Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/889a19c7-ad97-43ad-8e1e-dd9d5cccd696.roa
File:                     889a19c7-ad97-43ad-8e1e-dd9d5cccd696.roa (raw, json)
Hash identifier:          zlhgiTx/tRDR12FHEgX8Z/FyuUwAQ1hsfF/rvZudAIQ=
Subject key identifier:   61:36:5F:24:9A:44:BC:91:B8:88:84:1E:C9:5A:4E:64:0A:5D:41:D0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4B63441F46C6D7922B68FD48DE0F4559DC4F7D58
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/889a19c7-ad97-43ad-8e1e-dd9d5cccd696.roa
Signing time:             Fri 11 Jul 2025 20:41:14 +0000
ROA not before:           Fri 11 Jul 2025 20:41:14 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01c:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:63:44:1f:46:c6:d7:92:2b:68:fd:48:de:0f:45:59:dc:4f:7d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:41:14 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=c0461d4112195383b7e232c550f5f0263b7a05215ae9250e503846e7c4ffc361, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:8d:f5:58:5f:71:1a:13:56:87:04:df:d8:
                    f2:63:2c:80:db:ae:ff:04:8c:02:49:a3:b7:9c:ce:
                    b4:6c:82:36:b0:b8:cd:bf:a8:c7:a2:d9:29:de:71:
                    91:53:52:e3:a3:d2:e1:98:73:74:8e:7f:fd:fc:b8:
                    36:9a:df:b1:a7:91:37:41:a8:c1:e0:01:52:e4:df:
                    90:47:cd:1f:89:8b:42:88:aa:da:24:99:09:69:21:
                    28:7d:45:8b:20:62:84:2b:27:fb:0f:83:03:ea:7b:
                    6a:5c:eb:91:b7:62:90:97:58:d9:6e:83:4e:cd:68:
                    27:8e:9c:3b:06:5e:cf:4c:00:e9:50:3b:6b:4d:33:
                    ab:e8:78:aa:b8:6c:5a:6e:f7:59:a8:a0:98:d2:88:
                    f5:36:c6:ef:d6:04:50:05:17:4d:35:6d:f6:f7:52:
                    27:11:f3:33:1a:67:44:3a:cb:10:85:51:90:89:d2:
                    29:b4:12:c2:8d:83:05:62:59:41:ea:48:6f:ce:94:
                    15:df:de:c0:77:3b:00:f4:e5:05:63:cc:3a:c5:ad:
                    05:71:24:33:16:34:c9:9f:03:9f:11:25:ce:28:14:
                    d6:b6:51:8d:5d:12:7a:8b:02:7c:d4:5e:85:7f:5c:
                    c5:f3:ca:08:ec:4d:22:76:3f:bb:41:f1:6d:be:48:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:36:5F:24:9A:44:BC:91:B8:88:84:1E:C9:5A:4E:64:0A:5D:41:D0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/889a19c7-ad97-43ad-8e1e-dd9d5cccd696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01c:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         28:53:8f:10:6a:59:1d:b8:dd:f3:d6:2d:e3:e5:66:ec:13:0b:
         a5:6c:23:57:51:51:69:a1:52:9f:67:91:79:a9:31:a6:6d:8e:
         ba:c2:69:4d:45:39:49:be:b7:57:3d:15:b8:59:3e:21:23:da:
         d8:36:81:65:69:ab:a4:f7:2f:06:07:59:6e:8f:31:ff:72:0f:
         dc:49:7b:97:a5:f2:41:01:07:21:2f:72:c2:62:d8:18:b5:b0:
         48:9e:42:e8:49:ec:bc:2d:19:4e:2b:8f:db:4e:7e:38:ee:7e:
         f2:95:6c:59:0f:35:89:f7:96:69:05:76:e5:6b:cf:8e:69:a8:
         39:0e:3d:90:8b:5a:74:4e:ae:d5:d4:cd:3e:a3:01:f3:bd:d1:
         c0:f9:a0:ce:c9:4d:12:a8:7d:d3:f0:70:08:fc:ba:f5:c1:c3:
         a4:87:e0:96:d6:34:37:b2:79:c4:3c:45:18:e0:c2:4c:bd:d4:
         bb:1a:78:ee:31:bf:f2:82:34:de:1a:71:ed:2c:74:0d:95:76:
         35:6a:52:33:0f:ec:66:62:92:4e:69:1f:3d:7a:43:99:3f:1d:
         db:2f:89:82:77:68:de:b2:43:84:32:9c:98:c9:08:23:05:1b:
         5c:4c:3e:83:af:2c:4b:cd:7d:0b:e9:b4:03:c8:9a:77:a1:8c:
         5d:64:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----