Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea558c9c-d0cf-4cf0-99cc-884d490bd330.roa
File:                     ea558c9c-d0cf-4cf0-99cc-884d490bd330.roa (raw, json)
Hash identifier:          2sYJMY33CW9LGL2GhdAWTuhtv8KU9TqxJR3183axYVY=
Subject key identifier:   F1:8D:6A:12:E6:B1:4F:20:7E:E1:2C:30:2E:E7:FB:ED:8F:72:2C:74
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       73EF74E38A32D4F83B20B268DA70EAE21262E602
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea558c9c-d0cf-4cf0-99cc-884d490bd330.roa
Signing time:             Thu 23 Jul 2026 15:30:11 +0000
ROA not before:           Thu 23 Jul 2026 15:30:11 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:1040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ef:74:e3:8a:32:d4:f8:3b:20:b2:68:da:70:ea:e2:12:62:e6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:30:11 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=044d781ebb4b48d0a067167df5dc15845148b9dabc9b4211596f48b97f050f9a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:76:89:d5:5a:5b:4e:fe:ed:08:3b:12:4a:
                    86:26:be:73:5d:30:84:13:37:59:4d:56:93:9a:59:
                    83:24:bc:94:99:c4:12:e7:e8:be:fc:e5:1a:88:01:
                    fe:b0:05:c0:3e:4c:c9:9f:c0:f8:56:81:c3:11:be:
                    71:dd:d2:9a:3a:8f:e9:9d:14:13:ac:6c:fd:da:2d:
                    94:d4:1a:5d:f7:96:49:c2:66:1d:da:65:33:00:11:
                    56:1c:a9:f3:a8:39:a5:07:3c:db:fe:1f:00:ce:c5:
                    59:b0:94:7e:e1:a9:35:be:fc:d7:cb:03:f6:1a:de:
                    d5:67:19:15:c3:51:3d:c2:cb:c2:4a:68:ce:52:2f:
                    fe:70:82:9e:38:f6:c7:6d:61:bd:b8:69:39:2b:3d:
                    f6:d4:a9:55:96:c7:2d:f3:d0:a5:2c:d4:38:e7:56:
                    2e:74:ff:d3:a0:17:94:fd:6e:a2:68:19:e4:3b:ec:
                    85:8b:6a:30:74:96:86:19:64:a1:4a:d9:7c:42:0e:
                    fa:69:64:15:34:4c:ba:33:f5:97:13:33:61:39:30:
                    b5:fc:58:87:33:b6:7a:c0:87:c0:78:17:06:5b:02:
                    f2:91:34:85:8b:c1:bd:ef:b2:ee:34:44:c7:46:53:
                    35:60:1d:44:ff:00:26:75:c0:d5:ac:e8:1a:0f:69:
                    01:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8D:6A:12:E6:B1:4F:20:7E:E1:2C:30:2E:E7:FB:ED:8F:72:2C:74
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea558c9c-d0cf-4cf0-99cc-884d490bd330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:1040::/46

    Signature Algorithm: sha256WithRSAEncryption
         a5:8e:6a:0d:ac:16:1b:82:8e:69:1e:87:cf:17:5b:b9:74:cb:
         45:06:98:c5:18:7e:e3:b5:6b:d7:50:ff:c8:3f:c7:38:76:ae:
         c2:6f:d5:e6:4b:74:fa:c1:77:3b:8f:a0:07:72:d6:55:e2:0b:
         ac:b5:4e:89:2c:ab:67:6a:32:5b:43:db:06:d0:65:4f:a9:54:
         d6:26:ca:b5:7d:1b:c7:0a:2c:18:af:a2:e4:f8:f4:07:4b:3a:
         35:fd:f0:61:eb:5b:ca:eb:d9:7f:dd:1b:24:c6:ab:10:7a:4e:
         c2:88:65:32:47:60:8f:5d:08:74:c7:28:b2:a4:32:80:33:04:
         cd:8b:67:50:bd:59:79:fa:ec:85:c5:23:79:5a:30:2c:37:01:
         3d:c0:67:a9:0b:b6:b6:5a:7e:34:7a:99:d6:f6:39:a0:d9:fb:
         27:71:d4:d7:77:30:4e:e7:80:34:1b:ba:31:a6:f6:7d:b6:2e:
         dd:3b:b7:15:5e:0c:8f:bd:bd:77:5c:9d:24:81:fa:29:12:92:
         57:b2:db:d3:ec:71:79:84:0d:c2:ca:86:62:21:a2:4c:bc:81:
         a7:84:86:04:ac:e1:cf:1b:92:b9:fe:d3:37:89:d5:ef:d2:3e:
         74:fd:31:0e:3f:1d:05:11:73:d2:51:db:2b:36:02:3a:6f:80:
         c2:8e:b0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----