Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa
File:                     d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa (raw, json)
Hash identifier:          aM1GvUg64UqtcZt7jq9ylAiPAc+flhPo9WnU76Sn80k=
Subject key identifier:   39:D1:13:FF:62:B9:AD:C2:5F:B1:FC:D1:16:E6:6F:05:5B:40:09:81
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       37029C0D07976C715054A9E9171EEE754D62B830
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa
Signing time:             Thu 16 Jul 2026 00:40:31 +0000
ROA not before:           Thu 16 Jul 2026 00:40:31 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d02f::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:02:9c:0d:07:97:6c:71:50:54:a9:e9:17:1e:ee:75:4d:62:b8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 16 00:40:31 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=5c4bbdc0cbb1138208381ba8460295200c2710f86d0a552d02704f4275aafe6a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:30:0e:ea:f3:40:6f:0f:71:24:e4:4f:19:
                    f3:30:5e:90:4d:e5:62:d6:db:45:51:00:87:69:4a:
                    4d:4a:c0:c9:bc:b5:b7:cb:bc:ba:ef:b8:40:00:88:
                    a4:0e:dd:7e:69:58:0f:d1:1b:cd:8e:93:14:f6:af:
                    c2:78:33:53:52:fe:c7:2f:b3:79:d6:6f:90:03:ff:
                    6c:a9:8e:8f:56:83:d5:d4:31:5d:71:f8:77:cd:da:
                    93:dc:00:6f:21:45:f3:0d:f3:cb:f4:6d:64:a4:5c:
                    a3:75:7c:0c:4a:41:47:c7:9e:90:61:3e:5a:0a:f3:
                    64:b8:e8:0f:1b:da:73:b5:de:1d:30:ec:ac:ca:fb:
                    3e:67:6f:86:57:54:78:d5:e7:0c:98:7a:cc:23:55:
                    ea:0a:4c:85:99:c2:f2:17:21:b9:25:b8:6b:33:e6:
                    91:7f:5f:de:ec:fe:8c:6c:ba:ce:af:29:54:27:6b:
                    29:9e:ba:7d:e6:ca:41:24:ff:35:df:da:52:c0:31:
                    cc:5f:36:07:f8:1f:38:9e:73:7a:b7:d4:a7:ef:9e:
                    43:80:85:61:5c:74:80:91:e5:8a:9f:15:bb:45:83:
                    74:77:dc:8a:d9:d6:49:ce:ac:d4:92:dc:7d:cb:8f:
                    ce:d4:aa:54:fd:51:fe:dd:88:3a:bb:0c:56:b5:c2:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D1:13:FF:62:B9:AD:C2:5F:B1:FC:D1:16:E6:6F:05:5B:40:09:81
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d02f::/37

    Signature Algorithm: sha256WithRSAEncryption
         50:0b:e7:45:7e:2e:80:3c:10:cb:5c:c8:1d:36:96:06:37:7e:
         70:52:ae:38:9c:12:60:9b:ad:18:ac:e9:c7:f3:60:41:78:35:
         f8:47:50:ee:e9:10:9a:60:97:01:c7:d7:ac:0c:6e:3c:ff:b7:
         13:5b:ea:f9:2b:d6:d8:09:6e:be:dd:0b:5b:6f:07:b5:74:61:
         01:8f:52:d5:9f:80:b5:bc:09:ef:30:b4:f7:61:15:53:c1:2b:
         b4:1c:28:e1:e5:31:33:cb:bb:ed:0a:82:66:e5:9f:18:2d:1b:
         fc:5a:68:7d:1d:d3:c1:a5:2c:5d:d9:fe:ca:fb:f1:50:ba:f4:
         d0:38:34:09:f1:bf:26:6e:91:59:fd:3d:b9:cb:1f:e0:6d:1c:
         56:6f:f9:fd:e5:ca:6e:74:aa:a7:1a:64:6d:15:c5:23:92:f3:
         3b:21:ae:73:9b:19:35:95:ee:90:54:da:12:d2:1f:9e:75:ca:
         8a:36:2f:65:46:26:3b:5c:db:b0:2e:2b:5b:b7:52:cf:8e:00:
         bc:73:76:f8:a2:7a:79:87:17:a4:bf:d8:b2:af:a4:31:ba:60:
         3a:a6:26:3b:3f:00:dc:52:d6:8e:71:9f:a9:cc:8f:eb:19:e5:
         83:ec:d7:8e:c7:53:69:ef:5b:e0:83:4d:35:c3:98:a3:51:27:
         7a:41:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----