Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08648cfd-d5cb-4480-92d0-084369ff8b4d.roa
File:                     08648cfd-d5cb-4480-92d0-084369ff8b4d.roa (raw, json)
Hash identifier:          ZG58m9hjmBqtLvfBA4MwUNLM9L0+QNkj5AMo1hx+l8Q=
Subject key identifier:   EE:4F:9E:86:07:B7:B3:E6:57:49:91:24:6E:3D:DD:7A:F9:A4:EB:A3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7B5727ECD95754F3DED35A77E831CF5EE30232EB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08648cfd-d5cb-4480-92d0-084369ff8b4d.roa
Signing time:             Fri 11 Jul 2025 20:01:21 +0000
ROA not before:           Fri 11 Jul 2025 20:01:21 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:1040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:57:27:ec:d9:57:54:f3:de:d3:5a:77:e8:31:cf:5e:e3:02:32:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:01:21 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=1f1b232a775bb25f689a5355cdfc43e5eacbf2df75dfd2176604500f5c90676f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:81:c7:ff:88:1d:fe:26:5e:03:b6:3b:95:65:
                    b4:f1:63:02:1a:9e:89:9d:28:f8:69:1a:d0:7b:bc:
                    4a:2a:fc:9d:a8:e2:d7:65:79:97:9a:78:b7:6b:3f:
                    f2:ed:c1:cd:76:f0:cd:02:65:57:ec:30:1c:f8:c4:
                    a5:e5:59:dc:65:c8:c6:80:90:f0:4f:de:36:50:4c:
                    fd:af:07:47:66:42:53:e3:1d:d5:bf:2d:ee:7c:93:
                    00:15:01:e2:ba:f8:bc:f0:15:be:69:20:a2:35:81:
                    39:4e:9c:36:99:9c:1f:aa:2a:4b:93:78:0f:9b:7f:
                    6b:6d:b1:a6:44:46:6b:ba:67:c6:ae:96:b8:ed:36:
                    8f:99:29:6a:1a:cb:ea:87:99:a5:ea:ae:7f:82:a4:
                    70:5c:49:fc:69:69:aa:26:a0:51:1a:89:9a:86:21:
                    da:69:0e:69:94:4f:7d:a8:ee:41:31:47:ef:d0:f3:
                    a6:70:62:32:f9:c6:4f:ea:28:21:e2:94:dd:1c:87:
                    82:68:7a:4b:10:32:86:05:27:ad:4b:8e:80:59:48:
                    8e:e4:31:83:48:b6:45:ec:cb:e0:40:d1:a8:72:52:
                    f6:09:a3:ab:bf:36:72:0a:04:69:18:6b:3f:d5:16:
                    7c:14:28:5c:60:e5:fe:71:e1:98:c4:fe:16:ac:cf:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4F:9E:86:07:B7:B3:E6:57:49:91:24:6E:3D:DD:7A:F9:A4:EB:A3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08648cfd-d5cb-4480-92d0-084369ff8b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:1040::/46

    Signature Algorithm: sha256WithRSAEncryption
         02:cf:0b:63:de:fd:e2:63:a8:90:62:48:c7:55:cd:12:b2:62:
         6d:c3:a3:10:90:3b:2b:a5:89:d3:cb:76:eb:2e:6f:b0:dd:03:
         c1:d3:30:63:b9:bc:69:da:6f:55:03:c9:06:92:d0:dd:b4:09:
         96:72:d4:f8:15:80:a3:f1:f8:13:b4:9f:93:34:18:3e:d6:77:
         83:b7:c4:ba:0c:23:74:35:03:0d:22:1e:25:fc:47:6b:05:c7:
         e7:61:3d:9a:c1:00:3d:85:a6:e0:03:da:6a:47:fc:69:dd:67:
         13:50:13:8f:8c:df:0a:bc:63:0a:88:fb:2d:05:f1:3f:c2:b3:
         a4:29:cf:f0:0b:3f:d6:2d:29:de:85:e0:50:4b:14:07:3c:f1:
         73:c0:6a:36:a8:01:2f:2a:4d:75:5e:0e:6f:a1:1a:ba:6e:15:
         14:97:cf:72:37:9b:e3:d3:cf:2f:81:d1:2b:39:d4:9f:89:50:
         65:9a:e6:86:5c:cd:95:20:9b:f0:92:7a:45:c1:d4:8e:8b:19:
         68:3b:83:42:b4:03:81:e2:d0:0b:21:b0:eb:5c:3e:74:c4:cf:
         59:57:c2:1e:b5:1d:49:ff:5a:d4:df:44:6c:77:e5:69:ca:75:
         3e:08:15:4c:43:8f:ad:4f:98:4c:a6:cf:50:a2:fa:f1:df:8a:
         51:d1:5b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----