Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/950e9d37-a9b5-4c78-b65e-c7b45ca851c6.roa
File:                     950e9d37-a9b5-4c78-b65e-c7b45ca851c6.roa (raw, json)
Hash identifier:          CPm1/3X6tgE5jZxYd5MPLRhVtVPmbfKoG39CSD4LqiI=
Subject key identifier:   A0:D7:00:CD:62:0F:17:E0:13:A0:A9:09:C9:2D:7F:58:6D:22:C5:EC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       580FFED758D81471BF77CFAE1DA41D8C2C651905
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/950e9d37-a9b5-4c78-b65e-c7b45ca851c6.roa
Signing time:             Thu 23 Jul 2026 15:20:11 +0000
ROA not before:           Thu 23 Jul 2026 15:20:11 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:a0c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0f:fe:d7:58:d8:14:71:bf:77:cf:ae:1d:a4:1d:8c:2c:65:19:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:20:11 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=1192e6c5d05dcaf0f2963c68d25b2352e2bcdfdb43cedac8f725308fc93c202a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:5f:ed:5d:a5:13:18:31:22:6e:0e:d1:2e:
                    79:c1:20:3a:3a:81:d8:ae:99:41:06:ee:a1:20:50:
                    da:f4:ba:e0:2d:9d:3f:5a:bd:e8:cc:27:66:5b:a7:
                    e9:f9:73:75:90:5a:d7:67:62:de:f5:e6:cf:de:69:
                    b9:ae:20:0f:c9:70:92:c0:a6:8a:ae:4d:ee:eb:51:
                    1a:e1:ca:d7:ac:fb:8c:34:ee:9b:a3:8a:e6:6d:42:
                    ae:7d:17:ef:1b:e8:7f:ab:d8:42:1e:97:92:f3:d0:
                    ad:98:38:8a:c8:0a:25:08:af:56:60:68:bb:fd:27:
                    e5:d2:2e:4d:f9:0f:71:63:11:1e:84:3e:06:83:e8:
                    9b:0a:1b:5d:eb:72:ad:07:ff:3c:94:a5:ce:31:5d:
                    a3:e8:41:1f:83:24:97:44:5e:88:a5:b6:13:ad:d9:
                    b4:02:c2:17:c7:75:e6:c8:29:af:2b:3c:2d:b8:7c:
                    a7:ce:c5:ca:02:a3:22:b7:74:1e:cc:38:f2:04:f7:
                    e4:be:87:ec:9d:28:a5:da:1a:40:0d:0b:c1:fb:de:
                    62:75:3b:16:d4:09:2c:c4:5c:93:37:91:da:ed:e5:
                    c9:4f:e4:19:f4:97:c6:30:b1:8b:3a:aa:1f:71:b7:
                    55:8c:58:3c:9d:ab:2c:11:d9:72:ac:9c:a3:5a:41:
                    cf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D7:00:CD:62:0F:17:E0:13:A0:A9:09:C9:2D:7F:58:6D:22:C5:EC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/950e9d37-a9b5-4c78-b65e-c7b45ca851c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:a0c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         97:aa:af:98:3c:0f:46:90:f1:24:4d:b0:fa:4d:2c:74:9c:59:
         ee:20:90:0f:d6:2b:47:63:ce:27:cc:03:9e:95:fa:37:d5:15:
         4c:96:b0:2b:37:80:a1:80:68:d5:77:49:0e:e6:e0:27:43:a9:
         86:28:5a:e7:4f:df:1c:f0:dc:d2:a9:e1:03:cc:39:f4:5f:c6:
         22:08:fd:5a:f6:b1:94:f0:f3:79:c4:56:05:ae:4d:6a:4d:6d:
         8d:bf:f0:4e:b5:4f:d1:37:bd:cf:d7:45:b7:28:45:d2:81:69:
         9f:a5:1b:8e:45:a8:db:3e:81:7c:b2:aa:31:2b:93:d5:5b:39:
         69:15:6c:78:4b:53:b8:f8:bb:d5:b2:5d:4d:2c:dd:27:9f:3f:
         c0:c1:95:8a:f7:56:79:da:b2:78:3d:02:9b:36:2c:4b:5b:cf:
         69:2b:d0:d0:fa:00:22:ef:fa:51:3d:48:a8:22:62:f7:22:6c:
         85:d7:6d:8a:17:83:7e:c8:7b:cf:59:8a:85:e8:7f:45:31:a7:
         cb:ab:ef:54:9b:97:6d:9f:97:dc:fb:59:27:bf:e3:5d:51:93:
         52:d5:75:74:30:e3:93:60:ac:93:4c:56:b7:50:5c:a7:ff:1f:
         81:d6:af:83:dc:3c:72:ca:28:00:9f:b8:ca:3e:c9:7e:39:45:
         df:bf:35:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----