Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
File:                     acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa (raw, json)
Hash identifier:          aQffBnbvH08jPYAho6N9SjlQQ4rvRbtuo9UN5x4xrsQ=
Subject key identifier:   B6:1C:8C:E8:CB:7F:DA:42:3B:B3:AE:42:52:54:F3:0A:16:AD:60:D0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4977F350297E03032316FF4CAE24FB59B2FB29BF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
Signing time:             Tue 19 May 2026 05:10:42 +0000
ROA not before:           Tue 19 May 2026 05:10:42 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:6040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:77:f3:50:29:7e:03:03:23:16:ff:4c:ae:24:fb:59:b2:fb:29:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 05:10:42 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=9f23e7db6306975e64b6e73b89ddd20d0b6633acefbd31d63a38394921c08e59, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:dc:9e:1f:26:09:f8:e2:ed:23:6f:15:1b:
                    43:2a:6f:2d:70:5b:1f:e9:0f:1b:21:b0:7b:bc:06:
                    a9:66:9c:29:e4:37:0f:eb:4b:59:eb:98:1f:13:db:
                    2d:1a:39:f6:5c:26:99:c7:14:ea:46:6c:c2:3c:3c:
                    6a:d9:44:88:48:a0:85:50:df:a8:e7:c4:e2:c1:c3:
                    9a:60:9e:30:91:50:5c:8b:70:fa:d6:7d:6d:8e:72:
                    8b:2e:bf:a3:e1:c8:45:77:44:f3:5a:25:9a:ec:9f:
                    c8:43:f9:d4:ad:ae:b4:23:bf:0a:bc:ac:c9:47:f2:
                    06:b3:d7:99:29:cd:3b:4c:83:b5:2a:88:f7:00:1f:
                    05:2d:83:a3:5d:09:4e:59:cc:93:6c:e1:fa:66:58:
                    95:99:d3:8f:1b:b6:a6:dc:a4:93:4a:44:ae:f2:d6:
                    1c:48:cc:0f:6f:75:88:72:b4:c0:37:84:bf:ef:8b:
                    8f:da:3e:57:44:18:8c:05:48:29:b6:ef:bd:67:91:
                    92:48:a5:e5:7f:c8:d9:52:a5:78:c7:45:63:4f:86:
                    ec:1b:21:98:32:d6:72:72:0c:48:42:2a:92:78:af:
                    1a:0d:01:38:94:e1:20:5b:14:a7:12:5a:2a:f2:8e:
                    02:78:67:a0:b0:15:d3:c7:5b:83:31:63:dc:5a:8a:
                    35:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1C:8C:E8:CB:7F:DA:42:3B:B3:AE:42:52:54:F3:0A:16:AD:60:D0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:6040::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:94:7d:e8:6c:01:04:6a:0f:8e:83:8a:d9:d0:b2:0d:ea:f7:
         82:ec:87:43:ca:8c:37:25:54:45:92:2e:4d:95:f6:2e:a7:35:
         96:8d:9c:68:3b:9b:9f:72:ea:5b:97:d6:57:d7:5f:19:68:aa:
         00:bb:02:5c:34:33:f5:b2:bb:f3:24:0c:4f:35:bb:09:51:0b:
         42:8b:5f:9f:0b:fa:f7:05:18:55:0d:dd:bb:c9:36:76:ed:8c:
         54:bd:35:e3:d2:c6:d8:17:b2:d2:ae:07:e6:f3:5a:d7:2e:80:
         36:fe:b3:73:e1:38:de:1d:9a:5b:03:72:0c:e0:9e:e8:f9:63:
         f3:69:79:45:35:90:23:cf:23:08:95:01:98:bb:f4:54:eb:54:
         fc:a5:72:c5:2d:8d:90:97:d9:9f:0c:61:3c:54:2e:05:6f:1f:
         9d:68:04:4c:f2:cd:6f:58:07:ae:4a:fd:0c:ba:43:1c:47:ac:
         ba:da:68:ee:ac:1e:c5:85:0f:2a:0d:41:40:14:9f:b9:04:29:
         9a:ad:34:e4:e7:e7:a4:cb:6c:99:c6:ea:47:cb:ad:d0:57:ad:
         af:65:25:1a:bd:bd:bd:2e:fb:2c:ea:ff:3e:ed:56:b9:12:cf:
         ce:cc:2f:8e:c8:16:de:c0:9d:2a:63:2b:14:f4:39:b0:22:a8:
         82:7a:c2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----