Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa
File:                     f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa (raw, json)
Hash identifier:          Mv/B206QeQH1AGv6dITIueQpjmqXOLahjXRUPwOON6M=
Subject key identifier:   24:D9:FF:4E:3C:98:AD:6A:E1:7C:3F:41:E3:B9:74:72:BE:50:3D:A2
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3CF085FD9F0A9360D324FC427466BF6711E0AF60
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa
Signing time:             Tue 19 May 2026 04:40:21 +0000
ROA not before:           Tue 19 May 2026 04:40:21 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d010:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f0:85:fd:9f:0a:93:60:d3:24:fc:42:74:66:bf:67:11:e0:af:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 19 04:40:21 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=d6401991c4c8f06b55147b1a79ed39fb0bf9ed41c1e2e351f18e866d9d573377, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:27:f8:66:ca:c0:2e:ae:c4:aa:1f:7f:5e:
                    44:b7:7c:26:10:e4:12:57:af:4d:c7:3f:6e:18:5d:
                    d7:29:86:56:f6:9c:0c:e0:08:4e:9b:f3:41:33:fa:
                    2a:18:d2:ef:e5:a3:4b:ee:d0:ed:c8:15:86:69:09:
                    c0:d7:ae:67:1d:a5:c9:42:a8:2c:90:4c:65:a1:59:
                    b5:69:ee:c8:09:8d:a4:da:92:cc:47:8c:cf:f4:f5:
                    5f:22:2c:d8:87:1d:24:c2:dc:58:61:38:47:77:a7:
                    04:d1:ba:8c:91:93:84:bc:00:14:55:e9:49:28:6f:
                    f9:a7:e9:81:87:e2:48:5b:1c:f5:3b:8b:ea:f3:2c:
                    b9:48:de:f6:a1:53:66:9f:55:86:45:15:ee:84:b2:
                    bc:d8:13:f3:3f:f6:c9:0b:a3:04:0c:b0:f6:65:73:
                    33:fa:8e:4f:65:17:a6:f5:40:39:b3:70:0b:6a:3e:
                    0a:cc:3f:1a:76:0d:f9:65:02:c6:bb:54:fc:78:46:
                    cd:55:39:c4:92:1a:26:d7:82:b1:e9:ad:6b:68:20:
                    21:68:c2:dd:e2:b0:5f:e3:29:ca:d8:65:fd:c6:50:
                    8b:b2:38:74:68:55:c7:d1:79:47:a1:5a:32:33:82:
                    b5:78:e0:47:ec:03:cf:f7:c1:ce:99:a5:5e:33:c0:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D9:FF:4E:3C:98:AD:6A:E1:7C:3F:41:E3:B9:74:72:BE:50:3D:A2
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d010:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         70:d7:4c:8a:fa:fd:79:a4:29:ad:6a:76:03:14:11:4f:9f:d0:
         6c:19:bd:f9:80:23:dd:c3:95:0c:d3:41:8d:b1:87:3f:da:16:
         33:45:63:4e:26:67:d5:46:8b:81:f9:ed:03:e8:5f:61:c4:e7:
         fe:94:99:65:60:c1:c6:ef:19:7e:db:1f:f7:28:ed:7c:ab:35:
         a5:79:d0:32:b0:90:11:06:95:d3:eb:1d:dd:d9:4b:b0:58:eb:
         72:fc:13:21:16:68:f2:c1:25:4e:06:4c:73:ca:4a:ba:f5:28:
         20:b1:e1:16:92:89:5d:5c:19:f7:bd:52:33:5b:b6:f9:32:ab:
         0f:d0:39:c0:00:e1:d3:a8:be:d7:c7:f8:5d:9c:dd:6b:08:40:
         0c:61:4b:07:1e:ea:4d:d6:79:b9:56:0f:c2:04:e6:cf:78:be:
         4d:30:eb:cf:14:98:16:e0:a1:77:1b:d2:d0:69:f6:4e:7f:a2:
         0d:5d:3b:ba:18:96:c5:f9:35:bb:42:74:34:3b:a2:bf:f5:ce:
         4d:d3:ba:f8:9b:f1:02:73:9a:9f:ec:d5:79:de:a0:47:b1:f4:
         f7:1b:69:be:92:bc:5e:ef:d6:59:27:71:8c:8d:ee:53:4b:f2:
         61:57:79:97:cb:83:8d:90:f2:b4:6f:7b:42:b2:19:ce:29:d6:
         4c:0c:7d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----