Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36c4d3f7-0d57-499b-aea0-8244810d5897.roa
File:                     36c4d3f7-0d57-499b-aea0-8244810d5897.roa (raw, json)
Hash identifier:          zd8vanBYTQpZTNjkj3gv9MsSTE/RMEpeu1TuTev0sxQ=
Subject key identifier:   5B:60:81:84:FA:95:A1:C8:55:C3:A1:13:7B:5C:ED:6C:92:9A:23:99
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       14FDBB9FA6CF092FA9694A396227120B718FF074
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36c4d3f7-0d57-499b-aea0-8244810d5897.roa
Signing time:             Thu 23 Jul 2026 15:20:28 +0000
ROA not before:           Thu 23 Jul 2026 15:20:28 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fd:bb:9f:a6:cf:09:2f:a9:69:4a:39:62:27:12:0b:71:8f:f0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:20:28 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=bf0b809024946783c91d0f0191c1d47180c05d6c34ba04925dc5f27f7a594812, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:6d:6b:56:a9:72:83:17:8f:bf:01:52:1c:
                    65:bb:49:7c:9f:5d:d9:e2:28:0a:8a:97:92:58:a8:
                    c1:b7:2d:d9:ec:02:b7:7a:6e:67:27:b2:1f:ff:fb:
                    59:a5:2f:56:e9:46:48:ef:ff:81:ef:4a:64:44:f3:
                    e4:97:1f:6f:3e:d2:ef:6b:2c:d9:fe:bb:c2:a8:06:
                    53:3f:e1:51:cc:0b:6d:86:fd:1b:8e:78:02:f7:da:
                    76:64:94:1f:98:eb:68:bf:5b:52:ec:66:11:ae:de:
                    b9:bb:58:d4:b8:5f:7c:08:37:63:73:f2:14:3a:c9:
                    78:ce:51:7b:07:de:7f:19:2d:28:6a:e4:fb:fa:e5:
                    67:58:1a:57:c8:f3:8a:f1:0f:ff:79:ad:e8:8e:91:
                    95:df:5d:80:6c:fc:2b:04:cc:6d:18:ad:54:ab:f2:
                    42:ab:dc:04:76:a3:b0:b9:1c:d4:c3:f1:d6:67:09:
                    71:50:94:b8:2d:5d:74:85:e1:85:69:ee:47:5e:a3:
                    81:83:82:00:7d:1a:63:31:b9:b3:22:37:46:89:23:
                    3a:2e:d5:99:49:c8:90:97:9c:17:91:88:9b:76:10:
                    5b:43:96:4f:5e:5b:30:ca:b3:92:b7:40:d6:8a:ae:
                    af:8e:89:08:e9:ba:2c:42:98:8f:69:77:86:a5:42:
                    d1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:60:81:84:FA:95:A1:C8:55:C3:A1:13:7B:5C:ED:6C:92:9A:23:99
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36c4d3f7-0d57-499b-aea0-8244810d5897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:e8:a6:de:40:3e:73:f9:3b:e7:d0:33:5a:c0:73:fc:81:96:
         ee:6f:4c:5c:ce:05:19:47:03:d0:98:85:24:50:70:2e:7a:08:
         83:58:09:1d:cd:4e:88:0d:2b:55:b2:12:cd:4f:b2:5e:04:83:
         f1:87:9e:64:35:68:a4:f0:40:65:c7:c7:78:a4:f5:c1:02:e7:
         46:28:96:6f:3a:74:a3:51:b5:63:29:6a:75:e8:7e:96:d5:cc:
         81:a2:b3:c5:49:9b:df:e4:c9:79:4c:85:d5:53:49:72:32:c4:
         bf:ec:84:70:21:cd:20:13:0a:0a:b4:39:43:e6:05:5a:c2:03:
         27:75:a3:13:69:e1:9b:69:68:fb:9b:77:ee:ac:ba:20:7e:94:
         e9:a0:3c:bb:4a:e1:bc:93:46:17:4e:f4:77:8f:fc:88:2c:1c:
         3e:98:fe:69:55:f5:54:39:bc:a3:e2:9f:ac:e9:81:6a:e4:d0:
         67:5c:0c:5a:86:64:82:7e:a3:1e:e3:3b:1b:9e:95:4a:c7:8f:
         97:49:68:23:5d:f7:c3:1c:f0:d4:e7:9d:0b:95:6f:47:83:a9:
         c3:6d:ac:6c:08:4a:e7:3d:f5:a5:7e:bd:9a:4d:1b:7a:bf:b0:
         62:38:a4:78:e2:e1:cb:61:8c:7c:25:d9:57:f7:cc:26:b1:f4:
         58:c1:3e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----