Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9eee349d-d986-4c9f-98e3-a5256e038112.roa
File:                     9eee349d-d986-4c9f-98e3-a5256e038112.roa (raw, json)
Hash identifier:          mc7oWBqyGVnl+rk9Lk8VkrLNVBN8dQCOGVMrXzOz7FU=
Subject key identifier:   1D:66:DA:6E:D4:E3:F6:FD:D5:17:96:F2:70:08:35:9B:8A:FB:89:24
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1906966C0BD05FF69FDF016CFAF21359FAB9B424
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9eee349d-d986-4c9f-98e3-a5256e038112.roa
Signing time:             Sun 31 May 2026 01:00:51 +0000
ROA not before:           Sun 31 May 2026 01:00:51 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d05a:b080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:06:96:6c:0b:d0:5f:f6:9f:df:01:6c:fa:f2:13:59:fa:b9:b4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 31 01:00:51 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=4dcdc6f44385253eb14db7f833e51289d5908b6a31b44539e3d9557aab672db8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:fd:71:80:48:b5:2a:a9:10:c6:15:07:f6:
                    6c:e8:dc:2c:e3:87:87:ca:73:06:20:3d:60:17:3b:
                    6e:da:2e:ea:9e:8a:22:b2:d4:b6:49:38:db:e7:ca:
                    4b:1c:1a:5a:06:60:1e:6c:af:d1:5d:73:e8:8f:c5:
                    1f:7c:ce:2f:37:d7:b1:8a:42:db:88:ec:28:3f:68:
                    d2:13:ad:7a:df:b2:ed:96:aa:40:da:94:1c:fb:5f:
                    58:d1:56:7b:a9:24:b0:0a:52:00:55:6f:a5:ab:95:
                    36:35:d7:06:16:e2:a8:af:43:d9:ec:36:91:e4:8f:
                    44:c1:4f:7c:a3:50:8f:f8:68:84:c8:87:b8:c9:a1:
                    c3:0b:11:45:5d:7a:75:f9:67:f2:30:4f:74:bb:c5:
                    54:ae:e0:e9:94:36:e5:b3:8a:2c:6f:13:6f:a2:6b:
                    73:c3:30:69:51:1c:ad:d7:a8:fe:e7:40:53:7a:bb:
                    48:fe:18:dd:80:05:b3:54:fe:08:73:d4:2d:66:77:
                    0c:97:cf:74:3c:88:c3:e1:c2:21:9f:ef:48:e0:bf:
                    9c:c9:b9:92:0f:b8:9c:2f:8c:93:31:62:f0:14:ad:
                    6a:e5:bd:61:34:d5:55:51:8c:22:35:52:6b:b2:3b:
                    a6:76:1e:94:a9:85:a5:4c:26:a8:18:54:f5:79:76:
                    09:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:66:DA:6E:D4:E3:F6:FD:D5:17:96:F2:70:08:35:9B:8A:FB:89:24
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9eee349d-d986-4c9f-98e3-a5256e038112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d05a:b080::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:28:fb:f0:d9:c1:aa:8d:fb:22:46:5e:9b:f6:3f:be:f2:3f:
         39:d6:56:30:9c:74:80:71:68:a5:b9:10:59:5f:95:9f:36:ba:
         80:8f:e3:6f:10:0d:c3:22:97:c3:dc:f5:42:72:01:02:05:66:
         f7:7c:4c:a2:f5:75:7a:32:d2:a1:d8:1e:83:43:e7:66:81:15:
         e0:ea:49:bd:44:f0:d5:f1:77:28:e7:63:bf:f3:6c:e0:34:5d:
         0f:e6:26:f9:9e:b2:80:f3:2f:da:7a:48:78:bd:8c:e7:22:ec:
         05:65:3d:0f:51:da:9c:a7:68:98:79:fb:b1:a4:51:ba:f2:a9:
         d5:53:47:16:34:44:c7:8d:da:f3:e1:c7:c5:c1:6f:d2:80:b5:
         e1:ed:16:41:98:05:86:fb:7f:31:a0:2c:2d:a6:e6:f3:aa:ec:
         63:89:d8:56:0c:3a:0b:a4:20:2d:39:ad:90:16:14:ea:bf:be:
         ba:b5:04:23:eb:ca:50:f7:a1:9e:be:c4:4e:39:2f:84:4e:0f:
         e2:d6:2a:a5:39:66:68:ef:0c:73:97:de:09:60:f9:a5:79:18:
         98:9a:8a:d3:44:ad:fd:98:e8:14:6d:e8:d0:1d:91:21:52:c4:
         b4:a8:e9:5b:8f:44:81:78:6e:5b:5b:88:4c:cf:95:41:88:7a:
         d4:79:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----