Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e4b894f5-1ea3-4cb8-b18b-66c26209110d.roa
File:                     e4b894f5-1ea3-4cb8-b18b-66c26209110d.roa (raw, json)
Hash identifier:          GbwqWFxtmMMG6YzQQl+IvBkREUc6TXKyLEvkNJHw70I=
Subject key identifier:   6D:80:98:20:16:59:5A:B5:24:7D:1D:21:8A:6B:D5:36:01:35:F7:5B
Certificate issuer:       /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial:       045642153B0168482129B0A32C5C0E2EFEA1DFCE
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e4b894f5-1ea3-4cb8-b18b-66c26209110d.roa
Signing time:             Sat 25 Jul 2026 00:40:08 +0000
ROA not before:           Sat 25 Jul 2026 00:40:08 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc5:1040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:56:42:15:3b:01:68:48:21:29:b0:a3:2c:5c:0e:2e:fe:a1:df:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
        Validity
            Not Before: Jul 25 00:40:08 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=d4937034ca5ff5ac1cf2e7b985b86ba816458feec43d693cbb7b463ed97e223e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:b2:f4:f3:d7:85:0b:cc:45:d9:7c:e4:ce:
                    e4:63:a6:d6:d4:8b:78:2d:67:ee:e3:fa:42:2b:57:
                    c4:3d:c6:ef:ed:5f:6a:51:a7:03:7d:01:94:cf:34:
                    eb:6a:50:7a:ec:bb:82:6b:7d:f9:f2:61:76:20:48:
                    9d:c3:e7:7f:f7:7e:79:5b:ce:19:c9:04:89:80:00:
                    75:dc:e2:e9:47:b1:01:0c:56:00:be:99:5b:dd:a7:
                    59:69:08:7b:b6:30:dd:53:d1:cc:6c:ac:03:57:ba:
                    3a:88:45:a3:78:dd:e1:b4:80:3b:69:8d:08:6c:d6:
                    e4:39:a6:4f:23:86:94:0f:39:d1:3c:eb:74:0d:96:
                    f8:e6:63:39:01:e2:c4:b0:a6:bc:1c:6a:af:8b:ab:
                    8e:34:4c:95:ea:11:33:ad:71:2d:ad:c3:78:68:f0:
                    0b:50:78:e6:ea:f9:b7:01:98:ad:3b:85:7f:68:73:
                    da:8e:de:35:16:ec:cd:bc:14:22:76:29:fc:b0:13:
                    05:83:5e:0a:9e:37:fc:7e:94:11:3f:52:d5:64:98:
                    39:65:be:e6:39:97:16:68:5b:26:d8:95:c6:18:1c:
                    29:a4:70:8a:b2:30:c1:c6:69:08:20:8a:8a:9c:48:
                    0c:52:b4:48:b8:25:46:c7:e4:d9:1e:98:e4:c0:d0:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:80:98:20:16:59:5A:B5:24:7D:1D:21:8A:6B:D5:36:01:35:F7:5B
            X509v3 Authority Key Identifier:
                keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e4b894f5-1ea3-4cb8-b18b-66c26209110d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc5:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:0a:f0:85:98:46:7c:27:7c:9c:8f:70:20:83:f5:83:38:ec:
         9f:90:da:6e:a3:39:96:a5:85:38:29:bb:2a:62:69:15:72:54:
         6a:45:07:54:a3:15:e2:e7:98:92:bf:a5:6b:a3:f4:e2:9b:7b:
         59:ff:df:38:17:46:d0:cc:2b:7e:84:bf:47:21:b6:42:27:8a:
         c8:8e:4d:8d:ad:b9:b1:0a:05:fb:ed:6e:33:19:9c:21:4e:8e:
         dd:b9:a5:5b:31:da:76:05:f2:26:ea:cd:ca:7f:e5:7b:b6:85:
         53:e7:3e:33:ba:2b:92:05:2f:f5:c0:6b:74:88:81:00:49:ca:
         ed:a2:47:f9:12:1c:3e:8a:20:3d:11:2f:66:71:5d:65:64:7a:
         a7:97:fb:2e:c0:3b:29:37:3e:a1:2c:09:39:d2:d6:b1:a9:23:
         17:8a:c9:03:15:4a:95:b4:63:9c:30:b6:d6:b4:eb:4a:6e:1e:
         7d:dc:5e:eb:f4:e7:50:91:f0:a6:5d:c5:be:dd:a4:3d:eb:c4:
         61:91:04:f3:6b:51:d6:d8:4c:81:a6:55:80:ea:28:a9:a0:9f:
         f0:e5:27:b8:ec:3f:d4:1e:6e:02:fc:99:b2:c3:18:85:60:55:
         46:a9:fc:03:41:2a:73:80:5b:38:da:e6:3b:a5:de:6a:63:a3:
         d6:d3:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----