Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8615f258-46a8-450c-972c-84b27581bb43.roa
File:                     8615f258-46a8-450c-972c-84b27581bb43.roa (raw, json)
Hash identifier:          7g1N9YWu2LCEvxLxCEVvs3kVcgOQziojQFGpzJBzB9k=
Subject key identifier:   F0:17:3C:13:B9:F9:F2:5A:6F:12:0F:33:E1:B4:9D:67:AB:3E:C9:E3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4014F24A0BE42C0C2B5B0A87A69338D606CF385D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8615f258-46a8-450c-972c-84b27581bb43.roa
Signing time:             Tue 19 May 2026 04:40:09 +0000
ROA not before:           Tue 19 May 2026 04:40:09 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d018::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:14:f2:4a:0b:e4:2c:0c:2b:5b:0a:87:a6:93:38:d6:06:cf:38:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 04:40:09 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=318503ce3782b2dedd4c83f2bd2d68dc72261609011d1603cb59ffbf82dfe948, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:e5:9e:73:7e:c2:b9:ff:7e:e7:d7:c6:19:
                    e7:58:db:a3:69:10:6a:94:ab:b2:0b:c3:a6:8f:bf:
                    fd:df:78:8c:35:bd:44:cf:bf:5c:f1:a1:11:37:79:
                    41:e0:e9:4f:df:55:9d:bf:73:cc:a5:f5:af:93:cf:
                    53:57:78:9b:68:00:54:21:90:82:32:27:b6:5e:d0:
                    22:f0:22:b1:a0:5a:24:5d:fd:9e:37:55:71:f2:74:
                    6f:6c:6d:d4:01:b2:ba:9a:45:d0:a7:28:8d:8a:a4:
                    be:e8:09:c1:08:48:8c:58:6c:b3:53:07:4b:8d:f7:
                    26:73:d8:de:a6:f4:61:d1:dd:34:58:b1:54:71:c3:
                    40:ae:b8:82:3c:a2:8c:c9:7a:84:2d:c1:a5:7f:09:
                    c9:ec:14:d7:0e:01:32:f3:e8:f1:fb:87:12:67:ec:
                    83:b6:7c:40:50:05:a1:a3:f8:e2:5f:6c:75:72:a5:
                    2a:05:d7:6b:82:77:1e:7e:30:2d:8a:67:15:93:25:
                    f0:50:81:ad:4c:e8:b5:b5:3b:db:fd:e4:a5:42:c3:
                    e4:c6:1e:30:1a:49:84:16:44:03:a9:43:d8:cb:3d:
                    2b:b1:38:b4:2c:35:49:5e:2b:49:c5:bf:bc:94:dd:
                    4a:82:ef:af:e8:89:f8:f7:14:c1:62:6c:f7:a9:9b:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:17:3C:13:B9:F9:F2:5A:6F:12:0F:33:E1:B4:9D:67:AB:3E:C9:E3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8615f258-46a8-450c-972c-84b27581bb43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d018::/36

    Signature Algorithm: sha256WithRSAEncryption
         ba:1e:6c:bb:c0:af:e7:76:f9:fa:e4:17:3f:7f:f1:d0:4a:68:
         8d:ca:a3:03:d6:4b:eb:8a:60:5f:d2:50:39:4a:30:b3:76:a0:
         ed:50:d9:49:a4:da:fc:29:b0:95:fb:fc:88:99:64:ae:cf:16:
         c1:ca:89:1b:86:6e:d2:7f:f0:c5:de:86:23:4f:51:a4:0d:98:
         ad:96:de:eb:e0:22:1b:d5:3b:ec:de:44:c4:d4:2b:14:c6:03:
         80:ff:b4:71:2d:5f:67:b3:8a:5d:de:79:8f:b6:e1:fe:90:07:
         e9:13:f1:38:e6:c7:f6:96:12:c4:4b:da:da:e4:d2:d8:37:9e:
         f3:58:e4:6a:75:5d:ff:f7:c7:43:b9:4d:11:e6:8f:9a:42:af:
         93:1c:e2:ed:c9:7d:0d:00:cb:5b:1e:e7:0c:af:1c:eb:95:07:
         40:b5:61:2d:16:b2:0c:02:9b:5b:0b:c8:06:f0:bd:c1:92:b2:
         0b:19:c2:82:53:01:91:11:d0:14:81:65:23:b3:0e:39:bf:f5:
         43:2c:7c:c6:67:f1:4d:08:df:e3:fc:da:9f:4d:de:98:9e:f8:
         27:96:53:99:58:61:4f:cd:5d:1e:28:2a:c3:3a:b1:22:e9:c7:
         ae:4c:19:e0:72:bd:bf:79:30:bb:e7:d6:f4:92:7c:65:49:f9:
         44:ac:2c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----