Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57cdb107-9a3c-4e41-87e2-149f989f7fae.roa
File:                     57cdb107-9a3c-4e41-87e2-149f989f7fae.roa (raw, json)
Hash identifier:          2y6Vq/x1rYBifmaN7cYS6Q/lrz0eLtQDTPxSz9rMO8w=
Subject key identifier:   79:88:44:38:90:2E:62:6A:FB:3D:38:7F:5E:D1:8A:B9:4F:74:F9:2F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       374E525AB1A2FE426B3E641E757E7B75B5C4DA3B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57cdb107-9a3c-4e41-87e2-149f989f7fae.roa
Signing time:             Thu 16 Jul 2026 00:30:11 +0000
ROA not before:           Thu 16 Jul 2026 00:30:11 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d034:60c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4e:52:5a:b1:a2:fe:42:6b:3e:64:1e:75:7e:7b:75:b5:c4:da:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 16 00:30:11 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=c5fc3d6eefe1c1cd5468c71588359e2369ddaad2e3169d69b8ee6aadb3c771d2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:1e:ab:63:98:d1:f1:90:4a:f6:c4:e2:bb:
                    99:a4:7e:9c:75:06:04:00:84:df:16:16:73:d6:ac:
                    c9:3d:4e:bd:28:aa:97:28:bf:1b:23:10:26:9c:06:
                    ab:59:7e:8d:bc:59:de:ed:01:56:53:d0:71:6d:9c:
                    6b:6a:2d:87:1d:ee:8c:25:90:31:ff:d6:13:bf:1f:
                    6f:67:eb:1e:3f:b8:50:6d:bd:84:71:dc:d1:58:52:
                    a6:90:a9:87:c1:59:d3:30:49:5b:47:e3:87:bc:57:
                    c7:2b:7a:08:20:56:fe:e1:6a:3f:8b:2a:39:7a:62:
                    fd:5d:34:21:87:34:1c:b8:eb:cb:50:49:03:9e:11:
                    92:b5:9d:98:50:a9:a1:01:b8:81:65:d3:f7:b8:fc:
                    ac:72:c1:36:27:7d:9b:4b:5c:dc:60:80:9c:74:fb:
                    ed:69:06:1a:19:0e:66:ad:ed:b8:32:93:f5:ac:bb:
                    42:82:4c:ea:66:6d:91:3f:57:f7:26:20:5d:33:cb:
                    60:37:52:0e:0e:4c:07:a9:c5:cc:a1:57:60:3d:27:
                    8e:bf:7f:55:8e:ea:32:ed:de:d8:b2:86:fb:d5:79:
                    e6:d6:f1:d8:9b:d1:76:38:c5:0f:6e:20:45:ef:e5:
                    0b:28:43:4f:b9:55:65:b4:3b:82:23:98:0a:c7:57:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:88:44:38:90:2E:62:6A:FB:3D:38:7F:5E:D1:8A:B9:4F:74:F9:2F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57cdb107-9a3c-4e41-87e2-149f989f7fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d034:60c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         a5:c5:b3:f3:06:9b:c0:e3:e7:2e:fa:14:37:77:36:88:2d:35:
         26:4f:26:5c:d1:27:1d:e0:b3:c6:ba:b4:48:8e:af:2b:a7:8b:
         e0:a9:c2:b1:fe:8e:d0:b8:d3:8e:cf:26:95:01:cf:c5:b5:50:
         cc:3c:6b:e4:fc:43:16:0b:b0:a1:29:84:c0:e2:40:ea:31:8c:
         cb:cf:16:b6:68:8a:20:2b:a0:0c:7e:8a:0a:de:ec:fc:3a:9f:
         9f:44:fb:87:c0:04:6e:5a:6a:fb:19:88:ad:87:79:5d:9d:7b:
         8f:aa:64:a2:f4:e5:5d:1f:f8:ce:a8:8f:6a:de:0a:dd:5e:fa:
         9a:21:15:c7:f4:79:41:dd:38:a3:88:c1:30:f4:f1:83:fe:19:
         f4:b8:aa:aa:3d:0e:73:35:3b:18:d6:0b:9d:e2:58:9a:05:85:
         f9:3c:17:3a:28:4b:70:e2:0d:ee:7c:53:2f:00:80:58:7c:e4:
         6d:d2:38:32:67:94:9f:51:45:0b:93:87:ce:89:6c:79:78:e4:
         47:f3:d0:8a:b0:3a:4b:71:55:0c:ba:c0:2b:33:e5:c7:29:65:
         7e:bc:75:b4:77:f6:57:e7:a6:45:48:3c:e8:50:db:12:bd:3b:
         17:ba:aa:8c:f4:55:bc:22:ae:73:5b:6a:68:1e:eb:4b:1a:0e:
         97:f5:26:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----