Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfe315e6-c630-48bd-8de5-23eee0ad40cd.roa
File:                     cfe315e6-c630-48bd-8de5-23eee0ad40cd.roa (raw, json)
Hash identifier:          qo/Mk5C3OhfZ0nJGWqZ0/s8MywCZTihqPlL4Gyvfaa8=
Subject key identifier:   19:5C:D2:73:8A:BA:5E:98:40:71:6D:87:D4:CD:39:3A:61:38:0B:1B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       46372B2F6F4E95C388AD15149E596476EF26F0C2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfe315e6-c630-48bd-8de5-23eee0ad40cd.roa
Signing time:             Sat 28 Feb 2026 05:30:54 +0000
ROA not before:           Sat 28 Feb 2026 05:30:54 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:8020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:37:2b:2f:6f:4e:95:c3:88:ad:15:14:9e:59:64:76:ef:26:f0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 05:30:54 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=52432c9ab419fd8ec7bf4251f8647c385c587e424e228b7278705762ea004fab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c3:4e:5f:b1:86:1c:0d:24:05:e7:fd:7e:00:
                    e0:d3:9c:6b:c9:5f:e5:28:d8:1c:4a:f1:be:e4:99:
                    63:44:f7:9c:fb:e3:96:dc:66:25:81:0f:7d:f3:f5:
                    4c:2c:55:26:96:27:8f:49:31:5d:d7:83:78:ea:80:
                    e5:bb:0c:a1:a0:67:7a:53:74:1b:3a:4e:c5:5c:21:
                    62:4c:88:7f:1b:6f:f4:7c:bb:6d:7e:ea:f5:81:4a:
                    88:57:4e:5f:78:4e:71:14:1c:43:f3:8b:a1:d2:52:
                    1a:87:91:51:73:da:b4:1b:3c:3d:8d:e4:99:6d:46:
                    af:31:ee:4d:c6:e8:2d:c4:7d:c2:94:83:84:df:51:
                    85:15:6e:25:f6:16:20:f8:b3:c9:fd:13:33:9a:55:
                    6a:10:65:c2:c7:3a:d9:38:4d:7f:24:97:c0:1d:f0:
                    44:a9:4f:0d:6d:76:30:e9:bc:71:d4:e1:a7:28:ab:
                    63:8b:fc:91:f7:20:d2:1b:6c:3e:74:c0:f2:65:7d:
                    5b:36:0b:dd:9a:a6:5f:a1:72:39:f3:d5:03:4b:8e:
                    38:55:74:b3:32:02:ac:89:20:b7:c1:5f:88:1c:e3:
                    a4:f6:d7:b4:90:13:85:df:61:bd:65:6e:01:66:3e:
                    ca:ac:8c:ce:fa:a8:06:cf:72:f8:99:ff:a8:2f:0b:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5C:D2:73:8A:BA:5E:98:40:71:6D:87:D4:CD:39:3A:61:38:0B:1B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfe315e6-c630-48bd-8de5-23eee0ad40cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:8020::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:5c:76:03:d2:ea:db:ca:b4:f4:06:b2:04:30:29:4e:b8:41:
         d0:57:ef:8e:ed:08:2b:07:94:ee:bf:49:36:87:df:5b:3f:cc:
         d3:af:1d:54:2c:fa:63:a9:27:d6:5f:49:b4:78:09:59:07:53:
         c5:f1:8e:a9:1a:e7:9e:80:f9:2b:fb:6b:d4:86:72:d1:c9:a5:
         e4:c8:56:39:fd:e7:95:f9:dd:9a:a4:8a:38:e4:2f:d8:33:bc:
         cf:a6:79:cc:58:66:df:61:f1:65:bf:e1:a2:ac:a2:cb:49:7d:
         e9:1b:33:85:97:71:1d:fd:ce:79:fa:1b:a9:07:f6:f2:2b:90:
         0c:04:fa:37:cc:df:f0:06:c6:c7:01:17:3f:c5:5b:8a:1c:44:
         9e:84:60:06:c2:8a:09:ee:ee:5d:93:c0:74:94:09:ed:31:1e:
         59:cc:d3:98:55:f9:94:b5:c7:a8:c4:fa:2d:b9:85:2a:7c:e3:
         db:0e:22:cf:4b:0c:6f:22:f2:dd:d2:e2:79:31:7c:90:5a:90:
         1a:86:44:d6:eb:f5:3b:b3:98:c9:75:3f:93:19:ae:39:3b:5b:
         fd:84:c6:11:d3:7b:af:b7:f5:7f:66:c9:ef:51:0a:6f:6f:e9:
         50:4e:30:f9:ca:ad:b2:f4:3b:49:5f:60:90:9d:cd:e0:5b:96:
         f6:8a:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----