Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6265269-370a-4e3b-983b-9bec3a5c535a.roa
File:                     d6265269-370a-4e3b-983b-9bec3a5c535a.roa (raw, json)
Hash identifier:          CfxEa+aTgKC56Tjh3dnlk+TgkGA7pRVYl0d6QbdHnPM=
Subject key identifier:   B8:74:88:B6:CB:0C:99:13:58:FD:B1:E0:B9:39:E4:79:7D:3A:AA:6D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1C7D0465C80116DFCF41A8178F23493E1213D7DB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6265269-370a-4e3b-983b-9bec3a5c535a.roa
Signing time:             Thu 23 Jul 2026 15:21:07 +0000
ROA not before:           Thu 23 Jul 2026 15:21:07 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7d:04:65:c8:01:16:df:cf:41:a8:17:8f:23:49:3e:12:13:d7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:21:07 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=2ccc933711e434d3bd7e7f6efef27a558f4a306e7d32ba4b208501bd5664657b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:5d:a4:1b:43:30:9b:f5:03:c1:6a:50:5e:
                    30:51:ad:d9:9b:9c:67:f0:d6:57:1c:0d:a6:17:9b:
                    46:94:dc:db:ce:50:ad:2e:cf:59:a2:a3:01:f0:4e:
                    4a:fe:2b:f0:71:e2:fb:de:89:d8:7a:ea:8c:99:47:
                    82:34:91:39:33:e3:69:8f:e8:58:24:d5:43:5d:88:
                    27:3b:64:fc:9a:0e:c2:77:de:2c:3a:d9:79:25:99:
                    9b:8f:46:b5:6a:83:ad:85:ae:75:ec:b9:78:dd:6e:
                    d3:87:c8:4b:53:a6:5c:7a:95:fe:95:bf:a8:16:d7:
                    84:5d:88:45:59:90:4e:4b:6a:42:a1:ef:36:12:2f:
                    0c:8e:59:e2:2b:7f:e7:8c:7e:16:6a:2b:a7:be:da:
                    0c:96:d9:3b:4e:14:f8:1a:1a:7e:a0:45:02:da:15:
                    c4:9c:35:66:14:d5:94:2a:a5:ff:77:28:f5:24:03:
                    d9:07:ec:ea:95:84:52:c5:e0:9d:5f:ff:b2:9e:7d:
                    4c:bf:a8:be:fb:c3:24:3d:2e:6a:42:ab:2e:a2:77:
                    f9:22:98:64:0d:4d:85:01:64:2f:e1:9c:d1:d6:92:
                    1d:56:34:4c:cb:d2:88:1b:c3:e0:33:ad:ca:4d:50:
                    37:2e:3a:64:29:18:77:ec:7d:b6:fa:5f:d6:d6:cf:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:74:88:B6:CB:0C:99:13:58:FD:B1:E0:B9:39:E4:79:7D:3A:AA:6D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6265269-370a-4e3b-983b-9bec3a5c535a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:5f:a4:8e:9f:9e:69:6d:f9:7e:ba:f8:17:ad:66:cf:cb:33:
         55:71:e6:43:34:b7:5f:49:e5:fd:e4:c7:c4:a8:c8:e2:8a:3f:
         b0:f8:c5:8e:2f:66:90:25:27:05:58:0a:5f:05:9d:f0:88:44:
         2f:48:c9:af:c8:ae:d3:8d:d2:60:35:73:d7:52:48:89:5f:1a:
         e7:c1:0c:ad:67:8b:16:8d:07:fb:c0:0b:7a:93:f8:31:5f:c0:
         25:7d:c4:d0:be:43:bc:16:d3:58:9b:66:49:29:9d:01:4e:17:
         3c:82:d1:dd:24:54:04:c6:d5:b4:08:67:80:cb:35:37:30:17:
         92:11:df:94:a5:47:ca:06:6a:46:39:23:45:ec:69:7d:ff:b1:
         7e:d0:fe:76:15:11:61:ef:7c:fc:12:a7:f6:a3:74:8a:ab:34:
         fe:c4:30:74:bb:74:56:ea:5f:d7:91:a7:36:50:a0:3e:3c:40:
         e5:66:55:6a:61:f4:95:37:be:92:bc:56:94:0e:a1:d2:85:eb:
         5b:cb:98:81:a7:16:62:3a:54:25:f3:fa:b9:52:01:c2:72:73:
         7b:44:99:04:80:04:b2:bc:eb:3e:f1:e2:87:90:b5:0c:cc:12:
         33:9a:12:18:23:b7:38:9f:d9:f9:ee:c9:88:37:a2:58:ed:dd:
         ea:79:d9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----