Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b83c6ff3-492f-409c-86bf-cb90ca64f452.roa
File:                     b83c6ff3-492f-409c-86bf-cb90ca64f452.roa (raw, json)
Hash identifier:          MX7sN7IuQvfWHiMH/b85igbaN942En26f1SufEckfVU=
Subject key identifier:   B4:BE:38:A3:CF:B5:50:48:1E:E1:0D:22:3F:91:C1:9E:59:B6:50:A0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       21CAB3A719049346E02B26B99631B891251C37CA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b83c6ff3-492f-409c-86bf-cb90ca64f452.roa
Signing time:             Mon 27 Jul 2026 03:30:39 +0000
ROA not before:           Mon 27 Jul 2026 03:30:39 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d059:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ca:b3:a7:19:04:93:46:e0:2b:26:b9:96:31:b8:91:25:1c:37:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:30:39 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=e5a389c6355faa1466895ad2b73b21a57eea6a5cbf49f84096bafdb68b73b678, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:89:fe:d7:52:5d:0d:ef:ee:f4:00:0f:94:b7:
                    ec:72:35:c1:14:fb:2c:1a:69:7c:d2:e2:89:7d:75:
                    ec:f0:77:61:2e:13:3a:4d:7a:1b:30:f4:3d:59:5c:
                    d0:72:62:d1:b8:18:2d:2d:f4:ef:9e:26:12:fc:6d:
                    3c:f9:40:53:d2:a3:9d:54:f2:fb:44:e1:d3:2b:62:
                    cf:30:7a:1a:f0:0e:38:05:93:b4:97:1a:95:55:81:
                    6a:6f:b2:58:04:c6:84:ca:64:d6:49:88:37:14:59:
                    39:af:b2:6b:11:d6:31:4c:1d:57:79:a3:d1:1a:0c:
                    59:29:18:1a:d6:4c:d9:75:35:8f:e9:4a:2b:80:e8:
                    75:5d:37:ee:19:f2:25:64:9f:f5:11:d9:6d:bf:7d:
                    25:ca:38:47:07:a2:8a:a1:d0:2b:a9:17:b1:a9:05:
                    45:f2:b4:60:39:66:8b:c8:62:32:36:a0:7f:57:4c:
                    45:21:61:66:13:ed:8d:91:14:e0:c4:5e:dd:fe:dd:
                    b3:3f:b8:3d:67:3c:5b:98:5b:f4:93:ef:cc:c0:f4:
                    a4:b1:35:48:c7:c6:e5:30:70:4b:50:d5:8f:91:86:
                    7c:91:fe:e5:7a:52:aa:57:e4:3c:22:49:bc:e7:e0:
                    79:85:b0:8e:8d:0c:1f:47:9c:c3:e8:ed:d3:1f:ef:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BE:38:A3:CF:B5:50:48:1E:E1:0D:22:3F:91:C1:9E:59:B6:50:A0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b83c6ff3-492f-409c-86bf-cb90ca64f452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:23:96:7c:a7:c9:89:fd:d3:92:1a:84:c4:b4:83:b6:10:bd:
         71:1b:d5:b0:0e:86:a1:4a:f9:be:e9:1c:7c:eb:d0:97:5a:e1:
         5d:a5:ae:eb:ba:a0:a5:81:b3:96:17:25:1e:0b:05:3d:2b:74:
         d5:40:ad:8a:7f:65:32:d2:df:0d:02:7e:26:c5:cc:9e:b6:9f:
         4a:a7:96:6c:12:9e:dd:55:c9:a1:43:5e:55:78:5a:7d:97:76:
         4b:2f:ce:77:83:3c:c4:a4:55:82:ec:49:67:aa:57:3b:2b:06:
         57:c0:8f:21:d8:13:a9:f9:ba:e5:72:78:e6:cd:d5:fe:d9:e9:
         9a:6a:08:d2:cd:8e:df:fc:fb:f1:f5:b5:ad:bb:e5:3e:bf:2e:
         57:02:89:60:aa:52:86:84:1a:0f:c7:3c:2c:36:3c:87:37:0b:
         73:2c:47:17:90:7e:ed:94:8b:8f:f2:fc:d9:00:87:06:88:3a:
         1d:dd:40:2f:17:3b:95:d5:15:cf:f7:f2:f6:93:08:f2:3b:56:
         77:9d:27:ca:0b:28:aa:dd:95:f9:21:db:36:04:79:7b:94:d4:
         dc:71:cc:7b:42:d1:fe:97:d3:91:25:fa:a2:e1:ff:6c:27:96:
         fe:2f:1e:b2:55:f4:1c:4f:a4:39:01:22:68:9b:21:12:0b:77:
         b9:60:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----