Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa
File:                     786da755-a3b1-48c5-b605-b8cfe294d18b.roa (raw, json)
Hash identifier:          k4/J97KfKc9UGmJgpOXAXqJQv5Oy+/NiGeww3k4aXjs=
Subject key identifier:   1B:0A:45:CF:D4:B2:F8:B1:0F:E1:D8:CD:47:D8:7E:F3:F7:DE:BD:9D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       64B41D0D25CD354617BF1685472A8B53F2C0A4AE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa
Signing time:             Thu 23 Jul 2026 15:21:06 +0000
ROA not before:           Thu 23 Jul 2026 15:21:06 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b4:1d:0d:25:cd:35:46:17:bf:16:85:47:2a:8b:53:f2:c0:a4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:21:06 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=aca02b211824c3094e2be9e38a197965ea5ea456eae65be853da717ae176168d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b0:55:43:ad:83:ff:cb:c8:d1:71:15:fc:45:
                    c5:d1:6e:37:f4:f3:1e:c2:7a:f9:86:52:df:5d:81:
                    27:a1:4f:69:92:b0:c2:f8:5f:35:6b:5a:16:96:d6:
                    8c:08:95:21:39:9a:ab:3c:da:89:48:54:16:76:75:
                    b9:4e:88:ea:2c:7a:7a:67:ad:94:64:10:d2:52:93:
                    7d:1e:22:e8:81:d0:a3:39:81:b8:4a:5e:a0:3c:bb:
                    86:71:1a:ce:77:de:1e:45:4a:44:14:84:f2:5e:e7:
                    b4:8a:20:d7:d9:aa:58:f7:54:ef:98:99:97:97:6d:
                    27:40:c7:5c:e5:32:ad:96:4d:00:84:8d:72:f7:44:
                    ee:e7:e6:20:76:d0:45:48:9e:b4:20:ac:92:81:32:
                    43:94:ca:78:fa:07:ef:1a:bf:da:84:f0:ac:c9:93:
                    97:f3:28:39:3a:3b:72:2b:ff:ff:7e:cf:6f:17:bb:
                    f9:52:45:0b:52:54:13:58:87:16:fd:78:9c:f5:44:
                    9f:ba:0a:9c:f8:91:e4:e8:dc:de:d3:f2:18:78:e0:
                    f8:fe:77:fb:b0:12:d0:a9:56:dd:bd:7d:fb:21:ba:
                    8b:4b:69:d4:6c:81:73:a3:35:fc:f8:34:b0:c9:44:
                    8a:17:a2:8e:7d:d7:ad:af:a0:4c:84:6d:f3:56:e8:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0A:45:CF:D4:B2:F8:B1:0F:E1:D8:CD:47:D8:7E:F3:F7:DE:BD:9D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d040::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:85:ec:3a:2f:41:a1:3a:45:82:7e:79:96:f2:47:70:fa:b5:
         92:bb:8c:a2:ce:76:80:ef:12:6d:93:61:aa:ef:15:06:37:7b:
         e1:7a:80:ca:b0:48:58:d6:16:2b:ad:c8:9b:61:04:92:2c:49:
         fe:08:d1:12:86:67:87:1a:a5:bb:f1:4f:49:e8:b8:d0:bb:89:
         78:0b:0c:3d:82:6e:c0:fb:9a:f4:e9:2c:92:38:7e:e1:da:aa:
         34:46:fd:a8:5f:b6:8a:81:37:5e:d1:a0:23:62:00:cb:27:22:
         e8:11:59:60:97:c5:e9:39:5d:f3:b7:1a:67:46:2a:34:d8:d0:
         f5:ac:22:5a:f0:3c:03:33:17:e1:6f:84:b4:3f:0b:f0:7d:c7:
         70:fa:07:4d:1c:36:6b:57:7b:30:67:59:7c:7f:8c:70:a0:75:
         d5:49:76:8b:3e:ea:1c:9d:03:2a:f4:99:1e:3a:ce:4a:36:d8:
         d4:27:7b:bb:db:d2:4f:bf:76:90:c2:47:2d:8d:a2:e2:07:08:
         63:da:cd:f7:82:46:3e:ec:d3:18:1b:3f:0f:b4:cb:a1:66:c4:
         c9:b5:39:80:65:f1:21:9b:cf:53:e0:7b:c2:ad:51:29:6f:f5:
         65:8d:ac:07:45:df:e5:4d:4f:98:b6:de:f9:f3:ac:e7:a8:9b:
         9a:aa:78:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----