Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa
File:                     575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa (raw, json)
Hash identifier:          GB4V2/WQZqkXI36e9/S4ATtj/o53l9X0OHCgcYPSj5k=
Subject key identifier:   14:5D:CB:B4:D7:63:40:A8:CA:5F:2A:CC:D6:F6:30:87:84:C7:07:7A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       79D57CEB98A18B4C4D761BC2DA4A6205EBA593D0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa
Signing time:             Fri 11 Jul 2025 20:20:03 +0000
ROA not before:           Fri 11 Jul 2025 20:20:03 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d036:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d5:7c:eb:98:a1:8b:4c:4d:76:1b:c2:da:4a:62:05:eb:a5:93:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:20:03 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=af890e46fd801dc8e331bf0611b3f0708c367aef88bdcd34841d4eb339cff5ac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:41:0f:d0:3b:5e:6b:cf:02:65:f6:03:45:
                    93:d6:57:c0:7c:07:5a:91:32:fd:fb:fd:e0:72:88:
                    0b:45:95:ba:8d:1b:9c:34:b0:b3:14:4d:f8:3a:6a:
                    ff:b6:9f:12:1b:c9:3f:0a:7f:c7:2b:18:c0:e2:e5:
                    90:35:17:19:6b:d6:7a:7e:a9:7a:12:d3:eb:bd:e9:
                    af:bf:d7:91:c3:58:14:5a:a8:66:bd:21:29:03:80:
                    66:30:0a:d8:5a:b9:68:03:0f:32:c4:26:d8:1f:2d:
                    42:9d:05:e4:5e:6d:3b:ad:08:97:0c:0d:86:ce:e3:
                    d1:81:45:84:30:5d:f1:58:82:b8:a6:71:c7:36:a1:
                    bf:44:4c:47:2e:ba:41:b8:f2:43:4e:3a:e0:30:02:
                    29:3a:a9:1d:87:66:ba:8e:13:eb:23:1b:5f:b2:4c:
                    b9:11:37:82:63:90:e6:3a:4c:1d:f5:5d:78:83:d9:
                    b8:6c:fd:97:dc:3d:77:51:39:1e:bf:ac:c6:65:09:
                    c1:fb:e2:df:93:3d:6f:05:3c:18:e2:8c:0e:59:b8:
                    f1:3a:06:7e:93:d2:1d:8d:bd:de:c7:c8:bd:d7:d5:
                    19:06:f9:4b:32:3a:57:d4:37:b1:1a:89:b3:6e:11:
                    67:3f:6c:65:87:9d:de:21:5e:88:1a:7f:9c:41:4a:
                    7c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5D:CB:B4:D7:63:40:A8:CA:5F:2A:CC:D6:F6:30:87:84:C7:07:7A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d036:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:63:a8:78:cd:75:c9:5f:c8:56:1f:d5:96:f2:b3:32:b7:ae:
         52:b0:eb:7a:68:30:22:2c:34:20:da:15:07:c0:73:49:47:69:
         cf:4e:9a:37:53:bf:d8:ec:26:e7:b9:2d:25:1f:c9:27:ba:cc:
         42:4e:bd:24:e7:9f:14:0e:97:7e:3c:97:3c:a4:63:31:7f:3b:
         d1:fe:e9:49:6a:3f:86:6f:10:d9:88:f0:12:2c:88:aa:27:b3:
         ac:eb:58:cd:25:41:81:93:84:9c:ef:ca:5f:95:80:46:f8:bc:
         31:4a:88:c2:ad:9c:97:3f:20:78:86:49:2d:36:72:fa:2f:80:
         3f:8d:49:08:29:2f:bc:30:eb:72:10:a9:ff:c7:d7:70:19:a6:
         69:ec:3f:a2:1e:ca:6f:c0:c2:35:00:e0:5b:6b:c3:04:2f:8c:
         b9:24:ef:23:b4:ea:3d:94:88:d2:8c:3a:4a:34:ed:4c:2b:e7:
         dd:d5:ea:a7:a7:8e:7f:30:d4:95:f2:72:00:ce:48:3a:f6:de:
         e6:fa:a0:83:a4:0b:ed:9c:47:a5:e7:7b:8e:db:88:ea:34:ff:
         e3:86:46:89:88:33:48:55:5b:e7:ee:9f:c5:b3:18:b9:da:ee:
         f5:f1:92:7d:07:f2:0a:d5:6b:13:3f:de:d1:c9:ed:08:0d:71:
         f9:6f:d0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----