:
                    71:2f:80:cb:26:0e:12:46:fe:72:6d:f5:9e:0a:cf:
                    3b:fd:6e:d9:47:15:0d:8b:6a:a0:5c:72:fb:4f:3b:
                    da:d6:1f:b9:e2:4e:1a:53:06:4b:c7:89:f0:30:51:
                    20:ed:dd:ef:6d:a2:c9:34:4b:06:43:75:c9:d2:2c:
                    24:a9:26:7b:00:53:4d:ef:54:42:c3:90:a4:77:0f:
                    27:89:1e:65:cf:30:e7:08:e1:df:d9:02:13:b8:64:
                    32:21:c0:4d:b7:a0:af:be:96:b5:6a:5e:eb:b5:8d:
                    df:e5:2f:0a:67:4a:b8:6e:f1:d6:98:0a:04:07:46:
                    c0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0C:E9:1A:C3:D0:1E:60:8A:43:84:03:DB:92:7C:B8:2C:AD:AF:DB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757087af-5baf-4a2f-a9ec-dbadb47313e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:50c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:c2:a8:29:e1:20:9e:a0:1d:53:46:b8:c3:9b:a9:84:e5:
         f2:e5:81:a9:51:49:22:ce:cf:46:c1:7c:4d:d7:e7:e2:49:3c:
         92:2b:f6:30:1d:78:16:e9:af:c9:3d:2a:34:a1:3e:04:85:bd:
         fe:0c:61:1c:fd:d9:95:d6:15:22:e5:0a:e1:08:98:79:6a:9d:
         f0:4a:15:be:76:53:34:cf:f6:2d:61:5e:aa:2f:b0:68:73:82:
         f5:a0:b7:e5:3c:ee:73:e2:3b:b4:ec:5d:5b:14:b9:7a:10:2f:
         1b:71:e4:97:62:60:a4:00:19:32:ce:0c:14:44:5e:c9:84:eb:
         12:ef:6c:57:5e:95:a0:cf:77:60:e5:dc:18:33:af:03:12:de:
         28:a2:49:e1:1f:a1:0f:e9:a6:1d:96:44:ca:57:cf:f3:82:a7:
         b2:ad:bd:96:78:90:56:df:10:fd:ce:06:36:57:02:bc:e2:90:
         6b:bc:1e:65:f7:a1:6e:ae:21:6e:62:a8:7b:4d:4e:03:a6:35:
         ed:31:23:04:cd:4a:61:68:82:1d:b8:85:67:b5:4f:b7:6c:05:
         85:ee:f3:41:0a:af:f3:35:03:b3:a1:56:17:08:19:ac:3c:13:
         74:8f:41:8e:f6:9d:bf:44:12:f4:9f:2b:bf:bd:3c:23:ca:ee:
         72:23:45:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----