Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/716a6c84-1e33-4881-b86c-cbc8a06c5f9c.roa
File:                     716a6c84-1e33-4881-b86c-cbc8a06c5f9c.roa (raw, json)
Hash identifier:          +/Du7V2bbN0Y5AOPqlarkIanXM7k/sXMvKojh2WYeBI=
Subject key identifier:   82:77:92:84:07:E6:A7:2E:AF:A3:CF:E6:FD:B1:74:06:C8:A5:23:B1
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       27CE251BD21E926F20056BB59EFFE270CE1D64A1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/716a6c84-1e33-4881-b86c-cbc8a06c5f9c.roa
Signing time:             Tue 21 Jul 2026 01:20:33 +0000
ROA not before:           Tue 21 Jul 2026 01:20:33 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06a:90c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ce:25:1b:d2:1e:92:6f:20:05:6b:b5:9e:ff:e2:70:ce:1d:64:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 01:20:33 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=5a468ce078526a6ad0289db743f178ef6b28620dd23e3997a2d4e2c6eb70f3cc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:83:cf:ac:8e:b3:03:7b:62:51:18:ea:cf:a7:
                    f9:d5:ef:ed:54:ed:26:da:6b:fe:9d:ad:f4:a2:56:
                    48:26:93:4e:a8:01:71:84:dd:c6:0e:4b:02:ca:9c:
                    ef:90:7f:c9:ec:cd:2c:4b:c4:2b:77:21:f7:30:bc:
                    33:70:1d:b1:a1:e9:b3:72:96:c6:6b:47:be:18:24:
                    97:4f:ee:42:33:d0:66:f1:28:bb:3a:8d:d6:6e:68:
                    76:9d:16:83:b6:cd:60:42:8f:3b:55:52:f5:0d:ed:
                    20:d6:66:52:44:b4:d2:de:d5:37:d9:5c:0a:4a:5b:
                    4a:67:20:6b:0c:d6:88:ec:34:14:c5:77:21:96:21:
                    c1:89:25:d9:1f:56:db:78:5b:f7:26:5b:3c:56:fd:
                    90:73:90:8c:b4:d9:55:8e:a2:6a:a7:ab:a3:1e:e1:
                    f7:93:09:dd:59:d1:a7:58:15:06:d2:78:8b:d8:19:
                    d5:45:85:68:ce:d3:8b:4d:da:71:12:a5:1b:c5:f5:
                    be:12:a5:86:62:7c:9b:85:8c:94:d8:b9:ca:ca:92:
                    50:15:33:df:92:6f:bf:91:64:52:da:f4:7e:6c:5b:
                    df:e1:fd:7a:36:ed:07:5a:4e:ed:e8:1d:eb:31:3c:
                    2a:c4:25:60:49:da:5c:8a:f0:28:2d:0a:3f:51:ad:
                    50:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:77:92:84:07:E6:A7:2E:AF:A3:CF:E6:FD:B1:74:06:C8:A5:23:B1
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/716a6c84-1e33-4881-b86c-cbc8a06c5f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06a:90c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:52:8e:96:f2:85:d1:83:3b:7a:64:d6:4e:fe:f7:54:b0:
         81:a3:69:e4:fa:f9:fc:82:91:69:e7:4c:11:f0:62:4f:75:ed:
         27:a5:de:4e:c3:53:48:da:5d:0f:2d:e2:03:48:86:ed:e2:44:
         4a:39:84:0d:41:d0:10:5f:69:d0:24:26:ea:26:69:05:83:27:
         ca:f8:95:f0:57:43:58:93:b3:5b:18:bf:3e:f1:ad:bf:5c:dd:
         45:c8:f7:77:3e:6e:4d:14:de:a7:72:2f:e2:3e:d2:c8:ab:68:
         1e:5f:8d:5a:ae:62:07:05:d5:f9:ef:3d:60:c5:48:3e:37:7d:
         f1:da:23:fc:58:18:e3:eb:4f:bf:5d:e1:18:ea:42:8b:fc:03:
         f8:cd:18:73:66:73:0c:c5:e8:cb:c4:43:5a:55:68:69:ac:a8:
         98:20:99:df:a6:d2:ac:69:70:22:8a:74:09:68:13:b3:d7:9c:
         d3:5c:02:81:c6:df:61:f1:d3:91:06:94:88:6a:8e:37:09:95:
         ca:68:89:3e:7b:2e:80:6a:43:1e:76:2b:d1:77:2d:05:4e:53:
         36:4d:78:1d:a6:85:5a:1d:45:ac:76:d7:41:5e:36:c1:b7:45:
         58:b8:dc:a9:ee:55:5a:a4:dd:b6:e0:84:04:12:20:f4:25:b3:
         23:d4:41:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----