Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
File:                     5acd35f8-42dc-4211-8060-407321cbd4dd.roa (raw, json)
Hash identifier:          TGD69d1hQE3+ZjzmgHd/+aQjQbCuXe08gIAcx3pIK/U=
Subject key identifier:   7D:E9:4E:D1:D7:08:A3:D0:5F:B5:E9:86:73:D4:7D:CD:9C:50:26:10
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       51BC72224296EDB0296758423C5C18DD830A47A1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
Signing time:             Fri 11 Jul 2025 19:50:46 +0000
ROA not before:           Fri 11 Jul 2025 19:50:46 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d077:6040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bc:72:22:42:96:ed:b0:29:67:58:42:3c:5c:18:dd:83:0a:47:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:50:46 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=a59ab5a916ffb4f184e9e9edc72d2ec4f6b550f367cc79bd965692169306537f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:30:9f:a2:76:18:c5:6c:0b:c9:62:2b:9e:
                    f5:b9:c1:47:fa:0a:ce:7a:57:b2:b3:d5:fe:6a:a6:
                    04:77:69:d8:78:7e:a8:48:f5:f9:2d:1a:c7:b7:f6:
                    33:0d:bc:78:ce:97:ab:22:d1:56:a1:66:28:c6:c7:
                    0f:d8:f2:f9:f4:5e:ec:53:29:26:5d:68:b3:e5:a3:
                    75:61:31:8c:24:6d:76:82:8a:6d:86:df:1d:e9:1a:
                    4c:90:4f:3f:1a:2d:e1:75:9e:c5:c3:df:7a:19:1d:
                    1a:5c:af:0e:32:d6:8d:9e:a7:1c:af:01:fa:11:9e:
                    06:50:f6:ae:c8:a4:b8:d9:cd:45:97:f2:c5:99:20:
                    47:4c:98:26:88:7e:2c:56:df:60:62:43:51:b6:33:
                    71:4e:78:9a:0d:e6:26:2f:08:cb:e0:b7:08:1c:fd:
                    81:0a:d7:98:34:6b:50:56:c5:be:a1:b7:a0:de:62:
                    8d:cc:af:99:3e:14:ce:4d:4d:28:79:85:22:8e:a4:
                    81:ef:9f:a3:73:a7:9c:a1:5e:9d:eb:1f:76:13:54:
                    61:d7:1d:56:6a:a6:8a:7e:cc:db:47:83:52:fb:42:
                    d7:77:34:1c:6c:e7:87:13:84:3a:6a:63:e7:56:17:
                    87:84:a8:f4:65:1f:7e:d0:03:67:94:91:2c:28:6d:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E9:4E:D1:D7:08:A3:D0:5F:B5:E9:86:73:D4:7D:CD:9C:50:26:10
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d077:6040::/46

    Signature Algorithm: sha256WithRSAEncryption
         76:31:d5:15:11:61:9c:ec:07:cb:18:bd:c3:50:bc:17:ae:78:
         1b:c2:7b:6a:99:37:5c:6f:1d:67:84:00:29:bc:bc:ff:e7:4d:
         b3:94:e1:63:38:eb:42:3f:5d:9b:6a:e3:93:ae:fb:1e:93:7c:
         43:bd:bb:60:0b:9d:f1:16:07:5c:99:09:d8:1a:d0:a8:80:68:
         cb:0e:fa:66:5d:90:16:c7:90:ff:8d:61:16:de:4d:3f:b5:8e:
         bf:09:09:57:98:16:6d:c7:9b:43:76:35:f8:fb:d2:5d:cf:05:
         03:d8:22:20:bd:d8:02:6f:28:9b:b5:6a:59:e5:1c:fa:2d:fa:
         57:db:f9:d9:23:a9:60:68:0d:04:73:fd:fa:6a:e1:2b:69:73:
         05:1e:c8:99:38:74:5e:88:22:23:16:30:43:e8:8c:f3:3f:12:
         12:15:59:31:3c:b1:42:a0:83:fc:8b:0d:b3:3f:11:ec:6c:4b:
         99:8c:1b:35:8d:39:45:b2:25:0e:18:04:56:5e:83:59:d0:c9:
         07:13:93:25:e4:ab:b3:b2:7e:ae:13:9f:2e:43:57:0d:db:79:
         6c:67:df:55:e5:55:d7:5b:e0:00:c2:62:cc:14:2d:46:a2:6b:
         99:b3:2d:a9:2f:41:67:ac:de:21:b8:ba:c3:dd:02:f9:d4:53:
         9e:68:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----