Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2ae01f1-ad20-4e92-9bc6-f03ede97e16c.roa
File:                     a2ae01f1-ad20-4e92-9bc6-f03ede97e16c.roa (raw, json)
Hash identifier:          k6G2ag9xekdB46uBZOi9ozXyqggTrAqhiizU+3o5Vmc=
Subject key identifier:   66:11:BD:8A:D8:F8:13:05:21:20:F9:D6:8B:05:B1:0C:58:3A:44:DC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       26347D1C109C56F72FFAE0803439F7CB15D9BFA3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2ae01f1-ad20-4e92-9bc6-f03ede97e16c.roa
Signing time:             Thu 16 Jul 2026 00:40:28 +0000
ROA not before:           Thu 16 Jul 2026 00:40:28 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d034:80c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:34:7d:1c:10:9c:56:f7:2f:fa:e0:80:34:39:f7:cb:15:d9:bf:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 16 00:40:28 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=ee861238cb315edfdf39419e3200a9da4a42f48954df7abdc6f94c946710a605, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:0b:af:80:2c:1f:f7:ff:0e:e9:47:6e:a5:
                    72:60:ea:cd:e2:4c:68:02:67:bb:75:02:67:73:1f:
                    1f:04:71:74:3e:66:9d:d4:9a:61:e4:32:c7:5a:11:
                    3f:c6:aa:01:94:5b:e6:66:2f:85:c9:f9:dd:8a:0b:
                    ae:c2:7f:2b:fe:3d:83:57:09:ba:a2:9c:fe:b6:b0:
                    86:87:99:45:dd:53:71:45:d0:b9:78:62:8e:71:e8:
                    2f:fb:7f:a9:03:74:7d:74:cc:9e:de:16:c0:68:2d:
                    ea:7f:d1:d3:92:b1:60:b3:9a:df:e5:6c:f8:1b:1c:
                    f6:72:df:bb:f9:d7:7f:c3:80:41:bc:83:1a:bb:fa:
                    c8:0c:5d:33:c6:42:7c:61:a9:19:c3:55:a8:af:1e:
                    0b:65:8d:74:93:80:e8:5f:01:1a:d7:8d:aa:1d:b4:
                    8c:ca:63:02:4b:32:da:a9:2d:ac:8d:f8:d9:3e:57:
                    6e:15:ca:ae:32:bf:09:dd:dc:d2:5c:b0:f4:7a:77:
                    db:8d:63:8b:1d:01:63:aa:2d:3d:47:70:42:74:24:
                    fa:b9:52:5e:06:39:96:96:b4:98:4d:14:15:c2:89:
                    09:9d:a6:e1:31:51:71:b5:6f:08:8d:7f:77:e2:cf:
                    e4:1e:51:3c:80:13:57:fd:c5:07:ae:ba:4c:35:da:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:11:BD:8A:D8:F8:13:05:21:20:F9:D6:8B:05:B1:0C:58:3A:44:DC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2ae01f1-ad20-4e92-9bc6-f03ede97e16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d034:80c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         8c:d7:d7:56:bb:12:9d:1f:42:29:42:71:f0:05:60:77:bf:54:
         5e:a0:5f:41:4d:db:3b:65:de:3c:5f:c2:b6:41:50:74:70:7a:
         48:f6:d7:63:39:1a:12:87:86:1b:28:a0:82:8b:fe:c7:28:8b:
         03:69:ee:96:12:7f:0a:2d:4f:f6:ea:46:5d:b9:db:73:f5:2d:
         72:5b:81:99:fe:70:e2:4c:f3:0d:3e:af:0a:bb:ee:95:96:fc:
         de:ba:ad:40:49:a0:9b:11:18:50:7f:f3:5e:9d:ba:1e:26:11:
         3c:0f:0f:fc:47:cd:0e:1b:e5:ac:b2:ff:e1:ce:e0:4e:7a:19:
         95:c6:67:1e:cf:0b:e0:ef:48:83:64:82:de:76:16:62:13:a1:
         2b:6d:e1:f9:6d:79:1c:9c:9e:23:1d:5b:52:c9:ae:83:c8:06:
         6c:a2:05:13:a9:5b:48:1a:8f:39:f2:02:f4:00:4f:78:a5:6d:
         65:f3:f1:61:b7:43:22:dd:4f:9d:af:0e:92:91:90:04:41:01:
         66:4b:7d:22:e3:6f:9b:08:f4:9a:8f:ed:aa:aa:d6:b7:8c:1b:
         21:2f:f4:a6:09:92:e2:e9:eb:22:eb:34:ab:5c:fc:bd:2d:c4:
         de:0f:fc:d8:4b:aa:1a:f8:66:74:0e:d8:5b:8c:93:75:e6:6c:
         ac:bc:f9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----