Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c96bf604-3011-4557-9ec9-70093d8470a9.roa
File:                     c96bf604-3011-4557-9ec9-70093d8470a9.roa (raw, json)
Hash identifier:          uqxYkmVLZ+aQQwqTr+CqRVqRqcjG+gbiwzv3na8Bbzs=
Subject key identifier:   8A:B0:EF:9A:B8:03:AD:E7:BC:37:74:1D:43:0D:D5:4F:00:71:B5:EE
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       402FDF0435DD7F9E93997597B74E800DCE108F98
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c96bf604-3011-4557-9ec9-70093d8470a9.roa
Signing time:             Mon 22 Jun 2026 02:40:04 +0000
ROA not before:           Mon 22 Jun 2026 02:40:04 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06b:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2f:df:04:35:dd:7f:9e:93:99:75:97:b7:4e:80:0d:ce:10:8f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 22 02:40:04 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=7d6f1b8f5048b0c0fdf436da1df482bb5b6a3971a0c199f303f1982f964d1ab0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:09:98:f2:30:b6:0c:e7:14:30:04:b6:12:
                    fa:c0:5e:18:ae:c0:04:47:0e:72:14:46:b9:2f:a8:
                    eb:3f:39:11:0f:de:f5:9e:56:c4:62:1c:5d:73:63:
                    57:13:ca:c4:a6:54:d9:e2:5a:c6:70:0c:70:54:94:
                    29:d6:e4:f3:d6:96:9d:d7:5a:90:ad:98:01:a9:87:
                    fb:31:e6:d3:05:17:a3:72:51:85:58:ba:b4:eb:1f:
                    06:7e:73:97:0a:26:f1:d2:d1:e4:68:d2:89:ea:70:
                    ce:bc:e9:a1:70:3d:6a:7d:b6:33:8e:22:2c:1a:87:
                    b0:27:cf:35:71:c5:ba:b3:d4:ef:96:0e:f3:44:42:
                    0e:cb:6c:68:c9:38:7d:cd:08:53:cc:24:12:4f:65:
                    fc:3b:80:d6:6e:6d:91:d0:7e:d9:7f:c5:58:41:e7:
                    4d:93:66:a7:dc:2f:8a:c7:62:1f:fd:56:dd:12:e2:
                    f0:58:4e:32:2b:03:ed:2f:86:3d:5a:fc:b3:56:f6:
                    2b:e4:2e:93:ef:7e:21:82:6e:24:dd:14:28:f1:0a:
                    4c:5c:7b:d2:6b:8d:52:42:d2:4a:62:da:df:76:f0:
                    aa:4e:f5:a3:ef:82:c5:c7:28:ac:9c:5b:40:e7:f2:
                    2b:cd:97:77:e3:f1:98:9f:15:0b:c3:ce:96:1b:b6:
                    ee:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B0:EF:9A:B8:03:AD:E7:BC:37:74:1D:43:0D:D5:4F:00:71:B5:EE
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c96bf604-3011-4557-9ec9-70093d8470a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06b:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:de:f8:ff:9d:ea:59:31:2a:42:e6:07:e8:80:d7:63:51:b4:
         9b:54:6a:5c:49:18:fb:95:cb:52:ae:61:4d:39:4d:28:16:50:
         24:ee:1b:07:1d:4c:e4:8f:79:83:65:de:d4:14:39:5b:64:ff:
         1f:20:f8:60:6c:5e:a7:66:f1:15:02:81:48:1b:5b:ce:27:58:
         26:01:b2:55:09:95:1a:2b:79:81:69:18:31:92:91:aa:ac:88:
         c5:ec:d2:03:7a:0c:dc:ba:25:e4:e1:6a:e1:6e:f5:e1:71:72:
         b3:1b:27:2d:94:e6:a9:09:81:cf:f5:c4:45:7c:e8:e1:bd:99:
         8f:5a:16:58:e4:02:f8:56:11:57:cf:f8:ae:5d:a8:26:01:95:
         31:a7:9f:54:b6:6f:90:27:1c:6a:88:65:5d:80:8f:9d:d2:16:
         29:a5:53:fb:28:f5:5d:20:66:70:3a:0f:e3:f8:f8:0e:a7:6d:
         e7:f2:f4:dd:23:72:96:09:36:74:8c:9b:ca:07:78:c5:ae:1d:
         a7:9f:af:f3:7b:ce:ed:f5:72:9e:fb:21:e6:c1:e7:0d:1e:7b:
         d7:0c:d6:01:66:10:5d:4f:7e:95:75:34:b1:85:ea:e0:16:6f:
         18:e4:01:a8:db:cb:3f:e9:1a:91:10:b2:1f:f0:4b:75:69:ef:
         d8:c5:a7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----