Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
File:                     356f05f3-9814-4715-9f58-bf044bf5d10f.roa (raw, json)
Hash identifier:          x4shGyp5v5qNRI+0JLdnIwIiMw1d8TaHt0p/D/XQtUg=
Subject key identifier:   C2:99:0F:32:C3:BD:EB:A9:86:EA:EF:F5:5C:38:AF:FF:FD:7A:57:5C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2F993557EE64884B766DF1F6498247C899B8D028
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
Signing time:             Thu 23 Jul 2026 15:20:08 +0000
ROA not before:           Thu 23 Jul 2026 15:20:08 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:880::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:99:35:57:ee:64:88:4b:76:6d:f1:f6:49:82:47:c8:99:b8:d0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:20:08 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=bbb51ec446829126c964d6a5752250b61568881499d1213c257da2369be5288a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:44:07:f3:f5:d8:05:8e:58:d1:18:b0:57:97:
                    86:ff:9c:61:81:47:e9:e8:3d:2c:a1:cb:03:8e:23:
                    9c:cd:05:a8:bd:d0:0c:ff:e2:2c:f9:56:27:0f:8a:
                    89:c2:66:3d:e0:cf:e5:83:93:fd:2b:cb:b3:f3:78:
                    e5:c5:d8:b2:08:18:08:b0:e8:cb:69:06:d4:0e:a1:
                    d8:98:2d:4b:8c:aa:91:70:ae:37:27:73:ba:61:b7:
                    01:d3:3f:b5:20:5b:17:60:81:3c:e7:d7:9d:d4:90:
                    8a:f8:10:0a:50:75:c0:15:b1:96:4c:41:c7:d6:d8:
                    7a:d3:2a:a1:56:1e:1b:7d:8d:d9:2d:5d:df:c6:34:
                    8f:ab:3c:f4:87:18:db:fc:67:6d:f5:24:a7:3d:23:
                    64:8f:ce:82:7b:28:a3:7e:87:60:a9:d8:b5:99:21:
                    fa:dc:5b:1d:e5:e2:b8:c1:a9:7c:a9:88:43:0d:fb:
                    9d:9f:77:77:a1:df:c0:c5:22:4b:b8:8e:5c:c8:e1:
                    0d:ee:9f:69:8b:ba:d7:e7:76:a7:89:18:ae:af:a7:
                    89:9f:2e:ad:81:d1:58:f9:82:85:57:a2:6d:84:35:
                    7f:c3:3a:99:73:77:b5:67:c6:78:b3:69:c9:36:b2:
                    8d:7a:60:e2:37:ca:ac:de:f6:3a:a2:71:2d:5f:ee:
                    46:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:99:0F:32:C3:BD:EB:A9:86:EA:EF:F5:5C:38:AF:FF:FD:7A:57:5C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:880::/46

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:95:36:b2:a2:49:22:95:fc:09:36:3b:cc:09:28:0b:67:
         3e:cd:40:fd:dc:bb:91:8e:ca:4a:5c:4d:93:55:d7:d0:31:1b:
         a0:f6:88:77:bd:45:17:40:45:bd:d8:e9:32:4a:af:05:32:18:
         7a:ef:ed:93:8f:88:7e:c0:9e:ed:54:50:e1:cf:cf:9b:fb:c0:
         7f:d2:92:07:1f:50:36:0a:f8:55:71:78:27:a3:11:54:70:ce:
         af:c6:06:a2:25:81:e4:3a:52:f7:1b:60:fd:e0:3b:9f:a3:ae:
         3d:4d:7e:c9:f2:90:e4:a8:fe:e4:e7:ca:92:bb:f4:18:5f:ca:
         e3:db:7c:cc:19:72:21:3e:26:5e:4c:81:08:3f:f4:c1:d7:b2:
         6f:6b:6f:21:40:37:50:78:c0:3a:0f:48:7d:25:99:34:64:a6:
         67:36:97:0c:75:6e:50:26:e9:6b:fb:e2:af:4b:0f:af:41:f7:
         9b:f7:8a:5a:25:6c:bf:b5:7d:07:87:8b:1d:ca:c4:e7:47:c9:
         ad:e7:6c:d2:b6:45:47:1a:e0:22:14:06:79:21:e7:63:90:85:
         ef:a7:f9:0b:ed:2a:a7:45:be:71:45:0d:10:73:26:9c:1b:12:
         26:97:6d:63:ba:98:ca:fd:29:83:3e:d7:c2:3d:d9:aa:8d:30:
         59:cf:58:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----