Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0fe279cf-b55f-4d96-9958-ec3ecd64b0c8.roa
File:                     0fe279cf-b55f-4d96-9958-ec3ecd64b0c8.roa (raw, json)
Hash identifier:          +Qr3LDG4DDcf0C/XB1e4z8yVPtVkC51D/kffL3av158=
Subject key identifier:   B0:24:8B:95:DF:06:CC:E1:3F:8B:9B:AB:1D:44:9A:6B:7B:72:74:0B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       081C8C8F020B474A32763280280A4274F675F49A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0fe279cf-b55f-4d96-9958-ec3ecd64b0c8.roa
Signing time:             Mon 14 Jul 2025 15:30:12 +0000
ROA not before:           Mon 14 Jul 2025 15:30:12 +0000
ROA not after:            Mon 18 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d014:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1c:8c:8f:02:0b:47:4a:32:76:32:80:28:0a:42:74:f6:75:f4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 14 15:30:12 2025 GMT
            Not After : Aug 18 23:59:59 2025 GMT
        Subject: serialNumber=d2413c555ac8aebe921c2073e57b9e43a74a3534efda11e4e1bf9154219980ac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:46:97:a4:bf:c6:31:7e:ba:71:c0:ba:33:
                    6c:42:25:6a:c3:d7:7e:5e:a7:84:4e:03:a6:6d:da:
                    12:19:27:2b:a9:9f:36:93:5e:b7:00:29:ab:ce:44:
                    0c:fa:0a:e1:af:34:ff:f6:35:5b:30:1c:f8:9a:68:
                    31:39:09:ad:44:e1:79:ca:f6:38:3d:4e:85:0d:ef:
                    28:85:38:f6:e1:ac:56:43:ff:5b:d4:bb:c9:46:52:
                    c8:d9:9d:38:94:aa:1f:05:a1:af:6f:d9:74:46:5d:
                    cb:39:3c:3f:2a:d3:53:04:ec:55:63:e1:ed:6e:94:
                    06:0b:05:a4:6e:2c:a8:7f:bb:2c:d1:54:f2:32:d3:
                    b5:4b:a9:50:14:fe:f0:da:09:54:c0:c0:25:05:6e:
                    0f:e0:0d:fd:2b:c2:18:53:47:6d:9d:7b:98:d0:00:
                    f3:c9:16:65:d6:d6:b1:18:da:e7:87:20:b3:66:f8:
                    9e:8b:89:e9:8e:06:42:f8:c4:eb:dd:36:b6:fe:90:
                    8c:97:40:1b:aa:19:4f:0b:af:e5:64:1c:fc:17:c3:
                    8f:8f:58:d4:8f:a2:67:13:40:7d:37:55:48:5c:38:
                    fd:9a:ae:b9:9e:50:ef:5b:97:26:ad:9e:21:61:ae:
                    e4:ed:19:02:0b:75:59:01:96:8d:bb:15:bd:be:fd:
                    98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:24:8B:95:DF:06:CC:E1:3F:8B:9B:AB:1D:44:9A:6B:7B:72:74:0B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0fe279cf-b55f-4d96-9958-ec3ecd64b0c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d014:1400::/38

    Signature Algorithm: sha256WithRSAEncryption
         37:5b:24:df:8e:18:78:2d:b4:6e:56:ff:79:c6:a2:20:da:c6:
         4f:6c:a2:7e:de:9c:4c:c4:e8:66:71:9d:52:34:b7:80:3e:30:
         30:0d:10:2f:14:33:3a:ea:b5:f6:94:b0:b9:6f:77:03:bb:e0:
         f2:31:5b:7f:a0:ca:04:72:42:3b:03:2a:ef:39:f9:ed:11:23:
         7f:45:cf:2f:36:28:b2:b2:2e:53:1b:c9:f9:ff:db:6a:00:bf:
         b1:a0:13:10:6d:5b:a8:ca:12:66:bf:b0:f9:76:37:98:70:8c:
         82:4a:b2:c2:8a:d5:f8:a0:44:49:24:b4:9b:41:97:67:69:6b:
         eb:98:3c:2a:2d:80:4a:70:16:f9:7c:cd:6b:26:94:56:47:91:
         f0:5d:42:b9:0e:46:a8:eb:56:4a:48:04:0b:f8:b7:ae:a0:64:
         75:8e:50:0f:dd:40:f8:33:48:ac:41:b0:5a:5b:68:fa:ae:59:
         60:bb:62:cf:1f:b1:88:07:f6:ee:73:20:db:3f:c4:62:fe:1c:
         eb:c9:b0:c2:ec:be:62:92:3a:e8:f6:d2:eb:a8:53:17:04:af:
         2a:b8:ed:8f:f3:b6:60:29:58:1e:4c:f0:89:7c:fc:45:eb:88:
         ee:f2:7f:fb:b1:5b:c6:45:5e:b4:ee:cd:6d:20:de:8f:14:52:
         1a:98:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----