Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52630693-0f5d-4126-ba07-ad0c0c999660.roa
File:                     52630693-0f5d-4126-ba07-ad0c0c999660.roa (raw, json)
Hash identifier:          WxtEL0YndK5XsNHyRdJ9SyZEwqrgpa738J7dqcpw6hg=
Subject key identifier:   C5:A7:8F:AA:85:50:52:1C:57:7E:33:44:8B:FC:C1:BC:80:E8:FB:47
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0EAFF609C2B0A2AC12648985862E826DABF07AE2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52630693-0f5d-4126-ba07-ad0c0c999660.roa
Signing time:             Fri 11 Jul 2025 20:21:56 +0000
ROA not before:           Fri 11 Jul 2025 20:21:56 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d071:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:af:f6:09:c2:b0:a2:ac:12:64:89:85:86:2e:82:6d:ab:f0:7a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:21:56 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=caf11af1ae54778d31cc9268a6cdaecc36d52ef7fd254e556680861029cf334c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e3:52:36:25:9a:bf:8d:e4:4d:76:56:13:50:
                    57:d3:82:b9:b7:8c:70:1c:7c:34:7b:75:f4:a4:9b:
                    38:f1:1c:7b:0b:d5:c9:d3:94:78:f4:bb:a3:a5:0d:
                    b4:d3:34:4c:97:02:24:ea:97:9c:03:a1:34:c5:b2:
                    38:8a:19:53:ea:9d:b6:85:3b:04:a6:5e:58:df:40:
                    6b:2c:c6:a7:6b:db:64:e5:09:18:3b:7d:81:de:d0:
                    d0:b1:07:e2:40:b6:98:06:cd:e4:32:84:35:04:27:
                    4b:2b:23:ce:c0:e5:95:27:48:45:fc:7c:8c:b0:68:
                    96:be:66:21:8a:04:8b:bb:20:5b:b3:47:1e:2f:15:
                    42:9f:5e:82:a4:b0:6a:c2:36:12:82:89:d5:e8:cf:
                    87:94:69:b9:61:ff:bf:8a:74:36:f7:7e:43:95:1d:
                    51:26:b5:57:0b:29:3b:88:84:4a:95:26:91:7f:49:
                    72:98:cb:ea:80:12:7e:8e:46:91:be:29:55:14:0d:
                    34:cc:62:af:67:a1:c6:45:ec:84:7c:e9:2a:f2:02:
                    e4:e2:c5:b8:b4:8c:10:e9:b4:a8:e1:fb:92:a1:10:
                    ed:cb:e6:f9:15:66:7e:9e:69:a9:4a:4e:2f:b6:d5:
                    05:3d:35:bf:e0:2a:ab:28:4d:38:60:60:bc:c0:9b:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A7:8F:AA:85:50:52:1C:57:7E:33:44:8B:FC:C1:BC:80:E8:FB:47
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52630693-0f5d-4126-ba07-ad0c0c999660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d071:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:4e:5b:aa:83:bb:23:ed:30:1d:77:71:78:73:d4:fe:44:3a:
         89:2f:cf:4f:e8:bf:57:59:75:71:ad:33:e1:b0:79:63:8c:94:
         06:82:be:01:1f:ba:ce:9f:4c:4f:ff:49:29:f0:39:f5:6e:3e:
         f4:ad:e1:19:ff:56:f7:a4:b9:e1:2f:76:7e:96:87:de:66:a2:
         17:9b:a7:0b:2d:78:8e:97:3d:aa:4c:c9:3a:51:ad:f7:08:42:
         80:b6:2a:d2:e1:08:81:11:f1:40:25:40:a7:26:d4:6e:5c:05:
         4e:75:59:8a:d5:0e:d3:ed:97:88:27:b4:d2:1e:4e:96:82:4b:
         46:c4:c6:0f:75:2c:c3:eb:71:9c:d1:b0:80:e2:a3:2b:90:2b:
         84:6a:6b:a9:07:a3:ef:6c:cb:bb:a1:50:08:eb:b2:93:cb:6b:
         d1:e5:5a:f7:49:39:fc:78:64:a2:8b:02:3c:9a:de:b4:19:ef:
         e2:c5:8e:7e:a6:56:27:c1:d8:82:8c:e2:65:fd:a3:46:dd:b2:
         09:fe:91:cf:e2:40:57:69:df:11:c0:49:dd:ae:1c:a0:e4:26:
         a2:50:3a:3f:b1:ce:d4:23:73:c6:1f:78:f2:26:84:cf:06:48:
         96:ac:3a:84:5d:f7:3c:f5:c5:fc:04:30:84:f2:ee:e6:86:e2:
         0d:0c:b9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----