Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35ae0aa1-bb4f-48d3-9926-1e5852d54c6d.roa
File:                     35ae0aa1-bb4f-48d3-9926-1e5852d54c6d.roa (raw, json)
Hash identifier:          BARKtrvN6X/rZZYpWVIXmlEUPoMGj+d4s2mTDSK9Q44=
Subject key identifier:   0F:BB:AE:AF:68:56:0A:17:04:DB:67:A6:8A:97:26:20:73:47:A3:3B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       55ECA241537A6CAF822DA2ACB7D9E774DDAB9995
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35ae0aa1-bb4f-48d3-9926-1e5852d54c6d.roa
Signing time:             Fri 11 Jul 2025 18:51:15 +0000
ROA not before:           Fri 11 Jul 2025 18:51:15 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:40a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ec:a2:41:53:7a:6c:af:82:2d:a2:ac:b7:d9:e7:74:dd:ab:99:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 18:51:15 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=96943e2eb9ad5f0d46e5ab0f4ef3a10a2f6f4760ca8fcd05685a5ad4135fa52d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:c1:6c:93:11:5b:69:9e:91:d1:cd:65:86:
                    a4:16:fa:27:74:fd:76:f0:02:14:65:3f:04:fe:69:
                    8e:8b:15:af:dc:13:ea:a7:cc:b6:14:ad:72:70:a9:
                    3a:de:ef:91:00:b4:a9:08:0c:57:1b:dc:3a:e6:1a:
                    55:07:96:e8:b6:6f:1a:66:ea:15:cb:a2:eb:60:8a:
                    92:30:d7:5b:44:2f:04:1f:62:cb:76:e7:ec:42:7a:
                    9e:10:57:21:cc:32:6d:0f:18:0c:48:1e:4b:ce:d1:
                    21:5f:b6:17:ca:e5:f1:59:4c:9c:96:7e:4c:af:e6:
                    7f:ac:d0:67:9f:d5:86:f4:d8:11:a7:a3:e4:47:e7:
                    2c:63:4f:c5:62:8b:26:9a:9b:56:a0:22:b6:c0:27:
                    e6:a7:23:92:69:20:05:39:df:84:c1:1c:c8:84:a4:
                    8c:1b:5c:41:e8:05:d2:28:a2:ff:bc:cb:20:48:0b:
                    d6:57:57:6c:20:05:9b:8e:91:65:79:26:90:ae:04:
                    1a:46:3f:d5:04:f7:fb:ac:6f:bc:e0:0d:20:34:ea:
                    f8:3f:e6:06:64:3c:58:f8:4f:f1:6e:6c:27:9c:ef:
                    ae:5d:54:d3:32:61:51:6e:c2:e9:b3:b7:fc:dd:33:
                    17:6c:38:4b:51:e9:ff:00:aa:17:cd:c5:c8:0b:1f:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BB:AE:AF:68:56:0A:17:04:DB:67:A6:8A:97:26:20:73:47:A3:3B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35ae0aa1-bb4f-48d3-9926-1e5852d54c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:40a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:2f:36:82:37:40:e1:af:0b:20:c3:af:08:0f:b7:db:70:28:
         10:31:69:41:67:a9:1c:9a:8e:39:2b:48:83:e7:f5:ae:e1:e3:
         27:19:81:5c:f4:2b:88:9e:3f:62:cd:c1:41:05:ca:c5:56:60:
         57:5c:92:06:a0:ff:d9:09:c9:a9:8a:c7:17:59:7f:1b:d1:24:
         c5:ff:6e:d9:f6:55:a4:1f:e4:df:4e:41:58:a7:be:8a:83:45:
         3b:6a:39:76:00:b6:a0:1d:a3:a6:f4:5a:50:19:e1:20:e7:ef:
         0d:c8:1e:78:e5:c5:8e:5c:35:db:22:c4:9c:30:13:2e:4b:4e:
         3a:84:e8:3f:5e:78:b8:4e:fb:1c:1f:ca:a0:65:10:69:fb:d7:
         9c:3f:79:b1:1e:30:f9:be:4c:68:1c:5f:1c:e0:b7:84:6e:33:
         fd:f6:c4:e1:e4:2d:02:0a:56:1f:89:18:57:20:51:7a:72:af:
         3a:71:70:69:ce:df:3a:ec:50:b7:5b:62:e7:b9:81:2c:3d:55:
         80:3a:64:67:52:da:a3:33:04:d5:82:6e:7f:57:41:4a:e6:91:
         1a:6e:b4:98:10:53:c5:c8:28:75:97:b7:4a:58:ab:42:03:68:
         14:f6:06:9b:47:9c:10:72:c4:28:d9:9f:5f:47:ad:46:7e:73:
         0e:1f:ed:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----