Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
File:                     dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa (raw, json)
Hash identifier:          Bsg3fZ9cefc5qV+qgMIuV1VZV626FxIm1197RMu/QHY=
Subject key identifier:   F0:D8:F9:07:B1:25:D5:26:70:9B:06:83:51:AA:47:D8:35:63:5A:D5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2CDB0650287BD55FA830902A16712E6DFD63E4B1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
Signing time:             Tue 19 May 2026 05:00:54 +0000
ROA not before:           Tue 19 May 2026 05:00:54 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:db:06:50:28:7b:d5:5f:a8:30:90:2a:16:71:2e:6d:fd:63:e4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 05:00:54 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=f3ea02386359770ecd1cb247e8a007335c8b100d7532372432f3657744c5e24f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:bb:cd:be:64:c4:10:e9:3c:84:3a:f8:8e:
                    8c:a1:b5:cb:fc:ae:e0:5c:4e:d2:14:74:97:75:25:
                    81:6e:95:53:37:9a:6f:ea:97:0f:6f:4d:73:92:cf:
                    27:1c:58:27:16:4b:49:4c:32:74:a6:5a:f6:48:19:
                    64:a5:7f:cf:a9:5f:36:13:e7:4f:cc:bc:7e:cd:53:
                    2b:27:bd:ad:b7:9f:08:ff:ad:03:c6:f3:8a:9c:8e:
                    21:4c:86:b1:78:d9:db:37:b9:ca:93:99:e6:0c:0b:
                    7c:bb:01:bd:b3:83:97:10:b4:95:04:16:27:b4:55:
                    32:73:c9:77:94:2d:50:96:d9:0b:3f:14:1e:29:77:
                    4c:5f:c1:d6:ac:d5:5a:8c:8f:d1:93:b6:cd:7b:74:
                    84:7b:6a:d0:a9:f7:c3:6c:58:26:94:02:26:b5:38:
                    ed:c3:d5:d7:2d:be:3f:ee:89:ac:8f:76:88:7f:98:
                    66:7b:4f:bf:26:54:e5:2a:b0:ec:ef:bf:e2:17:9f:
                    f2:67:a5:a0:81:0c:08:dd:00:75:f9:7e:5c:bc:3d:
                    6c:fc:82:d4:7e:d4:80:68:99:a1:9a:e2:c9:cd:7b:
                    5a:cc:7c:f1:82:f6:21:3e:c2:e0:a9:67:8a:e8:7e:
                    1b:6c:8e:60:1d:5f:55:6b:5e:c3:f6:12:19:f3:05:
                    bd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D8:F9:07:B1:25:D5:26:70:9B:06:83:51:AA:47:D8:35:63:5A:D5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:65:71:f9:f1:20:5c:eb:04:6f:df:72:b3:f7:0a:ea:34:02:
         fe:b5:78:39:3e:78:e4:c8:3a:2d:39:fd:34:ce:1d:f8:07:e7:
         de:44:15:f5:46:ae:20:6a:15:58:2c:1a:36:69:d6:fb:26:f4:
         da:ce:28:a0:ac:d9:0a:1a:0c:d5:7d:32:65:e6:6a:b5:15:e5:
         bb:79:38:79:b2:69:5d:b5:22:17:ae:ab:53:1d:bd:2e:01:49:
         72:f1:a5:79:de:f0:00:f7:0d:09:fe:c6:64:12:a5:a6:20:21:
         e2:5c:e3:38:25:17:cb:a1:61:75:46:c6:0c:41:2e:a6:0d:9d:
         9b:a4:6b:ff:cd:96:10:b6:d1:f2:0f:1a:55:84:ed:bf:e3:66:
         41:e4:f7:43:65:e6:80:14:5c:58:45:07:c2:ff:47:2a:52:42:
         12:c3:e6:49:ab:14:cf:46:a1:40:0d:0b:a6:17:8b:cf:6a:82:
         c4:5f:a7:88:76:89:7f:7b:2a:04:a2:a8:1f:c5:45:8e:48:a7:
         8b:9b:e1:b4:da:16:82:99:d7:f5:84:b2:dc:f6:31:3d:27:fe:
         c7:3b:e3:07:ab:9f:e7:a1:3c:74:95:04:14:29:b6:0c:66:9f:
         b0:b8:c5:0b:56:39:18:f5:84:36:c8:62:25:ba:30:86:dd:a5:
         f1:c3:bd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----