Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f3452cc-a2fb-45ca-9617-8db45bd3c546.roa
File:                     7f3452cc-a2fb-45ca-9617-8db45bd3c546.roa (raw, json)
Hash identifier:          cknvC1CxuytA/tv/BcZYFHcsNkosrLTyC6EZv4CfH3U=
Subject key identifier:   F1:0D:EC:9C:E6:D8:9A:85:8F:88:C3:F3:A2:49:2C:43:10:61:32:0A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       18C5A3B172A998FC861E8E9BA78792C5D2D171C1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f3452cc-a2fb-45ca-9617-8db45bd3c546.roa
Signing time:             Sat 25 Jul 2026 00:00:39 +0000
ROA not before:           Sat 25 Jul 2026 00:00:39 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01b::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c5:a3:b1:72:a9:98:fc:86:1e:8e:9b:a7:87:92:c5:d2:d1:71:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 25 00:00:39 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=a71dd48b87790a76b0c06af9bd0bb25b412028519a7cfe00ab9a068224c0074a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:c3:48:bc:59:b3:f0:5d:ae:68:58:81:46:
                    57:f5:d1:32:dc:a6:e3:4a:df:23:03:74:4b:94:4b:
                    70:cf:36:02:08:40:d3:99:26:67:c8:0d:7b:79:a9:
                    39:6e:44:de:ad:ea:c0:2b:94:35:84:1f:36:52:60:
                    e5:ef:93:f7:20:fe:76:39:e8:70:f8:39:b1:89:3a:
                    88:24:0a:12:1f:8d:78:dc:ca:3b:6f:92:2d:7f:c9:
                    25:45:a9:c6:a7:92:d3:c3:3f:66:d8:2b:b1:4a:61:
                    0e:8b:ea:2d:bb:4a:0a:6a:0e:d1:21:c7:63:f8:78:
                    8c:47:92:0f:da:12:18:00:a0:04:8f:89:36:98:17:
                    c7:43:2a:80:bf:dd:52:3b:3c:29:67:52:46:cf:80:
                    1b:6b:6e:d9:58:96:9a:17:29:b1:4e:b6:eb:44:10:
                    70:03:c8:63:c7:fd:83:ba:99:41:8b:54:3c:ef:6c:
                    47:75:1d:12:be:a0:03:c4:17:c7:2c:89:58:f6:9b:
                    44:c9:ba:da:0d:f9:64:da:68:92:38:1c:97:67:40:
                    36:65:e0:73:d2:e0:9e:60:74:2e:fe:4d:11:04:a5:
                    f9:5c:b2:be:57:d1:e0:c1:fd:5c:01:7c:af:80:e4:
                    96:84:23:34:29:df:56:a7:6c:1b:d4:46:a6:66:60:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0D:EC:9C:E6:D8:9A:85:8F:88:C3:F3:A2:49:2C:43:10:61:32:0A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f3452cc-a2fb-45ca-9617-8db45bd3c546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01b::/42

    Signature Algorithm: sha256WithRSAEncryption
         07:ff:b2:90:25:73:a3:d6:ba:9d:76:3e:71:45:c6:0e:0a:e5:
         5d:2a:5e:2c:49:de:21:66:3e:a5:85:fe:45:58:1a:6a:e9:c4:
         93:8e:63:b2:58:6a:da:32:14:79:97:67:ef:7d:f6:6c:18:10:
         99:86:6c:57:84:b3:ff:93:a3:24:5d:8e:6f:df:44:eb:0e:4f:
         cf:bb:85:aa:80:83:6d:78:06:55:db:a5:f2:3b:6a:80:71:9f:
         53:09:49:83:58:49:96:18:f7:97:9e:9a:da:0e:de:1c:3f:19:
         13:cc:26:97:91:97:74:8e:1c:fe:78:85:5c:7e:2b:8d:0b:96:
         7c:65:b6:b5:de:84:ff:8b:b8:23:cd:0f:59:9f:4f:de:21:56:
         6d:96:14:b2:00:86:7d:7f:21:c2:cd:5a:d8:68:4f:d9:90:22:
         cb:e9:16:7e:a7:fc:b1:71:46:e8:a0:84:f1:c3:0c:47:23:4f:
         a3:54:eb:6f:d8:c2:3d:25:97:a1:1e:03:90:8f:a1:f7:e8:25:
         e7:78:6a:52:c4:96:6d:f2:ae:5f:5d:d4:39:b4:15:40:52:ed:
         8e:b3:5d:98:7d:56:84:9d:db:9c:c5:10:e9:8e:59:42:14:ae:
         3c:04:ea:9d:9f:f5:98:ea:aa:ca:04:39:77:f2:38:cb:ba:f3:
         c0:e2:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----