Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e3995b-4ceb-4baf-a74d-954e9f3c5d4a.roa
File:                     d2e3995b-4ceb-4baf-a74d-954e9f3c5d4a.roa (raw, json)
Hash identifier:          LmwfVmd6oI8TIGQNOpGNKRZm7Fi2j3Knv8ljOl+xM44=
Subject key identifier:   0F:E2:A8:91:80:79:9C:1F:F3:27:71:95:32:7D:A2:D4:73:26:3E:3A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7A5FACE0CB8FDB4E08ACFAA05F8058F242B70663
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e3995b-4ceb-4baf-a74d-954e9f3c5d4a.roa
Signing time:             Wed 11 Feb 2026 01:30:35 +0000
ROA not before:           Wed 11 Feb 2026 01:30:35 +0000
ROA not after:            Tue 12 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06a:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5f:ac:e0:cb:8f:db:4e:08:ac:fa:a0:5f:80:58:f2:42:b7:06:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 11 01:30:35 2026 GMT
            Not After : May 12 23:59:59 2026 GMT
        Subject: serialNumber=41fc8d36c9b3fc28e941798ca089072594741bd014373841a49feb234ce86f28, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:66:5f:c7:1f:b2:91:ab:96:50:dd:a2:45:
                    44:69:06:66:cf:f3:a3:06:ee:a1:63:fe:00:57:09:
                    9d:b4:71:f7:ce:78:e7:a1:1d:cb:8b:39:7d:4c:51:
                    62:4b:ac:26:88:92:d9:30:52:65:e1:4b:6f:f8:01:
                    32:36:6f:7b:a3:ef:86:db:24:8b:69:27:06:28:31:
                    6a:eb:32:d5:a6:06:6d:59:bf:48:47:4b:52:e7:86:
                    ef:d8:58:89:26:ae:da:04:c4:21:7b:fc:89:88:7d:
                    f9:7c:f0:35:d3:ea:89:71:97:1c:9d:92:89:6a:a4:
                    05:af:06:7f:9e:1d:f6:4d:02:11:c2:bc:91:e1:0d:
                    76:cb:04:e4:fc:23:4b:63:64:fa:cc:76:85:f7:b6:
                    d6:62:b3:b4:a0:ae:56:d9:f0:cb:9a:ae:a0:c2:a9:
                    35:44:71:82:55:46:40:05:92:40:9f:c7:67:9a:7a:
                    43:53:99:b3:98:cc:63:94:4d:86:23:bc:d0:1f:f7:
                    1e:f4:a0:79:b4:3e:ec:84:50:18:a3:0b:25:19:e6:
                    d4:f1:1a:1a:62:ac:96:34:39:b1:37:84:d3:b5:5b:
                    84:74:e3:87:b3:a5:33:2a:eb:00:9e:3e:ce:97:81:
                    0a:80:d8:ad:1c:f3:64:e8:09:8b:81:0f:96:f0:28:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E2:A8:91:80:79:9C:1F:F3:27:71:95:32:7D:A2:D4:73:26:3E:3A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e3995b-4ceb-4baf-a74d-954e9f3c5d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06a:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:05:84:7c:ef:91:42:0c:de:4e:6c:9f:3e:b3:ac:35:f2:c0:
         01:81:ef:47:ff:f8:f6:6b:f7:ce:2f:a5:d3:f0:33:3b:47:1b:
         6c:05:6d:2f:a0:6f:79:d5:a2:01:cb:5f:75:9c:56:60:e8:db:
         cb:1c:95:0b:fe:82:95:0a:e0:7f:5b:f3:ab:d8:b7:d6:06:fa:
         e2:04:63:7c:2d:5a:7d:1b:dc:f5:89:4d:ac:18:e4:fc:c7:88:
         88:7b:ab:ab:db:02:bd:35:9a:b1:fe:67:0c:d7:bf:84:81:68:
         52:2a:f1:f7:d1:fc:ca:37:2a:f1:31:38:57:e5:51:60:32:c5:
         fa:bf:62:e2:30:56:35:03:10:7e:9f:29:20:10:b8:99:bf:d6:
         42:f7:e5:1a:55:a9:6a:69:bd:64:c3:71:4d:72:1b:b9:24:20:
         24:d0:5e:ac:ce:8c:c9:ee:3b:34:85:5a:bd:4e:59:9b:e7:a8:
         7d:09:88:c8:33:27:2c:d2:7e:5d:a5:44:d9:90:82:db:18:a2:
         79:6f:18:0d:ba:04:42:b3:5c:00:33:66:0c:a5:f4:1d:35:eb:
         92:e9:ed:98:92:1c:25:17:0d:7a:e4:66:df:4f:10:ca:00:c2:
         d6:b1:93:1a:07:b1:28:20:77:2b:cd:d8:6b:97:36:b6:3d:3b:
         bb:cf:41:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----