Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6b4bacc-5824-4f9c-a10d-49f145db8549.roa
File:                     c6b4bacc-5824-4f9c-a10d-49f145db8549.roa (raw, json)
Hash identifier:          e+PyGdpQKvzJaKGm6RaEFjBcYU7FIOA7HnHwbP2H9H8=
Subject key identifier:   21:7F:F6:5E:B3:55:2F:3E:3D:2B:BA:39:78:50:B4:47:68:7D:21:77
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       02CF9BE09675089BA352E57738BB655834D2C215
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6b4bacc-5824-4f9c-a10d-49f145db8549.roa
Signing time:             Thu 16 Jul 2026 00:40:26 +0000
ROA not before:           Thu 16 Jul 2026 00:40:26 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d02f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cf:9b:e0:96:75:08:9b:a3:52:e5:77:38:bb:65:58:34:d2:c2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 16 00:40:26 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=0571cde0b53c25604897275734abb219d908b703229c3dbb87338cd4e4f5464d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:34:b7:2f:22:cb:48:5a:11:0b:4f:68:84:
                    a7:52:20:7c:25:83:22:c2:a5:9b:b7:80:fc:01:43:
                    82:63:aa:a7:64:8f:1b:30:fa:fb:c0:2d:36:61:1c:
                    b9:d8:ae:eb:38:8a:68:7c:84:0d:27:0a:01:bd:f8:
                    59:64:67:f0:5d:3c:97:65:64:f6:77:ca:0e:f2:a2:
                    8e:00:45:7b:40:3a:0b:72:71:4b:f3:0b:b2:83:55:
                    c1:a9:4d:20:eb:25:7e:df:80:8b:71:ad:a0:12:2d:
                    59:ba:05:4c:35:54:4c:ba:f6:3b:93:60:b4:1f:9a:
                    ea:15:64:f9:34:c4:73:5a:04:20:f0:bc:3d:1c:74:
                    b6:fc:c2:5b:18:27:99:e4:f6:fa:2d:a4:9a:a4:cf:
                    39:35:67:27:ab:9d:40:84:c1:be:c2:b8:52:28:2e:
                    73:ff:04:1b:d1:45:69:a9:e2:38:e0:19:b2:a5:ef:
                    e3:8e:33:8f:bf:31:4c:f2:c5:e4:63:70:38:3b:a5:
                    d6:db:83:4a:b3:42:84:6a:e1:09:82:93:b8:e6:5a:
                    bc:b4:51:d7:a7:47:bd:d2:d6:e5:dc:97:b8:f0:f9:
                    b5:66:0b:ab:e6:84:ff:17:57:2c:16:0f:73:c1:3b:
                    c8:b8:56:59:d6:ec:7a:2f:5c:07:df:a0:2d:a3:de:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7F:F6:5E:B3:55:2F:3E:3D:2B:BA:39:78:50:B4:47:68:7D:21:77
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6b4bacc-5824-4f9c-a10d-49f145db8549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d02f::/36

    Signature Algorithm: sha256WithRSAEncryption
         11:20:31:ff:bf:e7:d9:5e:1b:3e:0e:45:42:49:71:10:26:2c:
         f7:d8:59:a8:c7:62:f6:40:b0:56:af:24:0c:21:1b:0c:a9:70:
         b8:e9:ca:3a:3c:5c:6a:71:3c:2e:4e:9e:f4:73:15:16:d0:b6:
         fd:30:da:91:0c:c7:57:58:5b:0a:32:63:20:29:b4:ff:22:0d:
         b8:cc:50:09:42:3c:8b:93:d9:8f:65:9a:da:56:b1:bc:36:f0:
         ce:2b:a4:c5:d2:8c:1e:9f:18:5b:6f:4b:b2:89:30:16:e0:2a:
         d8:af:bb:13:c0:09:dd:94:84:11:b1:ab:97:e6:57:ff:4e:2d:
         4a:c1:50:d9:b8:03:17:4c:3f:7a:7f:03:48:90:f0:7f:ce:0b:
         7d:a3:3b:bb:3f:74:33:8e:58:27:ed:a4:94:07:0e:a4:fc:53:
         7a:4a:39:36:cc:4d:3b:e3:86:fa:eb:32:ba:65:3d:f7:16:79:
         24:73:eb:ac:85:d1:dd:d7:72:c5:4f:b4:d1:3e:bb:a7:00:94:
         a5:e0:2a:ca:02:eb:d8:53:08:8e:86:da:5f:e3:c3:18:13:5d:
         aa:43:4f:69:05:08:55:58:ea:c1:e9:16:19:1f:9c:94:e2:15:
         f3:89:dd:08:bc:77:4b:86:f2:95:30:35:d7:00:ed:2d:0d:13:
         95:7a:32:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----