Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2641e322-b5af-4c2e-a319-933fc59a77ac.roa
File:                     2641e322-b5af-4c2e-a319-933fc59a77ac.roa (raw, json)
Hash identifier:          pH2FYQL161k2Qz76b3sx+U9zMN9Iahj13v/PLnnzUf0=
Subject key identifier:   A4:E9:35:C6:06:4C:9E:05:AE:CD:A3:86:D9:81:0D:BE:C2:7A:FA:0A
Certificate issuer:       /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial:       45FF85D43CEC00DAC3FB2AB2DA69EF8ABFB7838F
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2641e322-b5af-4c2e-a319-933fc59a77ac.roa
Signing time:             Sat 25 Jul 2026 00:40:09 +0000
ROA not before:           Sat 25 Jul 2026 00:40:09 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc5:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ff:85:d4:3c:ec:00:da:c3:fb:2a:b2:da:69:ef:8a:bf:b7:83:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
        Validity
            Not Before: Jul 25 00:40:09 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=0d5a5ca34cd13b81b1f4aeb72e7f724122d220370934a79cdb3b62ce4906a184, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3f:f7:28:b7:6f:7b:33:48:00:70:39:a8:0d:
                    fc:17:8c:a9:59:f1:e0:a3:4b:b3:c0:50:21:9b:35:
                    02:6f:02:c2:80:47:59:ae:17:43:44:93:86:f6:80:
                    da:2a:4c:70:65:31:3b:ba:73:10:44:87:2b:38:5e:
                    60:b3:6f:d0:d8:bb:d0:cc:bc:f5:1f:14:92:6c:37:
                    7e:3e:6a:0a:ad:a0:da:af:04:8d:a6:fb:79:b0:0e:
                    bf:56:90:8d:a5:77:5d:00:dc:df:fc:c3:4f:43:4b:
                    23:05:62:ce:0c:4f:09:fb:24:21:3a:a7:91:82:d0:
                    36:de:20:31:3c:41:2d:36:b1:fb:0f:c4:43:16:e2:
                    3d:fc:1a:51:3d:b9:83:c8:bd:7b:02:59:d2:16:36:
                    88:97:41:0b:0e:67:d8:fa:8e:c6:8f:5c:f1:79:72:
                    c3:df:07:7e:ff:d3:1c:04:4e:e1:e4:4c:52:f3:28:
                    b5:cb:60:58:40:57:28:3e:20:52:e2:ad:9b:4d:d7:
                    94:b4:cc:86:37:2d:af:2f:c3:9e:03:1d:a4:38:73:
                    96:a5:52:77:5a:b7:2f:61:96:aa:58:1a:cc:df:b1:
                    a5:2b:d6:16:c0:1d:72:dd:52:c3:7d:16:1b:29:fc:
                    57:48:2c:13:29:87:24:e0:b4:ad:d8:e9:79:a0:ca:
                    70:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E9:35:C6:06:4C:9E:05:AE:CD:A3:86:D9:81:0D:BE:C2:7A:FA:0A
            X509v3 Authority Key Identifier:
                keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2641e322-b5af-4c2e-a319-933fc59a77ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc5:1080::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:84:cb:12:d8:22:05:dd:5a:1b:53:6a:05:fb:ab:4a:ad:68:
         35:48:18:1c:d2:50:e7:6b:5a:f4:5b:51:29:10:47:45:c1:73:
         c8:e0:3e:53:31:d6:4e:4f:7f:75:11:3c:9e:7c:0d:e0:57:28:
         80:a3:5c:de:7c:10:2c:22:02:74:2c:fe:86:64:bc:45:eb:17:
         be:6c:89:ee:f1:a4:47:e7:0a:c2:83:86:ad:86:a1:27:0c:c0:
         a6:e3:94:77:61:a5:29:c1:11:5a:62:dd:e8:c7:88:d8:af:40:
         1b:e3:36:67:05:c1:f0:d9:d4:ed:d8:91:26:fc:c8:07:36:1f:
         cf:c4:62:65:df:05:9c:22:6e:37:0f:c8:2b:4d:fd:24:58:fc:
         a4:35:3e:00:de:42:3f:4f:02:5c:d7:c7:ec:93:e4:9c:0b:65:
         43:23:58:1a:31:49:0c:df:b7:62:6c:76:9a:50:cc:7a:df:eb:
         4e:f8:e1:56:c4:61:91:fe:7c:65:a0:b8:d8:7f:fe:88:cb:b0:
         9c:1d:0b:5c:86:16:1f:f6:b6:5c:ba:6f:42:33:d3:cc:f5:d8:
         06:f8:91:64:4c:7c:53:e2:35:57:fc:7b:fd:dc:1e:34:17:a1:
         16:aa:bd:d5:a5:cb:41:74:98:91:30:e9:ea:3c:86:ca:4d:04:
         04:cf:5d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----