Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ea10af7-3cac-414b-b6d9-764b73d999d4.roa
File:                     9ea10af7-3cac-414b-b6d9-764b73d999d4.roa (raw, json)
Hash identifier:          22Qj1uKVkmKiEDItzdGZPtWRVPQ6Ti622WK4mittnJc=
Subject key identifier:   0C:A5:2A:28:61:89:AD:28:8C:7E:D6:4B:D1:C1:1C:CC:AE:B2:69:D2
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       12729DD327C689C6709C4ADF8AE8DF396B667557
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ea10af7-3cac-414b-b6d9-764b73d999d4.roa
Signing time:             Mon 25 May 2026 00:00:04 +0000
ROA not before:           Mon 25 May 2026 00:00:04 +0000
ROA not after:            Sun 23 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:72:9d:d3:27:c6:89:c6:70:9c:4a:df:8a:e8:df:39:6b:66:75:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 25 00:00:04 2026 GMT
            Not After : Aug 23 23:59:59 2026 GMT
        Subject: serialNumber=ae134db7279983aa6a624a2465ab7524f0adac08a68adc11ea06c4dbed62f35d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:04:97:d3:af:06:0b:3f:ec:21:33:54:91:
                    76:29:0f:ff:0a:8e:5f:df:49:34:a2:06:c6:ca:dd:
                    ff:25:76:98:b9:3e:65:50:34:17:cc:d9:fa:fa:f9:
                    0c:9a:bb:43:d0:f1:9b:55:6d:d8:e1:98:cf:cf:b5:
                    8f:1b:be:c0:ba:cd:38:1b:f3:44:d5:de:bc:02:4b:
                    df:36:6f:7c:09:58:90:5c:ae:c9:0c:17:e5:3a:1a:
                    b9:d2:a6:20:ee:dc:7f:cd:ea:13:38:82:2b:d6:ef:
                    c0:c1:1d:21:ac:60:ca:3d:aa:0a:4c:3d:e8:a4:d9:
                    9f:d3:e4:4a:dc:e3:ce:35:3a:62:3b:a1:6a:35:ac:
                    13:2c:b1:5c:d2:d5:53:1a:c8:ac:11:4c:98:e5:91:
                    63:3e:50:1d:02:0b:80:b0:22:5e:5d:f2:1e:3d:2b:
                    03:41:e2:7e:68:9c:c3:e9:db:c1:3a:6b:73:fa:a9:
                    9b:eb:56:eb:d0:ed:41:58:2d:45:07:5b:0e:72:08:
                    63:16:bf:36:99:d2:bb:c3:82:a4:31:71:55:c2:67:
                    bd:ad:89:bc:34:c0:6d:5a:bd:f0:a9:ef:63:64:0e:
                    98:96:44:77:16:6b:0d:25:27:24:d7:4d:5e:d3:e1:
                    33:3d:cb:f0:f3:6b:1c:94:73:7f:c1:44:6b:6d:44:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A5:2A:28:61:89:AD:28:8C:7E:D6:4B:D1:C1:1C:CC:AE:B2:69:D2
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ea10af7-3cac-414b-b6d9-764b73d999d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06a::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:b8:69:0a:41:35:85:51:02:97:54:30:61:83:5b:7b:ae:19:
         18:69:3e:90:5e:40:b9:2d:d5:f4:fa:f6:13:2d:f9:8c:b7:9d:
         df:f0:f0:09:e6:86:ae:8b:c3:75:01:7d:9e:70:ad:f7:60:9f:
         3d:5c:8c:77:dc:86:50:25:d2:49:b9:1a:3b:cf:b8:0a:36:67:
         b0:7b:06:75:e9:32:4f:9d:5c:64:69:4b:ef:fc:a6:45:8c:ca:
         2d:06:23:15:18:1c:63:f5:1f:47:b7:44:fc:63:6e:17:e1:9f:
         49:d3:ef:81:75:de:c2:69:50:ff:ce:55:3e:a8:bc:7a:e4:a5:
         e4:58:4a:12:63:1e:46:87:55:a2:9c:78:6e:18:bf:98:b4:24:
         26:34:60:b3:16:e8:1c:3e:84:02:2e:46:55:b3:7f:e5:b7:1b:
         b5:72:f7:27:30:71:9e:03:b3:ff:ec:c2:78:a2:c5:a8:93:2b:
         34:49:6c:a3:6d:25:d9:ef:d8:22:29:9a:90:be:46:cc:a6:0c:
         0a:f8:3c:79:60:58:b5:b4:14:84:46:26:38:98:bd:ce:df:3a:
         67:e5:37:01:c8:13:b1:36:9e:3e:c5:b3:9b:60:71:2e:37:7b:
         73:d0:82:85:76:9b:f4:27:43:3c:d8:a8:88:a2:77:61:89:c0:
         8a:aa:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----