Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41abc6c7-a6fb-4666-b503-a8a0784797a1.roa
File:                     41abc6c7-a6fb-4666-b503-a8a0784797a1.roa (raw, json)
Hash identifier:          xh8zLvtUbyhbDV7trssP+XYiAzE+IpBJb8MM4POIucg=
Subject key identifier:   A8:35:5F:DA:56:2F:E3:A1:B7:35:C7:06:06:82:38:CB:A7:19:B0:02
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       02FAED6CC635012BF50C71A1B65363ECD6B5A6BB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41abc6c7-a6fb-4666-b503-a8a0784797a1.roa
Signing time:             Fri 11 Jul 2025 19:20:18 +0000
ROA not before:           Fri 11 Jul 2025 19:20:18 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fa:ed:6c:c6:35:01:2b:f5:0c:71:a1:b6:53:63:ec:d6:b5:a6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:20:18 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=e2accc7cf0d5a3cc44c22a9a8d1e15c18f23c7a275ff5e61b3b86ff17b4dba61, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:9c:e2:92:ed:86:e7:d3:70:be:ff:4f:91:
                    7b:02:d8:2b:01:9b:cc:34:f0:cf:1a:a2:22:28:ae:
                    c8:b7:3f:98:43:75:ce:f6:ca:e9:f1:a3:cd:b3:a6:
                    39:da:d9:d2:2b:4f:82:ea:89:79:ef:8c:60:eb:eb:
                    dd:d3:a8:c0:b4:ec:a2:c0:0b:54:9b:7c:97:2a:bc:
                    cc:f2:60:7c:51:02:b3:06:f2:b1:89:b8:5c:cb:6c:
                    62:ef:c3:5b:a8:b6:c0:dd:ef:dc:be:5d:a7:cc:ff:
                    7b:5a:30:d3:e0:8c:0f:ba:22:81:c3:4a:af:3b:15:
                    1c:de:e4:5a:fd:93:95:35:31:d5:9c:77:25:17:d8:
                    56:61:b0:db:c9:12:8a:79:06:de:4d:45:4d:2d:a7:
                    30:fb:3c:58:48:14:c8:77:59:05:59:ad:6e:40:1c:
                    95:82:a4:73:4f:87:e0:d7:59:c2:7d:20:f5:84:3d:
                    dd:b4:4f:8c:3c:60:a3:fa:0d:99:2c:9f:6a:ce:42:
                    3c:1a:7e:a6:0a:6a:dc:ef:a0:0b:78:a6:47:80:d3:
                    12:09:f3:09:2a:cb:75:3b:3c:bc:32:fe:b8:4c:b2:
                    07:11:c7:0a:4c:10:bb:42:16:a2:15:2d:00:d8:b0:
                    3d:13:ba:c8:1a:20:eb:9f:69:94:be:e3:92:07:4a:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:35:5F:DA:56:2F:E3:A1:B7:35:C7:06:06:82:38:CB:A7:19:B0:02
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41abc6c7-a6fb-4666-b503-a8a0784797a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:f2:fb:fc:2d:6e:77:eb:84:a2:6b:42:26:97:30:52:fb:c4:
         f5:21:fa:12:c9:39:21:58:39:99:9f:95:e0:55:03:e6:94:30:
         8a:54:9b:db:9c:01:22:4c:78:be:91:30:91:90:ce:9b:78:6a:
         ce:e9:3a:a9:25:55:08:ed:94:19:a5:a7:d9:fd:06:d0:82:5d:
         12:67:ea:4e:f9:62:1a:d1:cc:44:1b:f9:e8:e0:2a:2d:f9:13:
         06:32:32:26:b2:ba:c2:4e:f5:f7:69:fd:36:a6:3c:34:30:b9:
         09:39:54:fa:47:72:44:06:84:f8:82:64:6e:aa:0b:c1:5b:92:
         05:c6:be:f5:5e:e1:e8:a7:2c:00:5b:66:a3:ec:88:93:cd:65:
         c6:7f:5a:22:99:e6:dd:00:0c:08:d7:e3:d6:c2:2a:60:c0:26:
         45:7e:ac:89:df:77:88:0e:00:b9:09:01:fe:82:9d:77:2e:8c:
         98:d2:65:c9:8c:af:0a:d4:df:71:1f:bd:3b:b0:64:88:a4:4a:
         70:7d:8f:c2:99:3f:50:b0:9d:00:02:77:f5:de:35:94:36:69:
         70:62:89:c7:57:9b:c2:d5:0b:97:8b:1b:b1:95:b2:70:79:dc:
         22:2c:33:3b:17:2b:c2:98:83:ba:f1:27:d1:00:ab:19:58:00:
         81:a0:8e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----