Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
File:                     44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa (raw, json)
Hash identifier:          IHij0dEGKvJNE6qTDOBhhLEA5WCYQHaIdfHZ5XHCZeA=
Subject key identifier:   C5:0C:AE:72:7D:EB:63:82:E1:EC:8A:FE:09:49:FC:1F:49:5E:B8:7F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       09BD0BA6637AE0AE1C347926DEB501DD41D41FE2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
Signing time:             Fri 11 Jul 2025 18:50:43 +0000
ROA not before:           Fri 11 Jul 2025 18:50:43 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:5040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bd:0b:a6:63:7a:e0:ae:1c:34:79:26:de:b5:01:dd:41:d4:1f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 18:50:43 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=524e005811ed670597040ce10abbd52a0f49637c71043b5bb3a01612622a356e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:46:f6:4e:8d:fb:62:b6:fc:5b:14:05:fd:
                    17:e6:99:eb:87:49:a6:a2:1d:ac:98:d9:5b:a9:ce:
                    47:95:1e:1a:af:3d:42:42:87:de:8c:51:5f:3a:47:
                    34:29:dc:d9:0c:01:f5:c6:b7:60:75:43:a0:cb:9b:
                    7b:00:17:69:7d:1e:6b:b9:85:05:63:99:6a:9f:b4:
                    68:61:40:c3:09:d3:db:15:77:76:04:9c:ed:28:f8:
                    0a:1b:2c:14:f9:ac:cb:cf:57:da:bd:2c:8c:7e:b8:
                    ee:0c:80:29:fa:8a:99:77:9d:64:12:56:4a:a0:ca:
                    71:71:e7:9a:5a:95:3f:67:e7:dc:50:be:2d:17:03:
                    95:58:44:6c:de:e5:f2:d6:4e:6f:44:96:c5:c9:6d:
                    d9:ef:cc:53:18:ca:e6:3d:56:1e:a2:91:be:3f:16:
                    ba:7c:02:53:77:3c:d1:65:47:44:d4:62:e2:50:26:
                    65:ff:46:87:c9:b2:9c:dc:78:b9:86:7d:db:2f:80:
                    cf:f7:0a:a1:9e:ab:04:ee:f1:0b:c4:60:34:2c:00:
                    f0:12:61:e7:79:aa:cc:f8:c0:80:fc:99:c0:cd:3a:
                    24:23:3f:0f:6a:57:7b:e6:58:44:c8:f6:49:9a:b1:
                    27:bc:1c:48:1b:b7:41:f2:f6:76:6b:f7:d1:d4:82:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:AE:72:7D:EB:63:82:E1:EC:8A:FE:09:49:FC:1F:49:5E:B8:7F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:fa:df:f6:0b:76:c4:ab:c8:88:9a:15:d0:9a:72:4f:8d:1b:
         ce:be:c9:e6:d8:0b:83:55:e5:6e:15:36:d0:20:c2:58:68:d4:
         8c:f5:cc:93:b4:08:61:96:af:5f:d2:12:31:06:08:06:11:ce:
         c1:3b:fa:9d:61:74:43:bf:58:a0:eb:00:52:ca:e1:a5:87:e8:
         23:f3:51:8a:69:c9:02:ec:43:94:42:26:b6:5e:02:f8:ec:31:
         68:f8:91:3e:6a:f7:35:dd:c1:1d:de:98:1e:5b:5b:76:97:03:
         87:45:1d:16:77:bc:fb:f2:8d:ad:f1:d8:13:c6:fe:d3:cc:fd:
         33:fc:6e:97:b6:be:4d:4a:dc:87:74:70:1d:32:6c:2e:a7:5d:
         30:78:98:51:18:85:7b:43:f4:8f:d9:c7:74:c7:de:ed:47:6f:
         ba:fa:60:c0:f8:9b:89:a0:bd:86:81:ba:c2:14:99:d9:ef:52:
         00:60:61:59:95:0a:a0:6a:28:cb:ad:0e:5d:b7:1e:29:bd:12:
         c4:31:11:f9:e6:f9:85:7d:54:3c:f7:24:fc:c6:f9:98:ce:6a:
         b9:2c:85:71:2c:c6:9c:45:05:0d:04:a7:f2:7f:6d:6b:1f:b0:
         1d:31:2d:12:68:a6:2d:63:19:dc:33:b6:ba:18:a2:22:bc:be:
         94:f4:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----