Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
File:                     c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa (raw, json)
Hash identifier:          Yb7WB2Ie5cSSGkkxYIzD+dQbdHlhYY+oW0TihvW7krc=
Subject key identifier:   26:6B:41:E6:48:7A:ED:9C:43:EB:B1:AC:21:48:A0:AC:16:05:CD:CE
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0BD671648D9569A760D028B7876AD48255AA729B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
Signing time:             Mon 27 Jul 2026 03:20:55 +0000
ROA not before:           Mon 27 Jul 2026 03:20:55 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d059:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d6:71:64:8d:95:69:a7:60:d0:28:b7:87:6a:d4:82:55:aa:72:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:55 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=a8fe35c8926af799f853f98cf1c0636922ad88000a4733ed6e60ceb4e05cebaa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0d:0c:b7:0a:89:45:7a:3f:3c:81:2f:1c:df:
                    6a:d4:4b:af:a8:bd:1b:1d:b1:b8:b1:d5:e8:76:b7:
                    37:05:3c:5e:81:8b:cc:33:8a:f8:61:4b:dc:cc:91:
                    a5:b5:c5:de:6c:cc:11:a5:4f:cc:a5:b3:1e:50:4e:
                    08:e4:6b:d8:3c:a8:c9:f5:f2:3c:5f:e7:18:51:24:
                    91:2b:4b:f8:35:b4:df:72:9d:7e:2f:97:d3:01:5b:
                    73:4f:0f:03:57:4b:9b:cb:fd:c6:4d:bb:c4:13:04:
                    3e:81:bd:ae:53:42:a8:d3:12:15:9a:3a:c0:c3:20:
                    4a:dd:0e:f6:14:27:44:1a:e8:5b:88:8c:e6:52:9a:
                    0d:55:14:e3:e8:8e:6c:68:51:59:16:c4:da:2c:2c:
                    8c:0c:ba:0f:1c:b0:b5:67:82:cc:af:99:ab:67:c8:
                    60:ea:77:e4:a1:c7:b3:7b:ad:77:39:9d:e6:4f:fc:
                    9e:b1:29:db:6b:f5:ce:85:c3:df:67:28:9f:8b:a3:
                    6e:79:e0:86:fb:af:cc:b4:11:9b:e4:80:7c:e2:79:
                    95:cb:5d:05:7f:0e:ed:48:c6:50:85:cf:69:da:27:
                    a4:2c:23:e2:b8:27:e4:50:fa:fe:51:6d:b5:72:47:
                    9e:f4:f3:bf:20:8a:52:12:96:a8:fb:13:cd:69:d9:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6B:41:E6:48:7A:ED:9C:43:EB:B1:AC:21:48:A0:AC:16:05:CD:CE
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:4e:93:09:c7:1b:c8:1b:fb:f1:91:b2:d1:37:67:43:90:ed:
         84:54:4c:e8:58:92:3b:3f:3e:de:c9:5e:48:c8:64:85:5b:88:
         91:c0:83:be:db:09:f4:fd:0b:22:bf:cc:73:a7:38:12:d3:c9:
         f5:bf:92:06:a9:47:0c:b1:9f:00:8d:3a:3e:14:36:30:06:c0:
         d9:13:6b:b0:a7:cb:89:25:9a:e1:fe:ee:b7:10:24:4d:1a:30:
         8d:56:e4:4b:de:4d:8f:18:e0:56:04:a6:b2:46:5f:2c:5d:81:
         1e:ce:52:99:59:64:b4:1e:a3:52:03:26:a4:7f:75:43:3d:aa:
         1d:49:62:ed:1d:a2:dc:60:f7:af:50:fb:69:17:69:53:02:5e:
         e1:5c:a3:f9:6d:a9:fd:41:17:04:66:0b:bc:f4:9f:af:a1:e6:
         5d:db:97:fc:b2:2f:cc:51:bd:5f:7d:78:b7:cf:73:a8:10:e4:
         cb:8f:b5:15:e3:15:c5:c4:87:12:e6:0f:3b:b6:bd:3e:32:c7:
         46:29:75:ec:04:e2:d9:4e:27:13:9d:1c:6c:73:ce:bd:fb:20:
         34:ba:99:63:6d:91:b0:4f:b0:e5:fe:9f:36:77:8f:fb:33:2d:
         c5:02:73:f2:ef:e1:26:0a:1f:10:ed:91:b2:83:4a:71:33:a6:
         36:a1:4a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----