Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa
File:                     bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa (raw, json)
Hash identifier:          Plmkn5hgmt509wAYyC0o/gt93TA9jWQFxkIxdsTaSwI=
Subject key identifier:   05:52:AE:BD:F9:DC:46:40:F7:41:C0:2D:B6:1B:B8:3A:84:CD:E9:BB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5AD4F5FBF2734D9A6B3574D114AA32767AB5830C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa
Signing time:             Sat 28 Feb 2026 06:10:45 +0000
ROA not before:           Sat 28 Feb 2026 06:10:45 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07e:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d4:f5:fb:f2:73:4d:9a:6b:35:74:d1:14:aa:32:76:7a:b5:83:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 06:10:45 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=f6fef96c5ad3e4bc31d77eceef1fa43c0b43f373dbdb46d2019c9558a35f043a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f2:33:4a:6b:0d:c3:c3:4a:e3:a1:dc:fa:67:
                    8b:64:a5:d1:f5:40:c5:18:59:a3:f3:c2:6a:f8:90:
                    0b:e7:21:ea:d2:d1:60:30:e6:d5:f2:61:1c:7a:09:
                    7d:d7:2a:7d:34:d1:8d:98:ee:b3:0a:7a:63:d6:62:
                    9e:59:02:8a:30:34:79:63:c2:cb:d3:85:05:84:20:
                    62:c4:a6:5f:26:9a:9c:86:b6:60:36:e2:91:d7:e8:
                    6e:e1:87:a9:a7:46:1d:37:1c:58:c5:ed:15:53:51:
                    a3:3f:73:12:47:3d:b0:9b:4c:5c:c7:53:95:9b:e9:
                    30:74:dc:b8:91:a0:a4:56:2b:4e:39:0f:34:d9:02:
                    b4:1d:f7:40:28:68:cd:7b:8f:dc:92:4e:5b:d9:37:
                    61:43:7c:86:e0:c1:20:c4:e7:4a:c3:c7:a3:6e:f6:
                    78:da:20:e3:19:94:b9:20:ce:c6:38:3a:f3:39:08:
                    17:a7:f5:6d:0a:36:a4:1a:b2:4d:2b:3a:59:17:3b:
                    c2:b8:ad:1d:74:ed:e4:e9:d7:74:b5:a5:e0:f2:f5:
                    54:de:92:74:6b:72:ad:53:fc:d1:79:e7:18:40:02:
                    5c:e6:18:42:79:a7:d9:86:7b:15:24:58:42:fb:b7:
                    61:4a:a3:d6:6b:d3:fc:f4:0c:19:ef:b9:b2:72:9e:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:52:AE:BD:F9:DC:46:40:F7:41:C0:2D:B6:1B:B8:3A:84:CD:E9:BB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07e:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:72:99:32:77:3b:f4:bc:bc:d7:53:3f:34:ae:35:ef:ef:c1:
         2e:10:a3:7f:d6:1e:90:6a:e3:ad:a3:6b:04:f4:e0:c2:32:da:
         8d:d4:eb:1b:f2:64:ba:61:30:25:c5:f2:2f:53:c5:38:12:12:
         4b:6c:49:c0:6c:38:60:34:d2:7d:67:cc:bf:ed:c7:d2:c6:63:
         90:5a:f4:7d:64:10:95:14:de:89:8c:53:4e:5e:45:ed:2d:76:
         8c:49:c0:89:85:35:33:e5:84:4d:b4:26:6d:93:17:0d:db:88:
         d3:5b:f6:be:16:51:6c:bd:ae:25:5e:db:f1:31:65:2a:9f:c9:
         af:f7:27:70:6e:97:84:b0:ea:b0:0d:ee:4f:94:31:8e:97:15:
         5a:7e:0b:44:6d:59:4a:9f:01:78:66:5e:41:b9:7f:47:53:e4:
         46:98:90:a5:3f:55:78:c0:c6:da:dd:18:ab:cc:0b:a5:d6:71:
         84:e9:54:2c:04:af:55:e6:21:15:e2:6a:90:22:d5:e6:1e:b4:
         66:1a:44:66:85:54:29:7c:36:22:37:c0:91:85:ab:88:bc:bf:
         e6:b0:f1:62:69:44:92:ea:da:ae:74:d3:d3:9b:92:1d:7e:61:
         24:9b:23:0a:0f:f6:d8:01:2f:33:72:02:6d:33:50:46:14:c9:
         55:0b:4e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----