Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9709897-68c6-44f9-98f1-1f292cf13bea.roa
File:                     e9709897-68c6-44f9-98f1-1f292cf13bea.roa (raw, json)
Hash identifier:          WrujTKUFWgYVnDNgf1zghPaxE1/AwSuZ+Mbks3p0Q8s=
Subject key identifier:   72:EF:74:35:A4:62:71:9C:07:CE:D6:59:3E:B0:02:7D:95:56:3C:F7
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       347D38F00E9DEBDECDA57567A6319EDF44F2A8D9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9709897-68c6-44f9-98f1-1f292cf13bea.roa
Signing time:             Mon 27 Jul 2026 03:20:08 +0000
ROA not before:           Mon 27 Jul 2026 03:20:08 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d074:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7d:38:f0:0e:9d:eb:de:cd:a5:75:67:a6:31:9e:df:44:f2:a8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:08 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=f10e2cf0bc81ea69928f21ce5b491ec39f5877924086dca73c32edb09b2fc078, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:f3:d4:51:51:91:3a:aa:e9:59:c2:90:06:
                    34:f0:c6:ee:e3:a0:3b:38:93:60:64:78:a8:f2:4d:
                    f4:16:dd:bf:68:94:2d:e8:7d:9f:ca:96:f1:26:d6:
                    37:7c:ca:56:68:2c:37:6e:f0:7f:ef:91:32:a1:f6:
                    94:d8:f0:00:e1:5e:c7:4e:ea:0e:8c:88:39:1b:6e:
                    4f:79:5d:cb:6d:16:b5:ae:cd:4e:74:5d:28:3a:ae:
                    86:c4:28:23:0f:8b:b7:3c:55:96:b0:42:32:73:f6:
                    d1:ab:b8:ab:8b:dc:ef:98:a8:21:d8:99:9b:a6:98:
                    19:a0:b3:24:dc:0d:30:e4:67:18:6c:2f:60:06:63:
                    06:2a:fe:5a:41:95:6b:91:b5:28:75:7a:67:0f:46:
                    42:ec:8f:0d:10:89:da:0c:a3:44:83:19:27:c8:73:
                    3e:bf:90:67:c5:bb:51:69:ed:21:2e:4e:7c:a9:c3:
                    7b:6e:a0:e8:4a:ac:7c:ea:93:9d:03:20:51:c8:d7:
                    47:82:75:82:88:88:33:ea:86:74:97:ca:24:c8:8b:
                    52:18:0e:2d:3f:a0:20:41:e7:e4:d4:2f:e2:ad:5c:
                    4e:f6:58:c8:7a:cc:c1:90:a7:53:43:a7:cc:da:61:
                    74:21:0f:51:f4:f9:57:ea:21:f9:ac:fa:27:bc:19:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EF:74:35:A4:62:71:9C:07:CE:D6:59:3E:B0:02:7D:95:56:3C:F7
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9709897-68c6-44f9-98f1-1f292cf13bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:45:51:e4:e3:72:f6:51:b1:21:3b:f7:2e:dc:45:49:aa:77:
         f0:49:5e:9d:2a:d1:59:46:3c:15:33:0a:57:49:b4:cf:82:bb:
         8e:4a:8e:7d:dd:fa:38:d7:3b:a6:c9:6d:e2:28:2b:b9:40:ae:
         36:36:0c:8f:78:22:37:e8:af:a6:c3:17:a4:9b:79:3b:67:da:
         88:5d:19:20:b6:85:b5:4f:2a:5f:48:0d:c2:7a:a2:7e:da:d1:
         5f:19:a3:3b:e5:04:b2:3e:41:69:24:af:9a:28:23:cc:da:7a:
         0b:16:68:79:67:b2:ae:85:c3:ee:30:64:f5:29:38:5a:07:eb:
         e8:48:17:91:55:2d:0c:f6:b3:da:12:38:c4:d8:6c:1e:25:d6:
         83:bc:f1:ab:25:2e:9a:98:d8:f7:d2:c9:8d:73:ed:37:9a:c5:
         b4:55:2c:a4:ec:b5:cb:5b:df:a0:69:d1:62:18:18:91:c8:64:
         f7:b8:31:ea:8f:42:03:bd:85:b8:e8:f1:c9:73:22:92:27:0f:
         60:7b:3c:ca:5c:f3:9b:31:31:52:d3:c7:2c:4e:ed:86:19:dd:
         ac:f6:02:01:9c:68:a1:c6:02:b7:96:16:4a:e3:ff:12:ac:d7:
         43:de:6a:ee:29:6c:1f:b5:3d:11:55:2e:35:87:2f:5a:fa:71:
         eb:a1:90:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----