Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
File:                     915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa (raw, json)
Hash identifier:          1/tu0Hbd+jTSQcCaKP7D03dV4csdU40HzbBFQnpLAXM=
Subject key identifier:   8D:73:DF:FC:21:92:C2:C9:D9:07:B0:4F:41:0F:BD:B2:B5:54:A0:1F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       63F188E6AF98D6004A1178E199028418E647AF3F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
Signing time:             Sat 28 Feb 2026 06:10:07 +0000
ROA not before:           Sat 28 Feb 2026 06:10:07 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d010:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f1:88:e6:af:98:d6:00:4a:11:78:e1:99:02:84:18:e6:47:af:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 06:10:07 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=94d5bfc64741e116d2136e2c7ada40dcb7098060585d5d41c0fdb1773c15fbfe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:44:5c:2b:3e:e3:5c:7e:5e:ba:c4:40:09:
                    58:8a:e7:20:a1:fc:3f:5f:38:0a:ee:67:86:eb:5e:
                    bd:93:42:9b:da:dd:ee:f1:81:65:eb:be:1d:df:90:
                    e0:bf:84:6f:05:57:05:57:b2:e8:35:cc:9d:a1:2f:
                    e5:a7:7e:4e:33:b1:70:c6:fb:f8:a6:fd:41:46:4c:
                    c5:2a:62:7f:a8:cd:5c:d4:51:d3:24:d7:7c:9f:53:
                    f4:78:67:5b:47:ea:15:cb:55:14:0c:8e:51:23:66:
                    bb:27:00:eb:15:6f:48:96:3d:86:1c:88:1f:fb:66:
                    08:bf:de:eb:61:30:94:48:b5:74:a6:17:3b:ed:b4:
                    fd:68:3a:03:a1:9c:a3:a9:75:d9:2d:01:2e:e6:f6:
                    4b:da:b3:70:78:3c:80:cb:50:8d:f7:bf:7b:59:72:
                    18:eb:c9:f7:16:72:8d:de:a1:a8:83:e3:73:42:c9:
                    e8:fe:3c:53:e5:2b:cb:a9:72:68:c3:54:fc:2a:2c:
                    46:24:3b:93:d3:e9:29:83:31:78:6f:3e:c4:67:51:
                    e8:9c:dd:6d:b4:ea:2f:9b:1e:ca:75:c9:2e:68:1f:
                    fc:70:a4:d6:c4:b1:9e:c6:eb:2d:1f:5a:f4:e2:05:
                    b0:66:2b:98:2a:eb:61:be:9b:91:03:1a:c7:2c:0d:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:73:DF:FC:21:92:C2:C9:D9:07:B0:4F:41:0F:BD:B2:B5:54:A0:1F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d010:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:4b:39:d1:f6:69:06:a4:e8:15:9b:26:26:74:e8:a7:83:74:
         fc:9d:3a:53:1c:98:1c:56:83:fb:d4:1c:e6:2a:84:46:4c:61:
         b5:25:e7:4b:18:b3:dd:85:d1:19:b6:22:18:8f:cc:f8:90:f1:
         5a:1f:e8:e4:f3:8d:c0:67:1b:df:c6:af:6a:89:97:8b:b1:97:
         21:19:d9:1e:a5:6b:84:e2:b1:1b:b2:62:41:b7:04:e3:cb:50:
         97:ec:05:ca:6b:97:77:fc:62:d7:5a:29:fc:47:86:7c:8c:6b:
         d8:3f:54:24:8a:2b:5c:da:38:d1:c5:ac:58:a3:f4:e3:2c:b4:
         bc:a6:70:b3:23:80:71:74:10:c8:00:99:e2:01:73:2a:c0:b7:
         b0:60:73:5c:53:f0:1e:ac:f7:4b:65:81:ec:e2:66:bf:3a:26:
         50:24:a9:7b:f1:1e:7a:98:56:cc:79:69:9c:ac:44:a5:a7:14:
         65:54:ec:37:37:03:8e:ed:ac:43:bd:69:d0:ca:1e:c0:63:55:
         8c:a1:7c:dd:e9:fb:df:82:34:30:52:a3:b7:78:65:12:9b:93:
         b3:ff:2a:03:e7:92:14:54:33:24:d1:bd:2b:c7:26:2f:b5:d3:
         28:38:c7:2c:66:09:1e:5d:a6:bd:b7:40:4e:ed:c1:08:10:f3:
         4b:5a:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----