Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a042ab1-69ef-4c1c-9a97-55c469cefdb9.roa
File:                     2a042ab1-69ef-4c1c-9a97-55c469cefdb9.roa (raw, json)
Hash identifier:          x6rVnxyVDSZYGVkK34a0/aC+QIz4+PQjqZVY56yhe2A=
Subject key identifier:   57:EA:53:0A:B6:82:E5:97:CB:CD:75:9D:16:D0:79:EE:1F:EC:02:79
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       72BCC707E2A5DC009ADCF929BF13C13304002A57
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a042ab1-69ef-4c1c-9a97-55c469cefdb9.roa
Signing time:             Mon 22 Jun 2026 02:40:29 +0000
ROA not before:           Mon 22 Jun 2026 02:40:29 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06b:4080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bc:c7:07:e2:a5:dc:00:9a:dc:f9:29:bf:13:c1:33:04:00:2a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 22 02:40:29 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=41d5788c615394d10e969fba19b94dd0647e22a73d26fc7ca03420a327ebc883, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:52:b8:ef:f8:0f:f7:8e:9e:e8:38:33:66:
                    58:8a:bd:9f:c0:97:c9:e4:de:3d:73:a0:8f:5d:b5:
                    f8:f1:d7:d6:fb:f8:c1:d4:2d:b9:85:2e:2d:ae:a1:
                    33:41:af:00:7c:f8:a2:88:94:ec:05:f6:46:36:25:
                    bb:f5:ca:7d:d5:9a:7b:5d:95:1a:b4:29:b5:14:ef:
                    a6:07:bb:b3:06:9f:ea:a6:52:b4:d0:7b:96:e1:a9:
                    2c:5f:b4:73:31:44:0a:06:a4:e7:48:f5:8d:1e:ff:
                    51:13:52:81:bd:0e:ce:2e:5e:0b:05:4b:91:9f:7b:
                    3f:71:15:29:f4:4d:8a:ee:34:ee:b8:c7:12:48:c0:
                    2f:c4:56:55:43:b7:83:3e:3c:77:5f:a2:0b:f2:fb:
                    40:ea:32:04:38:94:ce:02:a6:da:a9:79:7c:08:17:
                    50:26:79:9c:69:b5:9f:23:57:41:45:10:a0:c8:7a:
                    cc:af:29:24:a0:fe:32:ff:dc:c2:de:5a:14:0d:3a:
                    93:63:f9:89:fe:d8:59:09:b9:81:48:a7:66:f2:ce:
                    91:68:b6:1a:f3:f0:79:cf:e9:9b:a2:5d:81:9e:2d:
                    36:71:b0:27:a4:d3:47:22:ec:98:b2:f1:30:af:b6:
                    6e:3a:6e:99:0b:b0:8e:7d:dd:44:bd:ff:56:49:31:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EA:53:0A:B6:82:E5:97:CB:CD:75:9D:16:D0:79:EE:1F:EC:02:79
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a042ab1-69ef-4c1c-9a97-55c469cefdb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06b:4080::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:54:19:dc:ff:e3:68:06:71:35:d5:45:6b:1e:e3:61:75:1b:
         e4:e8:e3:63:1f:9e:d1:2d:3e:cf:2c:2d:ab:a7:47:b5:5c:e0:
         cd:78:27:60:94:39:39:b8:7a:6b:86:a6:20:e9:7b:d8:8a:04:
         8b:23:03:6b:7e:cd:a9:29:f0:09:67:0b:7f:83:5f:9f:9b:52:
         9a:a2:cd:a3:c9:c6:57:a1:1d:ab:de:2a:9d:43:33:e5:52:53:
         f5:40:f6:7a:6a:24:71:d2:83:aa:cc:40:c2:f6:aa:2d:79:7a:
         85:6e:b7:1f:48:85:bd:09:c8:40:a7:13:72:2e:92:bb:39:cb:
         cb:aa:12:21:73:75:89:eb:71:a3:b0:5d:6d:f3:ba:dc:0b:c0:
         41:c6:99:b8:38:d5:07:9f:90:fa:28:39:01:00:2c:d9:79:6c:
         fb:9e:db:b7:42:b8:ff:fb:e8:75:e5:61:6c:54:f3:7a:f8:98:
         64:a5:e4:e6:36:4f:68:16:c7:72:89:f5:7a:7e:8a:45:21:d2:
         b2:78:74:6a:65:f0:ba:fe:34:7f:6a:1f:08:4d:0e:16:7f:d8:
         2f:dd:40:99:a5:3b:dd:72:20:20:7c:af:c5:b8:78:2c:d6:12:
         f3:98:bd:1a:d3:76:dc:50:eb:84:2e:48:4d:35:d7:00:32:53:
         46:47:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----