Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1d03194-ccbe-4f42-86ad-223ce18146d3.roa
File:                     a1d03194-ccbe-4f42-86ad-223ce18146d3.roa (raw, json)
Hash identifier:          qbNbw2MVE8789I6vsOev5Etb1xqXgFhWF2ztE99kwuA=
Subject key identifier:   8D:81:75:8A:97:D2:6E:27:95:F2:EA:2B:C6:48:56:FA:18:1C:B0:A3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       14D694B3E8ACAE96D70ABAAF391688923FE11695
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1d03194-ccbe-4f42-86ad-223ce18146d3.roa
Signing time:             Tue 21 Jul 2026 01:30:22 +0000
ROA not before:           Tue 21 Jul 2026 01:30:22 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06a:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d6:94:b3:e8:ac:ae:96:d7:0a:ba:af:39:16:88:92:3f:e1:16:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 01:30:22 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=fb6d990abc829af0f5e15cd13a22765cf29e972813a82287098529b66d185606, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:59:38:8e:be:fa:d8:82:a4:a3:78:af:a0:
                    b4:9e:2d:39:40:69:9c:8e:57:2f:70:53:4a:04:1d:
                    c5:fb:12:64:8c:54:23:c7:6a:0f:69:eb:4e:66:17:
                    d9:da:93:a4:85:fa:25:87:f5:89:29:70:ad:b7:ff:
                    93:2a:72:04:60:98:8a:37:e3:8f:ad:83:3b:3e:20:
                    6e:88:eb:e8:e3:4f:b1:15:d4:ba:ef:01:f6:4c:e8:
                    8b:a7:8e:ca:04:15:f1:6c:92:26:cf:b5:21:d6:79:
                    8d:56:48:4e:36:7b:54:fb:6e:ac:e8:b0:68:cd:cf:
                    71:36:6e:19:ee:8a:d3:bb:9f:1e:d6:6d:a1:ba:14:
                    26:02:f5:fa:46:90:4d:f4:82:21:d8:af:5f:7a:a2:
                    8b:be:34:0f:83:0c:f0:65:68:87:3f:3b:b6:fe:e5:
                    b9:55:24:3a:41:87:dc:2d:d9:4a:81:2d:78:59:dc:
                    03:fc:54:f8:a2:cf:40:d5:ca:82:46:c4:17:23:d9:
                    57:a5:eb:39:0c:5f:93:20:b8:dd:3d:a7:30:c6:70:
                    3e:ee:19:b5:73:06:c7:5a:b7:66:31:15:21:b7:1d:
                    30:95:61:78:d0:10:69:9c:ee:fb:ea:84:1b:99:8f:
                    87:75:06:99:bf:dc:04:c0:d1:f3:72:c4:74:ce:f5:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:81:75:8A:97:D2:6E:27:95:F2:EA:2B:C6:48:56:FA:18:1C:B0:A3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1d03194-ccbe-4f42-86ad-223ce18146d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06a:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:52:f0:76:30:ec:74:0d:8f:29:74:a0:86:96:ac:f4:3c:5f:
         1c:60:64:f9:3f:75:95:bb:e4:41:d9:fd:1e:1b:dd:18:37:36:
         9e:88:d8:af:35:8b:2c:52:8c:22:3c:6d:28:78:e1:61:5b:90:
         9c:a5:cf:2a:4f:d8:ac:c3:02:39:f3:40:4e:c9:ed:80:1e:22:
         2d:73:fd:9f:b7:89:02:f3:a9:fd:30:ce:ec:9f:b8:02:5c:82:
         12:36:3a:d9:f9:9b:3a:26:4b:3f:50:1f:c7:68:46:b3:1d:2f:
         64:e1:80:f9:9d:51:85:ce:e0:2c:c3:30:de:ba:8a:c4:09:49:
         6e:a5:e8:ed:f8:a7:b9:f9:7e:a8:97:84:f2:fb:99:b0:38:4b:
         db:2b:09:93:25:08:ea:0e:35:30:4f:0a:a8:68:05:b4:29:cd:
         1f:5e:8c:b0:16:4c:d2:2c:3e:d4:93:cf:9d:10:a1:52:2c:88:
         07:8f:b5:86:cf:8e:03:08:fd:fa:8c:da:6d:79:96:22:06:a3:
         d5:a5:03:47:1e:23:9e:36:f7:5c:3a:ec:74:65:30:51:0c:01:
         ec:23:81:1c:a7:16:6f:b5:3d:3e:05:21:eb:90:d6:cb:97:57:
         44:38:52:c1:21:5d:b4:fe:07:b9:0a:9f:64:c5:90:74:26:3e:
         2b:db:13:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----