Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3136a322-f9d4-4c77-b48b-3a4a5b2d3d55.roa
File:                     3136a322-f9d4-4c77-b48b-3a4a5b2d3d55.roa (raw, json)
Hash identifier:          Y7ymy3uaAGZx1FxjS1dxBC9a17gLAjKW+kVBuntrbUg=
Subject key identifier:   CD:8C:7F:F7:BF:D4:86:2F:F3:13:5E:8C:62:FD:5F:4B:36:BB:1E:20
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       01BE303A8B5FE30D4C3D381E07957AA39052F334
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3136a322-f9d4-4c77-b48b-3a4a5b2d3d55.roa
Signing time:             Thu 16 Jul 2026 00:40:31 +0000
ROA not before:           Thu 16 Jul 2026 00:40:31 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d020::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:be:30:3a:8b:5f:e3:0d:4c:3d:38:1e:07:95:7a:a3:90:52:f3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 16 00:40:31 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=3d6247dfcd7287ca21c9bfd6006e2e95ce215e188e715831504377c8b30968ea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3e:ba:5a:8e:ff:02:41:cf:89:49:08:85:db:
                    21:0a:e1:63:d0:59:04:3c:36:8c:49:6c:7f:04:0a:
                    36:33:ed:13:7b:4f:d1:c2:80:79:24:50:4e:ef:10:
                    a9:44:9f:60:d1:5c:45:9b:a6:50:16:c4:7f:7b:ad:
                    c9:5a:3e:d0:9f:05:aa:19:09:c4:c5:1b:ad:ed:2f:
                    b8:12:38:ba:19:c7:06:4d:20:e8:63:2e:de:24:ea:
                    da:30:f5:61:89:d7:09:68:07:a3:3b:65:a5:c8:8d:
                    9e:d7:2f:ff:c5:4f:09:76:98:00:05:5d:3d:10:0f:
                    16:c0:27:fe:c8:aa:87:8d:50:c9:57:22:44:05:b6:
                    8a:b8:7e:1b:cd:f2:44:1c:8c:f5:fb:97:36:6d:6a:
                    4f:d0:8a:cd:e9:a0:ae:50:a3:5a:28:ef:88:06:86:
                    f2:08:e2:26:d4:d9:94:35:47:b1:65:fa:53:21:35:
                    4c:5a:de:3a:0c:06:40:7d:19:79:a4:24:b7:8b:6b:
                    1f:83:76:b4:20:dd:f8:ff:80:e8:fc:1e:4d:85:0a:
                    ce:90:ab:fb:5a:d1:ea:ca:56:ac:82:72:fe:24:44:
                    f8:1e:5e:d0:4e:a3:34:9d:1e:a1:1e:48:f5:11:ec:
                    5d:66:a4:51:2a:bd:b4:a4:b1:4b:69:ee:fd:40:b3:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8C:7F:F7:BF:D4:86:2F:F3:13:5E:8C:62:FD:5F:4B:36:BB:1E:20
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3136a322-f9d4-4c77-b48b-3a4a5b2d3d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d020::/28

    Signature Algorithm: sha256WithRSAEncryption
         b5:ce:0c:13:ea:ab:24:d9:b7:a2:b1:1c:27:2a:97:ea:3e:99:
         f7:1f:51:4f:01:0f:6d:ec:c9:5d:2e:e9:c3:f9:a8:b5:5e:c5:
         20:3d:03:47:99:6a:1f:46:67:03:4a:00:52:88:00:5b:80:c0:
         96:f6:e5:0b:2c:d4:2d:0a:6e:24:8b:ce:77:f3:3d:2b:e9:10:
         cb:9c:06:52:ae:40:a5:e7:48:70:63:d4:ea:4b:11:4c:29:c9:
         3c:17:75:68:36:2f:55:f8:44:cf:0c:e5:c2:85:34:10:6a:78:
         88:f6:1c:d8:99:50:3c:18:f5:64:41:10:31:46:75:f8:e0:6e:
         52:a0:14:3f:77:6e:22:e6:85:5f:e8:19:99:1c:10:36:70:70:
         e3:2d:2e:78:5a:d0:74:a6:3c:f3:bb:e9:b4:ca:ed:f9:4b:ad:
         b3:42:0a:67:04:ab:d6:8d:43:4e:66:67:37:75:3b:d1:95:7d:
         03:ba:2c:06:95:c1:e5:c8:0e:e8:76:28:9c:43:e1:f1:00:ad:
         ba:7f:37:e9:5c:b0:6a:68:e5:93:7d:75:8e:16:84:44:58:93:
         00:56:a2:91:df:5a:93:69:b2:60:87:b3:da:85:ea:d3:4d:4d:
         56:ea:af:27:f1:a2:0e:60:6a:44:0d:fc:43:2f:6c:6e:fb:48:
         a9:bd:58:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----