Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aecc6242-1099-4fb7-92f7-993a2622e087.roa
File:                     aecc6242-1099-4fb7-92f7-993a2622e087.roa (raw, json)
Hash identifier:          y4GMGLTz8tRGzrxgd2W+7oyIAIoYlgrivoi+01W2XTo=
Subject key identifier:   61:CD:B5:C0:07:ED:FA:FD:9C:F4:72:11:55:63:A0:8D:81:9E:4D:1E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       01ADAE305BCAE9534E3DD51B4DE3C15AC5EA9F65
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aecc6242-1099-4fb7-92f7-993a2622e087.roa
Signing time:             Fri 22 May 2026 16:03:29 +0000
ROA not before:           Fri 22 May 2026 16:03:29 +0000
ROA not after:            Thu 20 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d068:40c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ad:ae:30:5b:ca:e9:53:4e:3d:d5:1b:4d:e3:c1:5a:c5:ea:9f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 22 16:03:29 2026 GMT
            Not After : Aug 20 23:59:59 2026 GMT
        Subject: serialNumber=6a3cee8045ace144ff032dcc2b4dc95d47ee74c9ac31e48c68763a6d211b4618, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:fd:06:f8:dc:a4:0b:85:9e:f6:92:74:03:
                    97:6d:ba:4b:02:10:29:44:23:e0:85:32:af:b0:e6:
                    00:13:f8:09:4f:b6:62:9c:56:9b:4e:77:09:98:91:
                    58:cb:9b:1e:25:3b:d2:20:b1:8c:a3:4b:51:0f:86:
                    09:96:65:92:b9:66:d3:02:c0:bc:f9:57:ea:b7:ae:
                    14:26:17:bf:52:59:3b:41:aa:21:18:4d:d2:4f:c7:
                    6a:28:5e:40:00:ab:9a:0a:c1:3e:37:49:cc:a0:f6:
                    d4:a1:ed:3b:5b:77:15:ba:3a:11:f6:c7:7c:5a:90:
                    ba:7d:d7:f1:d2:e1:c2:3b:a5:24:6a:9d:59:86:4d:
                    98:0c:d5:21:0e:26:06:b8:9e:11:a5:f5:02:bc:c4:
                    df:c5:c7:01:7a:bd:cf:22:0e:86:c7:b9:22:56:39:
                    41:42:01:b6:82:e9:07:40:49:93:51:9b:f3:1a:cd:
                    1b:cc:75:d1:17:4c:83:8e:48:d0:ba:60:ed:b7:53:
                    c6:f1:4c:c0:41:15:89:fb:2a:13:b2:3a:5f:f1:f8:
                    c6:8f:a0:6f:9c:43:59:48:40:2b:ee:95:68:2c:d2:
                    41:e6:c2:03:73:27:98:0d:1e:bf:03:b0:5f:b6:09:
                    74:1b:a7:e5:f2:95:3e:48:19:c2:bb:6b:5b:62:4c:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CD:B5:C0:07:ED:FA:FD:9C:F4:72:11:55:63:A0:8D:81:9E:4D:1E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aecc6242-1099-4fb7-92f7-993a2622e087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d068:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:00:98:e2:27:f4:36:08:77:d8:88:ca:54:70:b1:a5:53:96:
         60:63:8d:0d:93:13:b8:08:0b:8a:a0:9d:4a:af:c2:f1:c1:52:
         f3:72:39:e7:6d:5e:a3:f7:7e:9e:27:2b:8b:cc:74:f0:c0:30:
         d6:63:5e:0e:0f:d4:8e:21:47:a5:f5:3b:5e:da:bd:b3:a9:03:
         c1:f7:c2:21:c9:07:31:30:72:06:57:b6:84:92:db:3c:11:b9:
         ab:11:9a:dd:8a:a4:fb:a8:f5:74:48:e4:da:e2:b6:38:83:22:
         b7:63:f1:9c:de:5b:d4:bb:f6:b3:77:10:0a:33:94:66:34:23:
         6f:4d:e5:76:a5:46:af:c0:e9:90:0e:be:9f:0c:08:33:6f:e0:
         f3:15:27:7f:23:85:85:e1:49:93:98:35:29:ab:d9:39:1e:89:
         7e:d7:45:6d:06:d9:aa:a0:2a:e2:33:d8:e8:1f:28:1f:0b:43:
         cc:a7:6d:ae:6c:ee:88:71:91:bd:a4:ce:75:06:08:ab:6f:94:
         14:bd:a3:82:1d:2f:52:c8:3a:11:10:30:bd:07:e4:7a:51:31:
         ac:e6:74:40:b2:1b:b7:d9:40:9c:97:d8:7c:52:71:f4:33:11:
         34:b0:84:8a:50:d3:43:7d:3e:d4:e7:c0:41:9b:62:9a:43:f6:
         67:57:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----