Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
File:                     d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa (raw, json)
Hash identifier:          17s3gAGkLIjyA7rpgCXhOW1wA66MoJ1i9EdJK/ff35I=
Subject key identifier:   0A:0D:E6:CC:C7:CA:95:48:2B:92:6B:27:D7:AB:E4:A4:89:3F:39:83
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6926F2EF42CA8863E14FED63B7A1C11B8BB4DCDF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
Signing time:             Tue 19 May 2026 05:01:15 +0000
ROA not before:           Tue 19 May 2026 05:01:15 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d016:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:26:f2:ef:42:ca:88:63:e1:4f:ed:63:b7:a1:c1:1b:8b:b4:dc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 05:01:15 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=9eae3c75e14f8dc259de189837dd85ce37ec525789ed6ac0490bebbf637e0f1b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:78:35:ea:a6:29:59:cc:d8:40:23:87:d7:
                    49:8c:76:5e:3d:db:19:1f:2a:27:2e:07:00:f1:fc:
                    26:c8:5a:89:5d:57:65:f2:65:16:fb:c8:e6:ab:62:
                    31:a1:62:7b:b6:0f:f6:b5:6a:23:b7:fc:5c:83:d7:
                    1e:8a:a9:ab:e5:5a:53:3a:bd:4f:46:42:fd:ac:c0:
                    a3:6e:70:49:a3:30:32:57:7d:9d:a3:68:1d:f6:c1:
                    5a:9c:90:fb:d1:34:92:31:d0:73:61:8e:a5:19:56:
                    c9:77:cb:89:15:81:6e:d3:b3:72:e1:56:e3:23:6e:
                    4f:68:64:49:60:1a:9b:35:e1:99:10:2c:32:36:21:
                    14:bf:a9:f2:ac:b6:49:da:00:71:81:20:1a:31:11:
                    35:f9:13:52:2a:29:84:5f:ae:c8:dc:f7:00:d6:d1:
                    78:55:11:18:26:3a:a6:d8:34:ae:be:aa:ba:0d:f2:
                    ef:03:8e:26:ff:b4:10:99:ba:8a:2a:62:35:49:79:
                    a6:5c:79:3a:cb:47:e2:4d:d4:c2:37:7d:6a:cf:98:
                    9e:0d:d6:ea:ba:57:05:ba:d1:15:6d:31:05:bb:3b:
                    77:b3:33:00:54:52:aa:a6:fa:27:b8:c7:90:32:06:
                    d8:93:6b:a0:23:92:f8:26:b7:e6:6c:42:b7:2a:cd:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0D:E6:CC:C7:CA:95:48:2B:92:6B:27:D7:AB:E4:A4:89:3F:39:83
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d016:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         60:e6:99:a4:43:42:74:ae:0d:e0:75:b4:ff:43:de:8c:6c:db:
         64:fc:e4:a5:c6:8a:48:66:0a:c6:54:3e:70:7a:37:ca:b4:d2:
         94:ad:89:18:46:c2:f8:41:92:68:f3:91:5d:70:32:83:7f:0a:
         50:5e:3c:37:d4:0b:b5:ff:73:26:a6:5c:3f:47:bd:10:64:16:
         dc:8d:d2:bb:00:67:55:00:e2:2b:70:ca:34:80:31:8a:22:f0:
         d8:d6:a0:d8:8b:93:56:df:6a:e2:00:3a:0d:ab:cf:72:8f:db:
         e9:0a:21:41:90:53:c3:7d:47:f5:1e:71:4b:89:f5:2b:cd:f7:
         14:c9:82:d7:0d:d7:37:5e:02:1d:b2:a7:a9:3f:9f:01:f4:58:
         83:1d:f4:3e:74:2b:06:85:01:5d:07:64:f5:43:83:21:36:87:
         f3:90:e3:dc:2d:b7:b3:c5:07:3d:29:73:1a:c1:24:f0:1a:74:
         14:a0:83:9d:ea:a7:fa:a0:4c:29:9c:88:a3:ac:65:99:1d:a8:
         75:34:2d:75:3c:43:55:f3:12:98:b8:cb:64:02:b0:e6:52:2a:
         8d:f3:d4:07:1a:74:18:7a:46:98:8d:c7:8a:b9:7c:5d:63:0d:
         34:62:61:f4:39:bb:ef:9e:6d:01:a9:97:12:b2:e4:30:99:1b:
         53:b2:1e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----