Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e5cd11-e33b-4080-91d5-f550f1d7a0b5.roa
File:                     d2e5cd11-e33b-4080-91d5-f550f1d7a0b5.roa (raw, json)
Hash identifier:          bm0pubtjmXbbbrd3zVGPCOMQbl9uTkAw3Nioi7puKGQ=
Subject key identifier:   C2:EC:96:01:2A:A4:49:B9:27:61:3A:24:9D:9C:E3:7C:1A:74:AC:AC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       72AC2AB0A1A40EEF511450E4B57BEE6572667548
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e5cd11-e33b-4080-91d5-f550f1d7a0b5.roa
Signing time:             Thu 16 Jul 2026 00:40:31 +0000
ROA not before:           Thu 16 Jul 2026 00:40:31 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01f::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ac:2a:b0:a1:a4:0e:ef:51:14:50:e4:b5:7b:ee:65:72:66:75:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 16 00:40:31 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=76b2766db91ef07ed4ab2e3fc940684370cba71c91847cba048569979d20c08b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:ed:3d:8d:94:7f:f5:b0:52:46:c2:eb:cc:
                    df:b0:90:07:50:28:f7:5b:70:01:f9:ac:39:e3:0d:
                    fc:e4:62:b7:16:2e:c9:7f:19:50:5f:79:0a:98:d4:
                    ed:0e:d9:45:fa:91:e2:7f:e9:cd:05:18:79:43:02:
                    ae:8a:87:2e:84:21:54:e5:b3:e9:87:27:07:35:a2:
                    7c:c7:fa:8c:b9:8e:8a:d1:67:b7:7c:5e:c2:c8:c3:
                    17:76:88:b5:16:77:68:f4:b4:36:61:7c:fc:39:c7:
                    ae:a1:bd:fd:64:eb:4f:16:66:9e:2e:65:11:cc:92:
                    47:4c:7c:88:ff:cc:49:2b:3d:4b:1c:ae:33:39:10:
                    04:fe:34:19:66:4b:c0:55:bc:f5:4b:6b:c3:e7:3b:
                    d9:68:f1:0a:94:8d:e1:8c:a3:e3:15:16:6e:81:7b:
                    ed:a9:e3:07:ed:d4:3a:67:36:8d:fe:9b:32:de:9e:
                    2a:91:ca:40:21:ef:0b:6f:3f:ad:33:bf:22:a5:bc:
                    89:3c:93:8a:86:8e:b2:b2:c8:53:59:a0:9f:d4:51:
                    58:a0:78:50:22:e9:fc:1b:3e:28:39:36:fa:ef:ff:
                    4c:57:9c:9a:6d:83:3e:0d:a9:cd:aa:6e:5e:b8:f1:
                    b5:c6:6c:f6:f5:2d:55:74:36:7f:03:c6:07:64:ca:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EC:96:01:2A:A4:49:B9:27:61:3A:24:9D:9C:E3:7C:1A:74:AC:AC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e5cd11-e33b-4080-91d5-f550f1d7a0b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01f::/37

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:3d:aa:e7:4b:2f:db:90:3b:ee:bb:b6:b1:fd:0c:16:5d:
         8a:5d:27:bc:2e:dc:66:c7:c0:24:f0:b0:d0:bb:18:af:5c:2b:
         24:7b:58:32:b4:1a:24:cb:01:c1:a3:92:f4:a5:1e:b4:a2:88:
         d8:02:bf:b2:8a:e8:44:e5:76:9c:e4:18:78:a3:dc:2d:95:e1:
         86:5f:73:65:f6:32:4d:45:c1:2a:24:51:39:43:b5:e9:02:87:
         df:59:00:1b:75:01:45:b7:ce:81:3c:1f:f1:9d:1c:6a:c6:19:
         ee:16:fd:2b:1e:1a:1d:b4:6d:54:d6:ae:b1:cd:02:92:85:7e:
         18:26:64:dd:d4:5d:17:d2:06:f8:8a:9e:dc:0b:05:23:22:9a:
         8c:57:4e:30:e5:ca:9a:f5:58:75:dc:49:13:c3:f4:38:53:5e:
         5c:4d:c6:d9:18:bd:67:db:26:d1:e7:57:f1:35:82:35:3e:d9:
         da:08:19:18:45:3e:90:6c:d8:f8:3f:2e:ce:f5:eb:ca:95:6e:
         8a:36:e7:d5:33:13:66:27:6a:53:65:53:cf:53:8a:62:09:31:
         19:26:1c:7b:cf:af:c6:a6:2b:16:7a:24:c6:4d:79:72:c9:df:
         30:66:27:48:39:0c:c6:b5:ca:8f:88:a8:ed:8e:31:2a:28:84:
         2b:24:52:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----