Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
File:                     c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa (raw, json)
Hash identifier:          6tc0jfPPRDCE2Y/5GgREGo2hxuhsXoRcoL2A1GpVe+w=
Subject key identifier:   37:AC:78:9D:FD:84:56:D7:5E:7F:A2:DD:25:C0:62:AC:16:8D:F3:7C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4ED3A3C95D4C0C0B31B2BF63103998F507292967
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
Signing time:             Sat 28 Feb 2026 05:50:37 +0000
ROA not before:           Sat 28 Feb 2026 05:50:37 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:60c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d3:a3:c9:5d:4c:0c:0b:31:b2:bf:63:10:39:98:f5:07:29:29:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 05:50:37 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=82f7a73fda9e55bfcc2ad019559717d658834dfbdec6d0ad6e958c3894c6f0e3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:07:a8:47:74:5c:ca:ba:8f:60:74:66:b9:cd:
                    08:42:68:9e:b4:9d:17:e0:8d:73:2a:9f:7d:20:7a:
                    c9:1b:ce:7a:20:96:79:db:78:f7:49:5b:df:7a:d9:
                    b8:89:94:ef:68:6a:dd:e6:7c:8b:f2:49:9d:e0:c0:
                    74:52:f6:cd:c1:b7:b3:07:ce:cd:86:44:b9:eb:40:
                    01:ac:87:52:a3:b3:fa:70:14:25:e4:41:c7:13:8c:
                    60:b6:e0:cb:03:35:c8:50:e6:fa:be:0c:99:65:4e:
                    7c:93:80:44:a0:2e:5b:f1:f9:8b:bb:6e:ce:fe:30:
                    19:31:84:b6:a2:70:27:71:da:90:89:d1:1c:42:f5:
                    4e:9f:72:47:78:81:59:cb:3e:8f:92:94:a4:44:14:
                    30:62:d4:1e:7e:91:b2:95:b4:0b:e4:c8:60:de:c7:
                    31:d1:f8:3e:f5:50:f4:06:de:d9:2d:b4:8d:7f:ed:
                    64:1a:1a:c0:59:e9:61:1b:60:0f:50:2e:c4:ff:d9:
                    61:69:44:d4:3a:b5:0f:cd:14:8b:49:cb:b6:7b:82:
                    e3:ce:f6:1a:ae:06:37:f9:88:b8:d0:bb:26:8f:f4:
                    81:36:a2:32:d4:87:5a:d8:2e:e4:71:74:3b:c9:20:
                    c9:d0:a5:f0:5d:03:f0:6b:c8:06:8f:e6:43:b8:f8:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AC:78:9D:FD:84:56:D7:5E:7F:A2:DD:25:C0:62:AC:16:8D:F3:7C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:60c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:08:05:52:e3:96:b2:0d:aa:41:d3:33:1e:c3:dd:10:6d:bd:
         28:63:d3:09:1d:de:39:de:d2:50:3d:a1:ad:87:c8:b5:c6:53:
         e4:40:42:79:ad:2b:cc:5e:a2:53:60:24:1a:96:8a:72:f1:0a:
         f0:50:0e:61:f4:d0:3e:f5:2d:86:a8:8b:2f:dd:78:09:b4:60:
         10:48:2a:b0:86:c9:3c:3e:b8:fa:a6:b8:08:a0:f7:e6:67:93:
         11:74:bf:51:30:ad:db:29:fb:b9:ca:a0:54:2c:fe:20:5e:54:
         ac:8a:a0:40:a9:9a:12:4f:7b:3a:ad:61:04:89:04:15:ae:8a:
         c4:51:4b:da:8f:4d:1c:18:6e:18:f9:bf:af:02:33:58:e8:5b:
         1f:6d:7a:13:54:db:24:cb:45:ab:fc:7a:7d:11:ec:a3:83:27:
         20:cf:a7:f7:e4:8e:ea:f7:cd:71:d3:8f:85:25:f0:cc:d2:e9:
         36:d9:df:22:41:a9:34:b0:f1:19:c9:72:42:cf:5e:0c:12:00:
         7a:dc:bc:b7:2d:40:16:9b:84:ca:ef:6c:eb:ac:7f:33:ae:ca:
         14:49:1a:e5:d6:b0:94:77:5e:bc:aa:ef:30:44:3a:28:02:4d:
         7c:a7:75:0c:c8:17:5a:7d:8c:5a:0a:97:0a:8c:e1:8a:6b:60:
         90:b0:9e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----