Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97c2fed6-917f-4140-ae69-b6ff028e8f2e.roa
File:                     97c2fed6-917f-4140-ae69-b6ff028e8f2e.roa (raw, json)
Hash identifier:          Y/j+RkGUkW76TVKnnf3cW5WHP5srR9H+WF74yUL8Bek=
Subject key identifier:   DF:F5:DC:C4:D5:4C:C5:2F:90:29:36:BE:35:DC:F3:24:66:FE:81:6C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5DAC5A73DD35065E26DA0B7CF299950BD601C25A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97c2fed6-917f-4140-ae69-b6ff028e8f2e.roa
Signing time:             Mon 27 Jul 2026 03:20:26 +0000
ROA not before:           Mon 27 Jul 2026 03:20:26 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ac:5a:73:dd:35:06:5e:26:da:0b:7c:f2:99:95:0b:d6:01:c2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:26 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=19a59e5c1040d044b694cfd9eae12eaa9b621bdda377e36825083e07c2eb8230, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:bc:b5:7a:a1:ae:bf:27:86:57:52:a3:e4:
                    54:4b:10:49:d3:5a:c0:ee:4c:14:86:48:5b:8d:19:
                    35:8c:98:61:3f:e2:ad:c2:2d:ca:12:0b:70:a2:df:
                    ef:53:fa:5a:bd:63:b1:1a:5b:1b:c1:74:df:c6:eb:
                    aa:ff:82:16:c0:82:ad:4e:4d:2e:ba:15:ce:51:31:
                    99:16:fb:95:82:f0:d9:13:5c:31:45:85:af:bc:15:
                    cb:07:8d:56:4b:47:0d:7d:7a:06:32:20:77:bb:f5:
                    fa:2a:d6:a1:02:63:62:ef:ee:ac:53:8b:49:99:fe:
                    4c:86:37:1d:ac:5f:72:48:a9:8c:50:e4:f4:18:26:
                    7f:c5:b3:3b:1d:ec:18:c6:c8:1c:27:87:1c:3f:c3:
                    b2:ec:ff:11:12:f1:6c:62:12:a7:74:ae:18:50:f1:
                    a6:14:64:5c:6d:d5:71:40:85:08:18:b0:1b:f8:62:
                    9d:45:93:91:df:92:10:ef:6c:ee:2b:ea:23:82:80:
                    6f:b4:23:3a:1e:48:46:6c:85:7e:72:76:e1:f8:18:
                    87:53:ee:33:33:da:a7:ea:3a:3a:7a:d7:6f:55:ed:
                    ba:62:68:2b:ee:3f:6d:91:0e:c0:18:4a:68:50:96:
                    62:09:e6:23:30:72:0e:a6:b9:55:da:68:39:78:f8:
                    28:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F5:DC:C4:D5:4C:C5:2F:90:29:36:BE:35:DC:F3:24:66:FE:81:6C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97c2fed6-917f-4140-ae69-b6ff028e8f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:840::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:7f:b1:e6:67:f7:6e:9f:4c:4d:f5:2f:d6:68:bf:1b:4d:bc:
         c7:a6:0f:b8:73:48:75:c5:03:ed:74:99:9f:b3:bd:ac:12:18:
         eb:3e:4e:0f:06:52:82:96:84:03:f7:45:9c:da:fe:98:59:d7:
         b6:da:44:8e:f1:bc:e1:b7:f7:00:00:8f:a8:13:fc:49:ad:09:
         85:c1:9d:bc:3d:2f:3a:6c:6b:38:26:81:6a:fc:f1:4b:d4:55:
         fa:00:ff:97:a1:d4:3d:6a:ae:6f:ef:81:4a:35:31:1e:74:c8:
         79:c1:66:a0:2f:84:10:82:9b:7b:b3:27:9f:89:fe:dd:6b:8f:
         0c:cf:42:80:ee:17:98:60:80:d7:6a:d2:a7:fd:47:e9:de:45:
         76:cd:70:d7:bd:36:8d:bb:94:47:a8:98:44:0b:e2:b1:15:b0:
         15:51:53:8d:3a:d8:aa:15:fb:4d:0b:14:0d:ad:e0:c9:3c:f6:
         2f:03:86:39:b6:a5:cb:32:cf:55:2c:18:e7:6e:fb:bd:61:1f:
         1b:ba:cf:3e:95:e2:a3:4d:78:00:7a:dd:09:0a:15:9e:a6:b8:
         20:95:90:ed:ed:79:30:c0:6f:f9:bf:5c:03:4f:00:61:a8:8d:
         6e:ae:bd:94:e5:a9:ab:8f:e9:38:e5:ff:95:8a:20:78:c5:b3:
         41:bf:29:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----