Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc5d1e04-86cf-43aa-989a-a5801b5a73db.roa
File:                     bc5d1e04-86cf-43aa-989a-a5801b5a73db.roa (raw, json)
Hash identifier:          4NxDeoIH38nIISq1DEBzfWKPaz1ifAQWME0su/7Br2Y=
Subject key identifier:   A8:1F:D3:F9:1D:D4:64:40:1F:63:75:ED:02:C8:5C:4F:3A:F1:A7:BB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3CDC7161D2928BF4FB08670CE0EDA0D8846A4883
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc5d1e04-86cf-43aa-989a-a5801b5a73db.roa
Signing time:             Tue 21 Jul 2026 01:20:36 +0000
ROA not before:           Tue 21 Jul 2026 01:20:36 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06a:1040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:dc:71:61:d2:92:8b:f4:fb:08:67:0c:e0:ed:a0:d8:84:6a:48:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 01:20:36 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=8e67729ad0eeda181e8bdb4013cde3befc26df6e06e3383037d3f2249230c30d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:2e:12:da:ad:6f:9f:06:1f:fb:22:58:39:
                    8e:9f:35:f2:d1:3c:eb:37:3e:42:b1:64:93:b9:3c:
                    4c:2e:59:2d:42:1d:55:28:a6:24:50:3e:e4:de:c0:
                    19:d4:9e:30:3c:20:18:9c:ee:b2:d2:75:5d:7d:0a:
                    ed:70:0c:5f:1c:65:05:e6:36:61:9a:09:29:f3:50:
                    be:6f:30:f4:69:eb:42:39:09:e1:34:8f:a9:73:46:
                    a8:3a:be:35:8a:90:2b:9a:17:9d:7c:bb:38:fd:ad:
                    70:c6:09:4f:7d:cf:50:50:3d:c3:8f:0f:d9:51:98:
                    eb:99:02:e7:c2:be:ea:dd:4b:5f:a9:6e:28:8d:d2:
                    f0:b8:3d:06:a1:82:bd:7c:68:b5:89:a9:63:88:d4:
                    96:99:88:c3:dd:9d:34:92:aa:e5:fd:f1:89:63:7c:
                    c2:ad:16:eb:79:a9:28:5a:f8:ca:8e:69:98:ac:2e:
                    f1:85:41:c7:37:af:98:a2:99:8a:0c:04:12:c6:c2:
                    d4:c6:6e:3f:73:2f:9c:83:35:ad:2f:c3:97:5c:a4:
                    ea:8e:cc:8c:6a:40:e6:81:21:f2:66:91:3c:9d:91:
                    a0:db:ce:ad:0d:79:ed:25:3d:f6:19:a6:4e:91:16:
                    b8:cb:a2:da:5a:a4:60:40:a8:aa:31:6d:da:7b:63:
                    3a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1F:D3:F9:1D:D4:64:40:1F:63:75:ED:02:C8:5C:4F:3A:F1:A7:BB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc5d1e04-86cf-43aa-989a-a5801b5a73db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06a:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:7f:ec:06:79:a5:77:c8:fc:07:02:8e:1e:04:eb:9c:d9:86:
         22:28:f0:f9:ac:9d:5b:01:68:bd:d9:d7:4e:1f:a0:56:a3:5c:
         38:ba:e9:66:6a:30:12:75:c0:7d:af:1a:6b:9b:e5:45:6a:16:
         c0:14:73:8f:de:51:60:8d:f3:2f:e7:c0:3a:3d:e5:bb:42:dc:
         5d:10:1d:9f:b7:ff:6c:1e:4d:9f:f1:9d:3e:21:dd:30:aa:0f:
         a9:61:c1:0b:ed:f9:32:17:38:f3:00:85:bf:ca:07:cd:a5:c7:
         8d:60:40:a9:80:53:4b:c6:25:ad:0f:ed:b9:8b:b4:77:6b:b3:
         08:1e:01:12:bf:f8:65:81:86:12:ae:58:44:04:7f:c7:0f:d7:
         04:21:3e:d7:0b:dd:ef:69:df:e4:36:0d:ee:47:9f:13:04:22:
         06:76:c2:03:c8:f8:ef:0f:a7:42:3e:14:a3:79:99:72:d8:54:
         33:d9:d4:7d:31:d2:f1:11:80:d2:c0:ab:89:c0:90:99:2a:0d:
         b2:50:1b:38:57:a1:90:e1:8e:94:ea:07:49:27:2c:70:bd:62:
         7d:61:0e:da:76:3f:3b:f2:9a:38:e4:e7:27:a1:9b:4c:ca:b4:
         f5:b3:28:4e:30:dc:a9:cb:d4:c1:bd:9d:d5:3e:b1:7f:1f:07:
         1e:c8:4e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----