Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/47b4bd5c-c9b0-4a11-b3ca-d1275fd15ca9.roa
File:                     47b4bd5c-c9b0-4a11-b3ca-d1275fd15ca9.roa (raw, json)
Hash identifier:          ttMYuwcBEG/rRyWoT8famYVbUVh5GUFKVMe191l4AxQ=
Subject key identifier:   57:3E:E9:F6:0C:01:C3:B2:E2:12:6F:DC:97:87:30:7A:D6:86:1A:69
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       68C654A7D72A668503991F4D0DE6614E0D8E56C6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/47b4bd5c-c9b0-4a11-b3ca-d1275fd15ca9.roa
Signing time:             Fri 11 Jul 2025 20:00:07 +0000
ROA not before:           Fri 11 Jul 2025 20:00:07 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:40c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c6:54:a7:d7:2a:66:85:03:99:1f:4d:0d:e6:61:4e:0d:8e:56:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:00:07 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=7611050ccf376321d13965224dd72216ea14e6bc0f15aab75c1e08a7d49f11cc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:ee:ac:e9:51:72:95:b7:2d:ce:72:01:b4:
                    08:b9:6c:c0:ea:68:d6:75:47:a1:0d:56:50:0c:bc:
                    71:a1:73:bb:6d:fd:73:09:d8:50:5d:64:84:38:9f:
                    93:eb:2a:61:81:80:67:dd:c7:ad:dd:11:c2:ee:40:
                    d3:57:23:82:5d:6a:99:33:06:8d:8a:09:29:18:36:
                    f7:f5:37:39:9b:ac:bd:a2:ef:fa:b4:9b:8d:d9:82:
                    6b:e7:d5:4d:ea:d0:0a:63:7e:ef:c1:92:d6:48:8b:
                    28:7c:d7:09:1d:a5:8e:0d:f5:db:5b:5e:29:9b:f8:
                    28:68:45:0e:5a:1b:b2:11:8d:21:85:70:3f:f9:c4:
                    5b:0d:e2:96:37:5c:a6:f4:9e:ad:60:4e:2d:35:4b:
                    16:4a:5b:1e:36:bb:8f:c3:6d:dc:63:a6:fb:23:06:
                    c0:1a:15:2e:bb:e3:f7:ad:d0:7a:f9:d7:47:d1:fe:
                    08:2a:a5:f7:cc:16:9f:f8:19:62:84:4b:82:8d:15:
                    70:2f:19:72:35:17:1c:5c:5c:e4:17:4b:13:d6:b4:
                    74:81:56:83:e2:d7:6a:97:27:fb:17:ae:84:f3:66:
                    aa:50:d0:ba:27:1a:c7:30:4c:22:bb:d7:de:75:32:
                    1b:d7:39:93:a9:31:ba:96:17:17:e2:74:4f:c3:ba:
                    b3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3E:E9:F6:0C:01:C3:B2:E2:12:6F:DC:97:87:30:7A:D6:86:1A:69
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/47b4bd5c-c9b0-4a11-b3ca-d1275fd15ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:40c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         90:0f:4a:3f:d8:12:02:bc:c8:3e:39:c6:15:20:31:6d:a8:0d:
         95:97:45:ab:e6:63:7d:f6:75:28:64:9a:1d:98:5b:3b:02:c9:
         77:e1:0d:d3:99:93:ff:e3:cd:84:f1:ad:8d:b9:b9:a1:ab:e2:
         62:8f:e2:f3:4f:82:e6:f6:2c:d0:ba:0f:1d:aa:bf:b0:ee:4c:
         a9:bb:44:7b:87:9b:27:b8:e3:a8:6a:ee:18:84:80:93:58:80:
         2b:e8:29:d3:15:17:2c:38:5a:b3:44:0f:60:9c:54:91:31:f5:
         18:5f:85:ed:9e:83:4f:40:41:86:ad:21:0c:38:55:52:8a:52:
         63:cf:b9:a0:0b:d7:75:b6:3c:59:84:8a:a9:cd:ac:ec:f4:83:
         d3:8f:cb:59:b2:7f:3d:ad:44:e0:a3:14:12:36:d4:c4:4a:d5:
         d0:37:50:24:36:94:ff:7e:86:08:cf:92:f1:63:90:b0:39:01:
         16:a8:ce:2b:9a:ba:5d:da:7e:f8:5a:ff:d7:c8:4d:72:33:ed:
         3e:9a:3e:aa:5a:78:f2:35:f4:6e:a8:7e:ed:d8:8d:b2:01:6f:
         50:bd:6d:b8:be:e5:21:f8:87:33:91:ed:d4:2c:d4:cd:2c:17:
         8a:f2:a7:b4:5c:4d:b9:2b:85:0f:69:c6:64:53:cb:8f:bb:56:
         08:59:d7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----