Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0f2e0c7-6d9c-428b-85e5-6a924e7414db.roa
File:                     e0f2e0c7-6d9c-428b-85e5-6a924e7414db.roa (raw, json)
Hash identifier:          6dsifMj7HvFFgPizq6ee3CQMZ7cPgEBiuXxsL+nwAqE=
Subject key identifier:   7B:17:CB:2F:59:92:89:FC:59:5F:A7:1D:21:2F:FA:B6:AF:43:11:BD
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7B9B8621BD07E34B40BB610DC7EAE5DD4D88A5E7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0f2e0c7-6d9c-428b-85e5-6a924e7414db.roa
Signing time:             Thu 23 Jul 2026 15:20:52 +0000
ROA not before:           Thu 23 Jul 2026 15:20:52 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:50c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9b:86:21:bd:07:e3:4b:40:bb:61:0d:c7:ea:e5:dd:4d:88:a5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:20:52 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=4f4f41f41c204d93aef081950a5c716d263a5f489d765700f5785f593e09860f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:fd:c7:5c:df:0b:4b:00:13:e4:e9:1c:97:
                    86:33:74:ea:ef:82:9d:74:0d:2f:05:4b:cb:78:28:
                    a8:56:9b:6c:d7:7e:3d:f3:a1:d7:9d:fc:06:4f:23:
                    bb:4b:aa:b9:8a:62:53:d9:18:88:37:46:9f:35:74:
                    a5:ae:bd:ac:fd:99:a8:2b:c8:33:07:7b:69:1f:09:
                    a7:f5:06:be:72:3f:8e:d7:da:bc:6b:b3:fd:63:8c:
                    a0:ec:d9:11:5a:17:98:c7:53:d0:c0:91:66:fe:a7:
                    4c:63:9b:66:ba:6e:ac:6d:fd:67:7c:48:c1:56:7e:
                    61:0b:0b:2a:39:9b:c9:95:ff:b2:99:15:d8:9a:38:
                    a4:a1:8e:b5:22:8a:bb:74:ce:15:28:a2:d1:6c:be:
                    3a:14:e7:c6:42:c4:df:1e:20:8e:29:e1:8d:7c:5d:
                    c6:c7:ef:b2:38:5d:e5:2b:bc:2d:27:b3:46:a1:fb:
                    ec:d3:d6:3a:fb:7f:40:f0:51:fc:60:4f:0f:43:86:
                    35:85:36:51:6f:5a:22:82:46:ac:a1:aa:2c:b1:58:
                    25:a6:04:07:67:b5:b6:8c:e1:2b:76:0b:41:f0:0d:
                    b7:73:b5:d4:be:7b:80:00:d6:7b:3c:5a:98:11:8d:
                    c5:bd:56:bd:07:e7:e7:5f:a2:bf:43:6c:98:6e:b7:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:17:CB:2F:59:92:89:FC:59:5F:A7:1D:21:2F:FA:B6:AF:43:11:BD
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0f2e0c7-6d9c-428b-85e5-6a924e7414db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:50c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         0a:9c:98:90:fa:88:4d:ea:70:69:6c:f1:38:62:68:4e:47:8f:
         b3:22:ea:8d:16:8c:ca:fb:fb:b6:c1:7a:cd:65:c2:00:5f:bf:
         e4:60:bf:4a:8f:cc:df:58:9a:b9:18:7d:e4:8f:5e:ee:0c:ed:
         a7:31:5e:5d:a7:f1:0a:c5:91:9c:b8:8e:8c:2a:42:cb:f8:06:
         15:73:05:e3:cd:c3:ef:05:68:b5:44:9f:88:19:88:3e:2c:53:
         0d:d0:31:5c:1b:cd:71:36:3f:a2:37:78:f9:11:12:8b:aa:74:
         f0:8f:f5:f9:3b:8b:98:74:59:1d:7d:82:02:db:22:e3:9e:4a:
         0c:2e:e3:14:6f:1d:71:57:bc:8a:3e:0b:66:21:af:ad:fc:9f:
         38:54:69:be:36:1b:52:9e:f8:70:d8:0c:5a:67:f6:a5:c6:04:
         64:65:69:13:7d:9c:fa:ad:1d:ec:bc:f5:82:0a:d6:76:61:53:
         5c:79:19:1f:e3:06:b0:aa:9e:0c:17:6d:3b:e9:e2:2e:a8:97:
         51:59:76:27:98:01:d7:d2:cf:9f:58:95:2a:40:38:29:90:57:
         5b:ce:2c:23:1e:1c:09:c9:80:4d:d1:3e:4b:6b:14:64:09:2c:
         0d:81:d2:be:04:2e:38:30:57:f1:c4:50:c1:35:3c:b8:c5:72:
         7f:40:e9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----