Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
File:                     85151a34-1ac3-4b9b-801b-33bd153ac88d.roa (raw, json)
Hash identifier:          XWp+LAqktTpn9m6QSUKbuOmf4zPs8hr6+9aorEy3TUM=
Subject key identifier:   9E:AF:A6:47:6B:5B:7F:20:38:7A:40:86:01:82:39:BC:28:37:6D:CC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7720AE527FEBFD7BFB2647476E440D1D937EEB3F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
Signing time:             Mon 26 Oct 2026 04:40:19 +0000
ROA not before:           Mon 26 Oct 2026 04:40:19 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d050:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:20:ae:52:7f:eb:fd:7b:fb:26:47:47:6e:44:0d:1d:93:7e:eb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 26 04:40:19 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=5f14b8fc78d82f4d18cb15c0414ed89f762600e23f8df04a9a784619f34b5cf6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:00:aa:e1:39:0f:aa:91:89:c3:f8:33:e1:
                    52:31:88:50:3c:b9:b9:70:76:fe:ff:a8:20:24:35:
                    09:6a:b6:83:a8:2f:f2:e9:b9:16:67:d4:71:41:03:
                    18:9d:4a:f4:c2:f4:97:f1:e9:d3:ca:92:2e:c6:1b:
                    51:ef:d2:b3:73:b7:e5:7d:26:e0:3d:8e:45:f9:4b:
                    c8:bd:63:0b:62:44:b1:6b:ea:f8:61:61:f5:00:0a:
                    ab:48:3e:37:f0:d9:4e:35:13:8d:73:af:69:3b:41:
                    8f:6d:7e:6b:cc:02:2d:fc:e1:5b:8d:57:54:39:5d:
                    48:a8:22:68:4a:e5:18:24:68:40:c8:64:ca:d0:c2:
                    7f:a7:31:84:6c:14:fc:2b:36:aa:59:97:f7:07:66:
                    73:14:af:4d:0e:11:8e:33:77:f5:1b:5c:e7:c0:d1:
                    75:f7:49:8d:69:a9:a0:8e:d3:a4:c8:e6:99:5a:28:
                    32:d0:98:28:3d:1c:c4:e0:cb:7b:69:4d:13:1c:22:
                    38:00:c5:74:5d:24:9c:fd:c2:93:39:06:fc:fb:fb:
                    da:d1:c1:11:b2:e6:29:6a:ca:36:52:70:57:94:36:
                    34:71:50:01:1a:8c:a6:4f:84:d2:be:36:dc:25:da:
                    bd:09:b4:7a:92:96:9d:36:49:15:b3:9b:a2:1a:34:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AF:A6:47:6B:5B:7F:20:38:7A:40:86:01:82:39:BC:28:37:6D:CC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d050:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:74:47:86:36:af:49:4b:7e:5d:1b:d1:23:e9:fb:33:bc:
         44:d7:1e:8d:55:43:7f:5c:a8:3c:86:d1:4c:7b:96:7c:3b:68:
         ed:72:34:50:b3:70:bd:76:c9:c4:7d:c5:64:36:51:e8:1d:48:
         1c:41:88:ea:40:ee:ad:94:58:36:98:3f:16:bb:b2:e4:e1:11:
         17:12:4e:9f:bc:df:6b:bf:92:43:93:b8:a4:3a:f9:cf:32:3d:
         c9:f3:06:1d:55:72:00:07:8a:d9:01:47:c0:85:3f:e8:2b:3b:
         7b:3e:89:f2:51:38:a8:44:b0:55:ea:b4:50:c4:5e:33:02:48:
         8c:59:5b:37:a1:87:14:53:4b:bf:06:fd:ea:6a:e8:88:4f:14:
         66:73:39:8a:0e:81:09:1e:99:36:41:d3:69:87:af:e4:37:6e:
         df:82:ce:01:26:38:1f:6d:ce:88:55:38:d2:0f:f4:91:1e:d6:
         2d:de:9a:1e:f6:79:e4:ef:86:98:02:b9:cf:9f:1e:36:4f:48:
         d8:e2:6c:71:0c:37:fa:a6:8c:e2:ea:42:d6:05:52:be:b1:b3:
         a3:0f:64:23:77:1f:53:55:00:b7:e7:d0:21:d8:c7:f8:f2:ef:
         25:8f:0e:7e:60:61:b0:ab:d4:19:9d:d4:75:4a:b5:2f:54:69:
         c2:43:98:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----