Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa
File:                     5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa (raw, json)
Hash identifier:          5iyrYnZFFP4vVujWr4zaJYshXtbVYAxYjDWzu69nAKU=
Subject key identifier:   DD:EC:51:4D:BF:43:60:B7:19:56:45:15:7E:1C:EE:38:44:CD:13:38
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2CD190AC01BB55321B063F89B64D1909FAE28EE6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa
Signing time:             Thu 16 Jul 2026 00:30:18 +0000
ROA not before:           Thu 16 Jul 2026 00:30:18 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d02f:800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d1:90:ac:01:bb:55:32:1b:06:3f:89:b6:4d:19:09:fa:e2:8e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 16 00:30:18 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=6c8c582300a1cd90f9b6f904adb2b6e1515cf4e9eaa88777555c1d4b97765e0c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:f9:cd:33:8d:11:c2:9c:8b:e0:02:53:74:
                    63:5d:9b:5b:2e:b0:32:6b:8d:a7:71:76:8a:f7:f6:
                    4b:7c:bf:84:e1:8a:79:9d:66:e4:6b:2e:77:55:f6:
                    90:f3:eb:9a:e3:05:bb:ab:d0:89:84:f9:13:bb:c8:
                    6c:2b:15:f6:4c:e6:69:f9:55:3b:68:fa:de:92:77:
                    da:bd:a7:89:29:18:ca:da:e1:b3:60:ce:2d:8c:c9:
                    59:d6:7b:34:c8:93:fc:68:dc:26:ba:ab:2a:ab:56:
                    dc:eb:1d:36:5e:ac:b2:c2:cc:ce:9c:29:e2:02:60:
                    d6:76:f2:d9:2a:a4:2d:7b:f8:a6:4b:ee:ad:e9:75:
                    f4:e4:cf:80:a7:a7:3c:3c:d2:30:3a:a4:97:f6:0e:
                    34:76:4c:72:7e:41:86:bb:d8:f2:60:83:1b:a6:98:
                    fc:c7:81:e9:4a:64:71:aa:df:a4:d4:1c:c6:23:12:
                    6c:ca:c6:4b:dc:45:7e:90:b5:12:c8:cd:88:e6:f4:
                    e6:30:6a:50:ec:2f:3c:76:55:bb:c5:db:a2:c0:c6:
                    1b:de:82:6f:77:8c:dd:37:f9:1c:bb:20:2c:4d:87:
                    8f:58:15:55:90:ed:7e:5f:0f:0d:6a:40:14:06:bb:
                    83:c0:15:89:e6:c4:8c:72:de:bb:8f:a2:19:17:ec:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EC:51:4D:BF:43:60:B7:19:56:45:15:7E:1C:EE:38:44:CD:13:38
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d02f:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         6b:8f:fb:7e:3a:ff:c1:d6:fe:ce:2f:12:83:c9:dc:47:f9:33:
         57:c3:9f:11:05:5d:88:57:6c:67:0a:7d:62:1f:e9:20:03:0b:
         ef:71:b4:fb:e9:23:6e:ba:e7:af:85:b2:6b:20:d3:d0:8f:0e:
         b6:4a:eb:e8:de:a3:3b:5f:f6:cc:4c:63:8d:83:3f:34:2a:8b:
         76:0a:d1:ab:ca:b5:4d:dc:75:2a:a8:64:0d:35:6d:a7:d2:73:
         8f:ff:d8:c5:80:d2:65:98:03:88:f5:29:b6:b9:f2:cd:54:50:
         38:e2:65:83:90:9c:10:21:e1:0e:8e:29:66:4f:e8:ed:c7:90:
         39:40:48:32:c7:53:06:b0:74:68:10:6c:3f:61:57:46:db:62:
         96:9b:84:f6:68:55:38:3b:29:12:b0:bc:99:d7:4f:04:d5:f0:
         50:cc:ca:86:d9:39:8b:9e:e0:bd:97:57:0a:3f:87:11:0a:93:
         5e:d2:70:0e:d4:3b:db:83:f0:24:cf:5d:7e:1c:8c:25:e9:19:
         3d:52:63:fd:9a:b9:f4:98:c7:1b:c2:ee:e5:a5:43:31:e6:cd:
         e1:8c:91:18:b4:d1:c3:99:0c:2c:d9:51:54:ac:95:a9:1b:3d:
         02:09:38:8f:7e:8d:b3:9b:62:17:53:6f:f5:2d:e2:95:b9:1a:
         d1:f3:e1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----