Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
File:                     819bfec2-19de-4cdb-ba40-657fff6a743e.roa (raw, json)
Hash identifier:          lyGhWHPGZGNW3hEPsVceMLzqCM2tL9bGBYllTT52hK4=
Subject key identifier:   1D:A1:50:E1:A3:01:1D:AC:E7:8E:D9:08:EE:4E:4C:9E:03:0D:74:31
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       263E4C6B70597BE76CEF69181460582F78DADDE6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
Signing time:             Fri 11 Jul 2025 19:20:02 +0000
ROA not before:           Fri 11 Jul 2025 19:20:02 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3e:4c:6b:70:59:7b:e7:6c:ef:69:18:14:60:58:2f:78:da:dd:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:20:02 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=e9f05848962df53dcf09421945553838f6ebda9077e787f713137f407d9bd6b1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:c0:b7:97:73:d3:49:ff:9c:80:e5:0c:b7:1a:
                    65:57:37:7d:b1:7e:8d:44:91:d8:28:b8:1c:32:bb:
                    0f:91:9c:9b:12:af:78:31:17:8b:ae:5d:65:fb:fd:
                    d5:83:d8:ae:08:2e:03:d9:6a:19:3c:67:03:89:64:
                    0b:ed:b0:f8:12:2a:93:f5:d4:2c:dd:2c:fa:72:0b:
                    50:ec:02:23:8a:07:ec:4c:bf:c4:98:a1:b1:e3:de:
                    b9:b5:57:00:45:9d:e7:6e:f7:7d:45:cc:47:1b:ff:
                    37:f1:c7:0a:66:c1:47:39:4a:fa:57:84:c1:5c:62:
                    ba:fd:cd:b3:95:df:d2:12:5e:e4:31:fa:bd:81:de:
                    88:1c:c4:a5:ee:99:87:af:c9:bb:20:48:6e:72:6e:
                    45:c8:20:9b:d6:11:cf:03:cc:e5:5a:eb:9c:2e:22:
                    55:3d:51:03:8c:d8:f0:d7:4f:00:df:e4:44:35:20:
                    05:07:e1:64:1d:ea:9e:35:aa:55:57:b5:31:31:5d:
                    a8:05:93:4a:ac:ee:06:57:e2:c3:11:13:39:2c:14:
                    b3:18:01:59:db:bf:8c:68:66:41:03:6e:23:1b:a5:
                    dc:66:d6:66:ee:17:d4:f0:d9:c6:5f:4b:b7:f2:19:
                    38:70:2a:c8:2a:0f:e0:49:30:87:42:66:69:3a:17:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A1:50:E1:A3:01:1D:AC:E7:8E:D9:08:EE:4E:4C:9E:03:0D:74:31
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:cf:05:e6:77:c1:88:32:1b:e7:14:58:39:34:b9:cb:fc:37:
         60:65:2a:cf:8e:bd:46:10:d7:2a:ba:39:8b:a1:1e:2c:b5:21:
         9d:44:67:e2:11:2c:30:96:38:ac:af:e6:78:55:69:29:68:b3:
         8b:a2:57:39:34:f0:fa:e5:a9:2f:17:3f:8f:3e:02:6f:db:59:
         aa:02:e4:0a:30:12:54:32:e8:5d:d8:a5:2a:7a:c1:c2:be:b5:
         46:b6:0a:28:b4:43:86:a9:ef:59:2a:99:80:75:d1:0b:6f:46:
         23:e0:11:4a:ee:65:de:c9:45:49:9b:8d:51:02:48:4c:08:32:
         80:39:b1:6c:f3:81:d4:20:29:b4:e2:7e:d8:8b:74:3c:6d:0b:
         8e:60:d7:4f:68:ef:b5:7d:11:66:c7:92:fd:2f:40:0b:f4:dc:
         ae:fe:74:47:85:06:db:87:e1:5c:b8:c6:de:60:e7:60:58:da:
         5f:41:3f:46:a3:80:be:5c:1b:be:da:1f:37:75:49:1f:a8:9e:
         77:13:c1:63:7a:12:49:37:f4:50:37:36:f2:4d:e4:84:46:61:
         8e:6e:18:45:f8:80:55:a4:09:52:1a:35:07:96:a1:b6:a5:a1:
         0e:83:31:2c:87:fb:59:6d:36:26:a2:f1:9b:73:70:40:59:d8:
         97:38:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----