Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa
File:                     f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa (raw, json)
Hash identifier:          efIhnZYS64Q5/jReqNaUS6C1vc88TEeDqPTUWxwnHEg=
Subject key identifier:   CC:DF:BA:02:55:CE:07:66:02:19:74:03:09:9C:0E:34:06:77:9E:FA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0533C2E815CB6E9D28FD75DE35EDD3F037A73FDD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa
Signing time:             Sat 28 Feb 2026 05:20:48 +0000
ROA not before:           Sat 28 Feb 2026 05:20:48 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d010:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:33:c2:e8:15:cb:6e:9d:28:fd:75:de:35:ed:d3:f0:37:a7:3f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 05:20:48 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=6a58a5442fa7f10ff26f82c9fab64350592a692328784614d60637aa49d1ce42, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:07:de:62:07:db:70:30:1e:5e:e9:7b:ef:aa:
                    99:3c:69:10:74:e2:78:ca:ff:42:36:c9:35:4a:80:
                    32:cf:02:45:1e:83:c6:4d:05:20:0c:e3:6a:84:66:
                    46:f2:dc:3d:33:5f:f5:32:7d:b3:14:a8:6b:0e:b9:
                    f7:fe:d8:5b:cf:2c:b6:f2:92:0b:eb:e8:73:58:3d:
                    c1:b7:c7:c1:c0:f9:31:85:c5:12:6f:7d:fa:09:10:
                    21:68:d2:4b:60:47:7b:af:7a:9d:a1:42:7a:47:bf:
                    53:f7:98:40:1a:ce:86:f7:8e:71:d7:0a:bc:fe:0a:
                    34:d2:aa:6a:f7:62:80:f6:32:cc:9b:c0:44:45:64:
                    0a:3c:25:10:82:b3:ae:94:8f:27:f4:8b:59:3b:d6:
                    f9:d8:dd:a9:82:df:fe:15:44:2c:45:da:4b:9f:f5:
                    c5:0d:e0:ca:fb:58:df:10:f5:a0:d2:59:6f:34:fc:
                    77:fd:f9:cf:3d:ef:cb:de:41:74:ff:44:aa:f5:39:
                    0f:3c:50:fb:10:51:17:07:70:82:f8:b2:4e:12:5f:
                    21:3d:5e:5c:e4:bf:a4:a4:39:c7:c3:12:80:a3:49:
                    76:d0:8b:f3:0c:ab:7c:03:71:a8:96:2c:45:5a:0b:
                    1c:f6:89:bb:17:39:23:c8:7c:95:53:59:da:65:0f:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:BA:02:55:CE:07:66:02:19:74:03:09:9C:0E:34:06:77:9E:FA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d010:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         99:dd:80:5a:6b:12:1a:6b:22:cf:ae:19:c9:22:a7:87:62:42:
         ab:24:91:51:d2:24:d3:89:2a:bd:82:0a:6a:f5:23:3c:cb:b9:
         a2:18:7f:f5:e0:9e:7c:e9:6f:0a:1c:16:d8:ea:42:a7:84:9f:
         64:d0:02:03:f0:0f:0c:fd:17:48:39:50:50:80:96:df:ae:cc:
         b5:bb:73:b3:d0:34:20:6a:d9:96:c7:0a:91:74:59:82:1b:35:
         f0:f9:7e:cd:16:0d:65:3b:15:70:f4:68:22:69:5f:06:eb:e2:
         10:90:a0:98:1b:d0:97:20:94:44:33:f4:e3:40:55:dc:50:06:
         94:db:6b:fd:97:b8:40:15:ce:91:d4:40:56:4d:58:3c:ca:a2:
         2b:37:5b:40:37:b4:87:e1:1a:33:86:38:49:d3:19:1f:d0:6c:
         34:fd:0c:f1:46:c6:c3:96:e0:d8:9b:00:55:65:89:f8:c2:33:
         b5:d2:1b:49:0e:92:41:0f:20:26:9c:60:8e:e1:06:ad:a4:51:
         e7:2b:6b:46:3f:cd:5a:be:03:6a:1d:ab:43:01:d7:2d:4d:76:
         c9:d5:65:9a:ec:81:95:9d:63:2d:64:94:47:65:75:48:9a:26:
         bb:4d:52:1f:95:cd:fb:95:9d:6a:2c:0b:cf:c1:37:67:aa:31:
         6b:65:a2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----