Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b37c46d-5f10-445b-9772-1120143beab3.roa
File:                     8b37c46d-5f10-445b-9772-1120143beab3.roa (raw, json)
Hash identifier:          ezEV96NlzVfhKdctw7MilsYsjsTeatO67FCIDwOBRKw=
Subject key identifier:   17:C1:BF:39:45:82:C7:03:EE:92:7B:4E:36:04:20:15:88:38:05:6F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       69B06EC8475E5E3647887C4B3310EF13BB7904C0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b37c46d-5f10-445b-9772-1120143beab3.roa
Signing time:             Tue 21 Jul 2026 01:20:06 +0000
ROA not before:           Tue 21 Jul 2026 01:20:06 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06a:9080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b0:6e:c8:47:5e:5e:36:47:88:7c:4b:33:10:ef:13:bb:79:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 01:20:06 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=921edeec4f4bf6041f30184108d43dafbbfa9a26895208833df61080f3d5385b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:62:5b:6f:95:94:39:ba:ba:18:f2:9c:37:53:
                    9e:9b:cc:34:0e:42:61:c8:d6:6a:1b:ea:b8:64:aa:
                    68:b1:1f:fe:b2:ab:ee:59:b6:6a:cc:40:b9:11:c8:
                    82:fe:0a:81:25:ef:32:12:8c:91:99:c8:9b:f9:5c:
                    96:d6:c1:4a:5f:b0:be:af:eb:d7:a9:ee:b6:ae:30:
                    5a:23:ba:12:5e:e3:7f:5e:bb:68:b7:59:92:8e:7f:
                    53:b5:26:43:99:59:94:49:8b:ca:26:47:1e:a2:76:
                    73:98:f8:0b:1d:ee:b3:3c:bb:d6:e0:be:bc:87:31:
                    cf:93:c3:fc:03:6e:e8:03:16:38:d9:9b:8d:ba:47:
                    54:e8:38:da:5f:53:a4:41:9e:74:e9:6e:67:fd:4d:
                    22:2a:6b:d9:64:d4:4a:c8:b6:7d:7b:20:25:f9:87:
                    84:08:50:7c:82:c7:6d:d3:73:e9:6e:88:72:67:8f:
                    6c:15:6a:b0:69:9a:63:47:9e:6c:c8:75:50:10:ee:
                    d6:5e:a4:a7:7f:f5:17:e7:8f:c9:28:c3:cf:a3:ba:
                    29:fe:5d:6e:ec:01:dd:74:37:10:39:7c:a0:95:e6:
                    5b:59:3d:a2:1f:45:6a:4c:e2:23:1b:c9:44:4d:63:
                    9d:d3:65:2e:72:32:7a:11:d9:db:68:a6:58:e9:4b:
                    ed:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C1:BF:39:45:82:C7:03:EE:92:7B:4E:36:04:20:15:88:38:05:6F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b37c46d-5f10-445b-9772-1120143beab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06a:9080::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:6b:4b:ed:e1:fd:89:d6:3d:30:c4:80:1e:85:47:3b:45:5a:
         89:6f:4e:3b:86:2f:fe:f8:1b:4c:76:01:02:da:d6:cb:35:e3:
         3f:15:78:a3:aa:95:26:c0:6b:ae:4e:ae:ed:02:9b:86:2f:6f:
         3c:f2:7a:10:dc:1c:ed:2b:b6:48:d1:08:5b:f1:a4:04:75:6f:
         ec:41:33:52:90:c9:3a:de:3b:a8:94:db:f4:6b:cc:3f:d3:39:
         aa:fb:fe:72:68:98:14:67:09:68:19:59:d4:24:14:d4:64:f0:
         49:8d:12:96:99:22:b4:f6:26:36:79:7c:46:14:1e:5e:7e:57:
         08:c2:14:03:27:b4:04:f5:65:d5:e3:e3:d6:0a:f9:19:27:8c:
         16:29:77:e9:5d:72:6d:8b:9e:42:5d:45:82:7b:99:8d:88:1e:
         95:e8:2d:61:1d:1e:da:8d:8b:2e:2b:f0:1b:d8:58:45:ad:14:
         62:0d:81:93:7e:11:78:19:41:4d:fd:04:ad:df:c7:5f:d7:12:
         a7:e2:e9:52:bc:17:9a:fb:75:ab:c6:77:57:ee:d5:53:86:8d:
         aa:75:b5:7b:53:04:36:8a:e2:5e:e8:07:cc:df:72:37:9f:98:
         6a:a7:d7:9c:31:ee:48:4f:65:b8:88:81:c3:62:b7:6e:4f:9c:
         12:a8:79:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----