Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88e98e26-39c9-4a1c-82e8-cc63267ca942.roa
File:                     88e98e26-39c9-4a1c-82e8-cc63267ca942.roa (raw, json)
Hash identifier:          EGScnqoNFvqb5bGS8YdGrFpKBdKznGckqMqO6tTaALw=
Subject key identifier:   F4:2E:B7:5C:6B:DA:26:B7:CB:50:47:C4:41:C8:FB:00:6D:A2:75:D6
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       41ADFC2F9C4C86DB70B58216B91B7E43F5DA7986
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88e98e26-39c9-4a1c-82e8-cc63267ca942.roa
Signing time:             Thu 23 Jul 2026 15:20:47 +0000
ROA not before:           Thu 23 Jul 2026 15:20:47 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:8020::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ad:fc:2f:9c:4c:86:db:70:b5:82:16:b9:1b:7e:43:f5:da:79:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:20:47 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=b317582394904fd57ebb82a7f3c0e80a21c9d0a33be6dd2221166e086605b56a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:27:c0:44:96:68:97:2c:d8:30:64:2e:c9:
                    f6:40:30:41:2a:4c:5a:36:53:00:3f:54:9a:f1:84:
                    07:72:94:83:3d:c2:50:5f:66:61:cd:56:59:e9:77:
                    34:67:87:5c:98:f4:ab:42:5d:ed:eb:7c:d5:0e:a8:
                    fc:59:c0:07:6f:ac:7d:43:e1:ab:be:85:df:44:3f:
                    f7:b4:28:2d:0e:9b:ad:f9:79:20:06:0b:2f:74:71:
                    ed:29:dc:41:f0:1d:a3:8c:c1:f2:b2:fd:f8:d6:d9:
                    fc:b1:1f:f9:40:1e:3e:80:9e:a1:f8:65:69:39:37:
                    12:fc:51:01:fa:c2:af:35:a1:bd:5a:2d:4c:f7:7a:
                    90:b4:73:88:89:54:9b:c5:ca:0b:19:de:58:d3:29:
                    4c:30:0f:b0:78:df:2d:e1:39:45:ed:57:2a:4e:9e:
                    e2:0b:c9:e2:b0:43:16:71:1b:08:e4:9c:6b:65:13:
                    bc:14:49:c8:f0:07:b4:79:db:9f:09:51:77:f2:34:
                    e5:d4:1e:a1:7b:c4:22:62:a6:22:34:91:66:61:af:
                    fe:71:1b:ca:13:25:5c:e1:05:86:5d:f9:c8:41:16:
                    8d:cc:26:05:c8:67:75:ca:1a:07:d8:0b:3c:12:43:
                    b2:2a:11:00:d9:cf:14:0b:3d:7a:74:2c:62:f3:5b:
                    e5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2E:B7:5C:6B:DA:26:B7:CB:50:47:C4:41:C8:FB:00:6D:A2:75:D6
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88e98e26-39c9-4a1c-82e8-cc63267ca942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:8020::/46

    Signature Algorithm: sha256WithRSAEncryption
         55:03:a7:cf:43:db:72:01:f9:ff:ab:64:de:78:e6:e4:0f:38:
         00:06:48:f6:9f:e8:e1:29:32:cb:3b:3b:0c:ed:d6:df:cc:94:
         b7:4b:a3:0f:5b:9d:71:56:2d:1d:16:81:64:84:50:4c:01:b8:
         34:b5:04:72:e6:e7:6e:8e:04:b0:cb:ac:63:5c:97:6d:53:87:
         fb:66:a3:b6:48:73:3b:9d:15:ed:71:ac:0c:a8:7e:fd:e5:31:
         a6:3c:92:70:4c:74:d5:7c:11:fc:91:18:2f:8d:94:cd:5f:70:
         3f:1a:0a:c1:e6:98:9d:0a:4a:7f:2a:c5:59:f2:29:46:f3:33:
         69:82:55:c3:91:2c:bd:92:3a:5a:7d:a1:01:b1:01:83:41:de:
         07:82:39:6d:83:2b:07:ec:fd:2b:d4:14:8b:f9:38:9d:f9:2d:
         8e:5c:6a:6a:b4:97:9a:7a:4b:2a:e0:cd:41:4d:8f:06:57:dd:
         df:ec:7c:ae:1a:b5:ed:8d:ae:8a:5f:2c:d2:20:a5:e3:35:65:
         3f:36:ca:5f:e6:f9:9e:e8:09:39:b1:47:8a:2e:d3:ff:fa:80:
         30:52:7e:45:bb:32:50:71:2d:70:04:6d:55:3b:18:e2:03:74:
         40:17:69:e4:f5:6c:87:2a:1b:dd:c5:35:20:e9:8d:2e:eb:7d:
         26:06:fd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----