Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
File:                     c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa (raw, json)
Hash identifier:          qPG6H82mMqhqp6BANXswIgmc2MszpiV9SkhhaGx7rK0=
Subject key identifier:   4E:2A:EB:7A:33:B0:C1:22:F7:7B:E3:77:84:19:E7:22:D1:4D:DB:B7
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       73447D965775F47BFC346DDF1D7CFC355236EE76
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
Signing time:             Thu 23 Jul 2026 15:21:09 +0000
ROA not before:           Thu 23 Jul 2026 15:21:09 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:40c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:44:7d:96:57:75:f4:7b:fc:34:6d:df:1d:7c:fc:35:52:36:ee:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:21:09 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=9504b9d47d537a50588f69b82e775b8e04590f1138e3acaa81b0904a465dd96e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:f9:ae:69:a0:26:9e:a9:6f:0c:d5:4d:9d:
                    1b:78:0e:bf:e5:3b:c1:10:3c:f7:cd:20:01:90:6f:
                    8d:34:dd:09:ab:d4:2f:2e:61:6c:56:a3:61:57:12:
                    08:3a:08:52:85:03:dd:37:1c:66:53:64:e4:93:67:
                    94:9d:98:32:ef:0f:65:f9:92:fe:93:a4:9f:4b:d2:
                    e9:20:0c:df:f0:45:69:eb:6f:7c:50:75:c8:71:3b:
                    b6:9a:f4:e8:6e:d6:75:fa:67:32:13:df:42:fc:ce:
                    75:af:6c:59:43:db:76:6b:3d:a6:82:b3:cc:9f:50:
                    0a:de:1a:e3:15:84:27:e9:ff:a2:2f:da:7d:90:f6:
                    12:82:50:42:9a:1f:2d:9d:59:42:b6:c0:06:0e:d4:
                    22:cc:a7:63:cf:e0:0b:d8:31:b7:bc:d0:d7:31:ee:
                    78:06:37:8d:9e:e3:08:ce:0b:9a:53:f8:ed:c9:b3:
                    f5:e1:f6:19:17:15:8e:c3:de:77:b8:0a:50:a5:fa:
                    2b:46:5a:c3:a8:b7:19:db:cd:ac:d0:95:12:94:96:
                    98:5e:e6:44:d0:f1:aa:aa:14:18:53:23:10:8f:58:
                    fd:e2:56:90:f9:78:74:c6:41:5c:aa:bd:61:4e:05:
                    bd:1c:5e:ac:59:02:ed:aa:88:b3:d8:d9:65:8b:16:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2A:EB:7A:33:B0:C1:22:F7:7B:E3:77:84:19:E7:22:D1:4D:DB:B7
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:40c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         94:a7:5c:4b:eb:26:9e:3d:cc:b5:0f:45:f1:40:38:5d:9f:36:
         0c:5a:39:28:f8:5e:6f:83:0c:41:a0:25:56:5f:c4:ee:96:dc:
         70:9e:e7:85:9a:49:f1:f8:e1:80:bb:61:a8:ae:91:c1:7a:fa:
         cc:cb:25:e4:67:54:65:d3:65:5c:c7:34:d6:c0:60:34:17:ee:
         ee:4c:fe:74:ed:14:1f:8d:b3:9a:73:f6:17:e7:8a:78:86:fa:
         c0:44:f9:27:b5:9d:0e:c2:b6:a1:2f:85:96:ad:30:14:6f:24:
         9c:28:c9:23:4c:46:b4:f8:06:8c:f7:94:7b:d8:43:bb:e2:4d:
         d7:db:ee:05:08:7e:26:f1:9a:09:2a:37:df:5a:0f:e2:10:fb:
         9c:bf:e7:f5:fe:4b:21:a7:3b:b4:6d:9c:4e:5f:4f:7a:3d:30:
         fc:d2:7d:5e:cf:70:06:b1:0d:76:04:a7:45:17:24:00:02:17:
         f3:ef:e5:a5:36:81:54:52:aa:a9:61:43:d4:36:80:90:27:52:
         47:e4:cf:c7:87:60:f2:b8:ad:69:91:03:83:8d:45:5a:8e:d9:
         33:18:f3:ec:b1:99:85:70:c9:56:6b:fa:ef:e3:0d:df:c8:a8:
         70:e8:f3:39:68:76:fa:b8:9e:3b:5b:51:03:28:e1:34:e3:76:
         57:1f:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----