Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7be7b1a7-fc94-4ff6-9fe8-9e8c1a28d695.roa
File:                     7be7b1a7-fc94-4ff6-9fe8-9e8c1a28d695.roa (raw, json)
Hash identifier:          7kag1BAW6Hriel3UiabijceNml1m7l93RGfBBFBbarY=
Subject key identifier:   E2:6D:35:CE:96:77:44:9A:26:A5:AA:FB:63:9E:62:0A:51:97:35:71
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0B251640A9089F5DF78BB27A186CFE5A40F2BB71
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7be7b1a7-fc94-4ff6-9fe8-9e8c1a28d695.roa
Signing time:             Fri 11 Jul 2025 19:51:12 +0000
ROA not before:           Fri 11 Jul 2025 19:51:12 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:6080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:25:16:40:a9:08:9f:5d:f7:8b:b2:7a:18:6c:fe:5a:40:f2:bb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:51:12 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=0726a1384ca54884c0ffa83d61d76d5af51daf98247a5011c0ac6351f290a48e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:0d:cd:3a:58:2d:e8:f6:4d:4d:d5:9b:ee:
                    ac:f4:a9:31:16:12:d9:7e:84:44:90:83:fb:db:21:
                    f5:49:a4:d1:6d:3f:e6:bb:2b:aa:ec:2b:ab:12:08:
                    08:9d:15:33:8d:44:55:8f:52:b6:2b:43:31:68:e7:
                    2c:d0:3e:64:97:ab:74:6a:14:46:47:5b:cb:46:d8:
                    dc:32:4c:53:ea:8d:05:32:7f:2f:74:b4:2a:4d:55:
                    b9:1c:86:66:4c:43:4c:5f:33:71:9b:c3:62:1d:ee:
                    2b:01:d4:14:46:c0:c4:07:de:c2:56:20:c6:73:01:
                    9a:eb:c5:ec:ed:9a:76:c2:51:39:47:4f:5a:3d:da:
                    72:0b:0b:ac:51:32:2b:9a:3f:36:fe:a0:2b:0f:1b:
                    58:84:f6:37:44:3d:8b:8a:cd:85:b5:23:2c:5a:84:
                    9f:38:13:be:86:0c:f2:c6:30:a9:aa:c9:fe:82:4d:
                    0a:5a:86:28:0d:48:4b:8d:33:af:bd:3d:36:9d:21:
                    79:16:0d:76:59:22:00:cc:1d:15:3b:bb:b3:22:b1:
                    a7:3e:7e:84:43:c8:6e:a3:2d:61:bf:88:57:1c:27:
                    b6:cb:70:52:ce:96:3c:ed:2e:76:44:d6:86:e9:02:
                    d8:f6:de:f5:2c:81:81:0d:cb:90:24:c8:2f:87:1b:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6D:35:CE:96:77:44:9A:26:A5:AA:FB:63:9E:62:0A:51:97:35:71
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7be7b1a7-fc94-4ff6-9fe8-9e8c1a28d695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:6080::/46

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:24:24:e6:20:11:f6:e5:fd:04:83:69:42:ef:d2:84:38:
         e7:7f:51:15:40:82:6a:0f:0f:bc:99:87:b9:00:61:3e:84:d9:
         18:82:24:1a:ee:67:33:d0:de:da:a0:09:92:bc:d1:17:6c:a9:
         7f:b1:56:b1:35:e9:78:5e:04:c8:3c:43:1b:8f:75:47:04:50:
         01:1a:9d:97:07:83:c1:2d:42:dc:68:74:98:11:16:4f:f0:51:
         bd:07:da:10:be:75:37:20:5d:e1:bc:a2:2d:ab:f8:f3:f3:30:
         c5:e1:26:71:eb:88:5c:58:f8:6e:75:b6:a9:4b:c4:90:26:2d:
         b0:8b:ca:d7:e4:e2:43:ac:17:d8:7c:b3:1a:7c:08:0f:79:82:
         38:21:20:29:42:81:a0:d1:e5:e7:df:54:7e:ba:b1:00:e5:3a:
         ea:33:d5:97:85:ef:60:91:69:16:c0:d0:b7:63:9c:c2:77:65:
         3b:e5:44:91:ff:a8:6b:15:bf:06:2a:83:bc:e2:69:1c:ae:34:
         26:36:d2:f6:93:95:74:36:f1:43:aa:d0:cf:49:f1:ac:ee:ac:
         fd:6b:7a:70:e8:c0:35:40:16:c5:17:29:ea:a4:75:97:d4:64:
         74:81:7b:e9:4d:08:86:19:34:5f:aa:3c:d1:f4:d3:26:2b:05:
         05:56:b6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----