Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/698aa0c9-36c3-4a47-847c-0c241221ba32.roa
File:                     698aa0c9-36c3-4a47-847c-0c241221ba32.roa (raw, json)
Hash identifier:          006iZ+knBv0EQabI0xH/kxXJTuhDI+cJbHBscNBvNi4=
Subject key identifier:   86:CF:CD:E5:A8:CE:AD:05:3E:0A:4C:58:EA:A8:0C:0B:DC:DE:A5:E1
Certificate issuer:       /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial:       55D835FC48ED57D5F61364D5E0B37C2F8A091A05
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/698aa0c9-36c3-4a47-847c-0c241221ba32.roa
Signing time:             Sun 20 Sep 2026 00:00:10 +0000
ROA not before:           Sun 20 Sep 2026 00:00:10 +0000
ROA not after:            Sat 19 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc6:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d8:35:fc:48:ed:57:d5:f6:13:64:d5:e0:b3:7c:2f:8a:09:1a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
        Validity
            Not Before: Sep 20 00:00:10 2026 GMT
            Not After : Dec 19 23:59:59 2026 GMT
        Subject: serialNumber=ce630e3604aa9787c938b81096e8e93e55a7da348336e3d3e6abda0d5940daa1, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c9:ce:f6:6f:7a:a9:2a:da:c3:26:5d:15:5d:
                    8a:84:27:39:a6:e0:d0:18:b8:a3:64:2c:87:cc:e5:
                    1d:64:87:99:ef:70:32:2b:74:28:f9:78:0d:fb:ef:
                    f1:3c:d6:3c:47:07:61:2b:c6:1b:b5:ca:8c:ca:8f:
                    2a:7d:c7:60:66:e0:da:07:75:df:22:02:c9:45:7f:
                    46:4c:6f:89:81:ef:1a:92:7c:04:fc:fb:c2:4a:96:
                    a6:af:fc:8a:8e:5d:b4:31:d5:56:2b:17:99:57:6e:
                    10:cc:7f:d2:4d:35:30:2c:8c:9f:07:ef:65:17:99:
                    64:1f:6b:65:89:e2:95:6f:e5:98:9d:d2:f2:c6:34:
                    8d:a6:0b:c3:85:44:f7:c1:1a:e3:55:b6:a0:49:7e:
                    a3:c5:4c:d9:8d:ec:91:46:13:c3:64:29:9b:c9:8e:
                    82:c0:5a:62:2b:5c:aa:d9:45:91:51:75:72:7d:ac:
                    af:82:6e:e9:2c:88:e6:ac:d7:17:a5:fb:82:56:bd:
                    74:b9:2f:f2:c0:56:09:e1:64:73:ba:d4:ba:5e:9e:
                    5b:cb:0f:e4:27:68:a8:70:51:ce:f1:f1:6c:2c:f0:
                    38:e0:6d:b6:34:8e:0f:63:0e:6d:a8:7b:25:b8:02:
                    8f:b9:ee:88:46:5b:7f:70:50:3e:1c:8d:3a:04:90:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CF:CD:E5:A8:CE:AD:05:3E:0A:4C:58:EA:A8:0C:0B:DC:DE:A5:E1
            X509v3 Authority Key Identifier:
                keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/698aa0c9-36c3-4a47-847c-0c241221ba32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc6:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:a2:7a:48:95:92:3c:e5:62:97:53:a3:04:0c:c3:44:06:60:
         73:ad:7d:81:5b:75:2b:ed:ca:45:f9:10:66:1e:b4:e1:69:5e:
         4f:8f:e4:cd:51:66:a3:6a:9b:0c:84:a9:e5:73:56:c0:0d:87:
         a3:4e:38:3c:b4:aa:45:71:6e:f2:b0:fd:7d:f1:a5:ea:2c:10:
         a5:ea:d8:a6:af:b1:06:bf:e6:ba:6b:43:96:a2:9d:a5:46:61:
         c4:96:e1:01:5f:68:2b:e7:7f:1b:1e:cf:45:a8:e5:cd:7b:8c:
         31:82:00:c4:09:4f:eb:75:7f:cf:d2:8c:2a:2c:48:67:05:f5:
         8c:ee:df:5a:60:0c:c1:4f:5e:59:f1:20:d8:1d:c6:f5:2a:12:
         ee:52:d5:d1:01:da:5e:94:e3:50:f1:91:49:b6:ec:5a:be:e3:
         f1:ed:c9:81:d1:69:a8:a3:ad:5c:33:e5:c4:7c:14:c0:db:df:
         e6:e4:b3:2e:30:d6:f6:e4:82:3b:6f:14:0b:07:f0:07:a1:3a:
         fc:86:bc:48:68:0a:f3:bc:d6:2e:73:88:52:fb:13:d7:fb:f8:
         60:1a:2b:ec:a4:0e:56:f1:8a:b0:f4:8a:0b:b2:20:61:8b:19:
         d3:7a:30:a0:c5:24:b9:cc:da:0f:3a:90:9d:8f:2d:e4:0b:d8:
         f2:b5:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----