Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
File:                     46265eea-a395-4578-afc8-0bf551de327d.roa (raw, json)
Hash identifier:          w0YJ0LU959m5pNs2BB1YgT130tjA3c2WBY7Vt8EZ110=
Subject key identifier:   18:58:9C:C3:CA:C4:C2:27:76:7B:F3:F9:CE:DD:34:EB:B6:EB:AA:E9
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       332A895A74EC3745D9E3AE21B780CFE2D69043F8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
Signing time:             Thu 23 Jul 2026 15:20:48 +0000
ROA not before:           Thu 23 Jul 2026 15:20:48 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:c0c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2a:89:5a:74:ec:37:45:d9:e3:ae:21:b7:80:cf:e2:d6:90:43:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:20:48 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=003b8397e374d0950d167a006d7ee4b7f3cb3bb5338a2e8dc04f4c36b01694c4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cc:7a:c1:20:c4:12:97:f9:a8:55:fb:ba:2a:
                    64:45:49:2a:ec:6e:ec:1d:31:e8:e1:56:2b:a3:d2:
                    e1:b3:55:d3:7a:a9:cf:d3:d4:58:34:96:b4:f5:f7:
                    b2:ad:9b:31:1a:f9:7c:71:bb:80:53:7e:63:7d:05:
                    85:9b:84:2d:6d:69:0d:5e:03:ba:0e:95:e8:b7:a8:
                    58:5f:f1:4f:b1:4e:7c:e3:16:23:43:ab:26:02:57:
                    37:0c:82:5b:11:31:4a:5e:a0:9c:19:05:47:20:b9:
                    8b:84:85:39:ac:06:ed:27:36:cb:67:ae:08:36:6b:
                    ea:ae:8d:e9:30:d5:f4:ba:8e:db:87:4e:f4:7f:69:
                    d8:d5:1c:29:ed:9f:6c:a5:a1:71:52:92:09:32:0d:
                    26:6e:c8:59:31:0a:da:65:fa:b1:0d:d3:3e:88:1d:
                    97:23:60:e9:cf:8f:3c:17:59:79:4e:4d:26:eb:b3:
                    3f:2b:2e:be:eb:33:98:30:7d:a9:e1:e8:9f:2e:be:
                    e5:6b:43:a2:31:6d:43:88:9d:72:b4:d2:b7:ba:4f:
                    cb:cc:f4:fb:5a:14:c9:79:32:a4:e6:0c:bd:b5:02:
                    7d:b2:a7:1c:7b:af:57:df:91:3e:a9:67:10:18:3c:
                    64:7a:37:b3:ca:23:4c:ff:c4:7e:38:1e:97:27:fd:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:58:9C:C3:CA:C4:C2:27:76:7B:F3:F9:CE:DD:34:EB:B6:EB:AA:E9
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:c0c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         b8:0c:9c:06:03:96:72:b3:02:4d:de:7e:4e:e0:1f:dc:60:19:
         5f:81:39:6c:76:8b:df:5f:da:46:9f:73:e6:f6:da:c4:85:24:
         e6:0e:ba:53:e0:d0:d7:dd:39:47:ba:68:98:96:74:81:c1:e5:
         fc:f6:fa:43:90:e5:17:01:94:f5:01:56:56:f4:9b:1e:03:7f:
         9f:68:f8:88:79:00:f6:66:88:5f:ff:6b:a2:16:c5:26:1b:05:
         84:6c:3e:5f:8e:dc:8f:a7:7a:96:8a:0a:b6:90:b3:00:9c:3c:
         d3:80:26:bb:60:81:1e:51:46:ee:63:ee:72:2c:ec:a8:95:3b:
         6c:cf:c0:20:25:75:a3:7d:42:a3:e9:35:c3:03:48:85:a6:b0:
         0c:7c:6d:af:1e:b3:ea:73:83:d8:f6:08:9b:ce:64:73:31:32:
         f7:a3:a5:4e:36:f5:21:89:cf:30:64:fc:71:a5:52:b3:c0:8f:
         0a:d8:e5:af:32:09:17:c9:f6:48:e1:b2:e9:9b:53:04:9b:7f:
         c9:f6:db:c6:1f:eb:44:87:49:05:67:eb:e6:bc:4b:56:fa:ab:
         41:79:1c:4a:77:2e:fa:ad:8e:d9:d0:23:5f:f2:6b:d0:38:71:
         f3:6c:d4:9e:0f:df:cb:e6:28:45:79:0b:eb:ca:a6:dc:0c:18:
         c8:d5:98:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----