Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa
File:                     786da755-a3b1-48c5-b605-b8cfe294d18b.roa (raw, json)
Hash identifier:          H6drhMJqVS3duSi6l1eUQUL13qS6WjP3kKI6XrsPaew=
Subject key identifier:   70:4F:94:66:52:35:6E:0A:20:24:63:4E:65:ED:E8:45:79:78:13:C9
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       46386C2FD015945616F9D59CA7FD566E7295BB2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa
Signing time:             Mon 06 Oct 2025 18:10:07 +0000
ROA not before:           Mon 06 Oct 2025 18:10:07 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:38:6c:2f:d0:15:94:56:16:f9:d5:9c:a7:fd:56:6e:72:95:bb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct  6 18:10:07 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=8db366884ad8c25e580f47f8c5295800b0529119a3b9ae78985cf86cfb7b15b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:7d:ff:08:12:8e:9d:cf:06:84:c3:f4:66:
                    57:91:41:a4:ad:22:63:58:88:8a:78:cb:c7:b8:22:
                    32:93:0b:4e:f1:90:05:3a:d9:b7:6c:67:58:77:4b:
                    6b:32:6a:49:26:af:bb:dc:09:1d:ae:63:db:21:fe:
                    fc:37:0c:cc:5d:b9:02:20:e3:b7:3e:2c:31:5a:ea:
                    a9:9e:e6:be:ad:aa:1f:62:4b:93:4a:8f:00:fe:f6:
                    03:7f:45:66:bb:62:df:e2:79:4c:8a:ee:e4:5a:18:
                    f4:54:bb:e4:83:6b:01:11:30:b8:4a:8d:20:89:87:
                    1c:76:0c:35:c5:82:3d:70:c4:35:47:f2:11:ce:e7:
                    5b:73:c8:53:43:bf:64:d9:e7:d8:e6:bf:63:ac:3e:
                    9d:88:3d:1c:0d:a7:b2:72:ce:02:00:0a:4d:da:03:
                    0e:e8:a8:89:6c:ee:26:bf:6e:f2:0f:5a:7b:b4:c5:
                    c7:49:54:d8:98:52:7b:e9:01:28:27:2b:2e:b1:9e:
                    ef:b1:b5:2f:f6:b6:e8:00:4f:2c:01:48:a9:98:43:
                    3f:d1:12:d1:e1:1c:d4:1f:f3:b9:0e:c7:50:90:13:
                    3b:60:40:2b:08:ee:1c:70:88:9d:03:b6:7e:54:b6:
                    86:79:9a:52:37:88:d7:9b:89:a7:38:d3:7d:c2:86:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4F:94:66:52:35:6E:0A:20:24:63:4E:65:ED:E8:45:79:78:13:C9
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d040::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:85:28:44:09:7f:43:c8:71:7e:d0:35:9f:25:4b:57:7b:2c:
         db:33:b4:82:0f:2f:81:57:e6:90:97:8a:50:72:b7:c3:ff:8f:
         7e:18:ed:ed:2c:45:78:b9:82:41:f7:96:43:1a:de:4d:06:3a:
         39:72:a5:58:c7:ff:50:f5:8d:fa:15:4b:b7:29:da:cc:db:f9:
         75:ff:85:ae:99:36:8b:5d:0c:c6:a1:33:02:79:63:f0:e8:37:
         85:06:a2:c7:5f:89:a5:04:bd:14:da:93:a9:c2:30:5b:0e:43:
         e9:38:b0:89:28:41:9a:fb:eb:bf:b6:cb:61:b4:c8:30:6e:74:
         9b:09:99:b0:30:f4:15:c8:2b:22:7e:fc:55:6e:fd:7b:f2:b8:
         a2:8d:32:fa:7e:17:ac:d1:50:2d:8b:79:71:ca:fd:74:75:1e:
         3f:66:17:1c:fa:07:ec:10:cb:e0:54:d1:65:ee:14:d0:5e:47:
         0c:f9:f7:12:b8:0c:59:75:fa:f1:6a:10:3b:64:ab:c8:c1:65:
         44:07:ff:b1:63:b9:93:6d:48:54:9b:e1:2f:b8:61:48:d5:16:
         5f:46:2f:e8:72:bb:a6:58:d2:9f:e4:d7:0b:de:26:97:c2:2e:
         40:89:61:f2:c1:14:ca:ab:eb:45:56:32:47:0b:70:a7:15:2b:
         07:bd:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:03 2025 by rpki-client