Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a5c899e-1564-4329-8939-7004d7b754c8.roa
File:                     7a5c899e-1564-4329-8939-7004d7b754c8.roa (raw, json)
Hash identifier:          vkiXXQol4sYooXf7US5dNfJboy3uOSwtgX3hItdzYCs=
Subject key identifier:   F0:98:2B:D3:2F:58:CD:31:24:B8:0F:47:B2:0E:F0:F7:5A:0B:53:03
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       18436553A6C7BC76B90FDC08E593478743C23484
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a5c899e-1564-4329-8939-7004d7b754c8.roa
Signing time:             Fri 11 Jul 2025 20:30:07 +0000
ROA not before:           Fri 11 Jul 2025 20:30:07 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d071:9000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:43:65:53:a6:c7:bc:76:b9:0f:dc:08:e5:93:47:87:43:c2:34:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:30:07 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=be82a88b43bbc7b99d367f65bb5834891f12c71229cfbfbf7ac3e496c458a64e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:12:13:8e:bb:e2:4a:82:46:01:0b:9d:31:39:
                    08:31:84:e6:c5:4f:08:f4:bb:7a:92:39:14:4c:1c:
                    18:a8:65:45:dd:f3:9d:7f:69:7c:e5:36:0c:78:19:
                    82:d7:31:2c:2b:f1:ac:da:48:97:81:d7:a6:41:55:
                    35:7e:c6:33:11:f0:fe:e3:ef:f7:c2:4e:af:68:e4:
                    69:ee:55:f8:4d:ed:08:45:bb:e0:96:ed:b6:7e:a1:
                    fc:a7:8e:b2:70:55:a5:a5:ea:5d:fc:57:bb:9e:53:
                    72:e1:38:24:ed:6a:bc:e7:cf:b7:30:a7:44:41:9b:
                    2d:16:ee:25:4b:30:e4:64:60:c5:f5:ac:7f:b2:c8:
                    78:d8:8d:5e:f5:ad:f2:fc:1c:c6:e7:28:cc:1d:ec:
                    93:6f:44:ce:e3:ad:f8:72:57:19:b4:67:e7:f5:ae:
                    1e:4b:91:a1:33:6e:cf:89:c9:ef:19:d5:19:1a:22:
                    de:32:26:a5:39:89:f3:33:07:3e:9f:7a:6a:89:52:
                    80:13:f9:74:c8:cc:d2:bd:2e:63:e3:ba:d4:2b:04:
                    29:77:73:8b:65:b2:1f:0a:89:47:39:73:84:d8:24:
                    bc:ab:f1:a9:f6:41:7e:4e:be:fe:0c:43:1c:c8:0e:
                    c0:f5:fc:fc:08:fc:60:9d:60:c2:64:e9:07:99:5c:
                    c0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:98:2B:D3:2F:58:CD:31:24:B8:0F:47:B2:0E:F0:F7:5A:0B:53:03
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a5c899e-1564-4329-8939-7004d7b754c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d071:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b8:7a:4e:74:21:db:9d:d8:dc:71:5a:b5:ac:d2:0c:23:e7:c6:
         ac:02:27:45:e2:ff:6b:5d:c9:15:8b:0a:33:34:9d:a2:7c:32:
         54:3e:a3:1c:54:3a:a5:dd:8a:f8:42:dc:70:b7:20:03:7a:5e:
         a5:97:c2:34:ee:8a:df:c7:c6:00:04:88:88:ae:9f:7f:49:53:
         c8:39:4e:a6:7d:eb:ff:44:e2:64:8f:ba:65:02:0f:21:d4:43:
         16:c5:91:b5:68:6b:f1:1f:10:5e:0c:0b:e7:17:a2:37:18:cc:
         c4:f4:ec:ce:07:61:bf:27:11:7e:93:e9:c6:63:52:9b:5d:4f:
         88:34:ab:1c:f2:63:33:22:2d:c2:d4:b3:b8:ab:f9:c8:6d:ae:
         92:e4:e5:b7:4f:3f:df:e1:9d:87:6e:87:36:1f:92:dc:b9:3e:
         6b:cd:3a:61:bd:ba:2d:cf:fe:4e:a0:30:2b:b6:de:c0:bf:5a:
         63:91:ea:4c:a4:5d:62:02:24:07:df:0b:9e:48:11:24:f0:d7:
         27:a3:68:52:38:80:4a:79:09:28:61:98:48:a4:b6:1a:f9:54:
         0d:50:52:5b:dc:0b:55:d9:f6:72:2a:e2:c1:1d:fb:67:81:2f:
         24:64:6a:53:4f:7e:8c:67:56:52:1d:0c:08:37:9c:b8:94:f5:
         e1:14:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----