Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0934ec3d-adc9-4da3-a247-ea0ad001df47.roa
File:                     0934ec3d-adc9-4da3-a247-ea0ad001df47.roa (raw, json)
Hash identifier:          CL9AT8I6fqoy/FeTr0AOkxSRKKpFEyxzrj1/6lt2rIw=
Subject key identifier:   54:48:DD:66:36:97:D1:41:C9:4E:92:E4:AC:A5:78:EB:69:9E:02:C3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       634C166CD733ED73BAF62EE03B0F5387A045948C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0934ec3d-adc9-4da3-a247-ea0ad001df47.roa
Signing time:             Tue 21 Jul 2026 01:30:21 +0000
ROA not before:           Tue 21 Jul 2026 01:30:21 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06a:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4c:16:6c:d7:33:ed:73:ba:f6:2e:e0:3b:0f:53:87:a0:45:94:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 01:30:21 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=15a46461ce482ea3992c6ac95f2acbed1e0f543e55c8064561e28fc4daecfa04, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ce:2e:3e:28:33:5e:2f:eb:38:06:ec:d6:6c:
                    9a:8d:d2:48:5c:dd:d4:39:48:3e:62:60:e3:7e:bb:
                    ee:ca:54:b2:8b:5a:d8:4b:46:14:e9:20:d2:a7:fc:
                    5d:b8:67:7a:6c:1e:bd:2a:9e:82:76:b3:8a:e4:e5:
                    24:ca:99:26:75:30:c4:37:a5:91:a9:54:df:b6:13:
                    bb:9b:7e:c2:b9:55:51:6f:b5:ac:20:cf:18:2b:48:
                    f4:2d:3e:89:f2:97:12:fd:83:d0:69:ec:7a:a8:4d:
                    ab:0f:db:12:af:e7:ad:14:cd:9a:cd:c0:70:b5:8a:
                    82:a2:2f:a3:13:7c:10:c7:4b:aa:37:67:24:de:a9:
                    20:b6:ab:6e:6c:90:9e:05:42:e0:c6:c7:bb:41:40:
                    00:c8:cc:5d:c3:7e:64:b0:5b:82:44:18:fe:84:02:
                    69:21:51:f5:43:22:5b:c5:ad:ab:41:ab:26:54:8d:
                    ab:54:ac:2a:60:18:d4:c2:91:a7:81:e2:9f:0e:e4:
                    a8:99:81:80:95:6d:c9:9c:dc:e7:e2:93:70:63:e2:
                    82:57:4d:5c:46:8d:ac:53:6a:7f:e4:50:e0:b9:42:
                    93:40:e2:5a:52:72:58:ce:d2:69:f7:5d:2c:e9:0a:
                    32:17:91:3a:df:14:4f:a7:17:b3:1a:25:d2:58:c8:
                    36:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:48:DD:66:36:97:D1:41:C9:4E:92:E4:AC:A5:78:EB:69:9E:02:C3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0934ec3d-adc9-4da3-a247-ea0ad001df47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06a:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:49:ce:a5:d1:87:df:77:22:d6:85:5b:bf:95:c2:7b:0e:cd:
         6a:f0:59:61:a7:9a:21:26:62:2c:29:39:c9:db:2a:dd:e0:1f:
         4e:ec:52:28:ba:5f:b9:6a:9a:42:a7:43:8d:8d:2d:74:ee:6a:
         d0:37:d9:e6:68:83:02:71:cf:7e:03:a1:3c:4e:dd:7f:08:f0:
         1f:55:42:ef:80:31:3c:63:f8:3f:ba:f0:15:84:46:36:8a:92:
         c0:b8:cc:d8:4e:72:03:c9:d0:98:35:67:22:6a:bd:98:cc:a9:
         74:dd:8a:a1:e9:a1:a0:5a:ef:ac:70:4a:1c:da:1c:87:b5:b3:
         6a:f3:dc:74:66:33:ec:6d:eb:1d:73:2f:4a:7a:b8:12:fd:00:
         74:ef:74:71:02:bf:99:ab:98:a3:f0:ba:aa:9b:0f:b7:d8:64:
         1e:db:82:90:15:2e:55:51:cb:ec:68:74:e3:96:80:06:23:8f:
         31:49:cc:1f:65:82:40:ee:49:66:9a:3e:61:fb:de:4b:e9:a7:
         1a:f9:e4:5d:71:2d:75:77:7e:53:4f:31:08:0a:1f:ba:a5:e8:
         9e:88:6a:52:25:8e:13:01:ac:50:15:08:52:62:cf:74:04:42:
         c8:6e:76:3c:05:dd:51:6d:76:01:f5:68:6c:ed:44:5f:6d:07:
         f5:18:f5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----