Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/89b0de0f-6d7a-449d-a144-e777ce29ce82.roa
File:                     89b0de0f-6d7a-449d-a144-e777ce29ce82.roa (raw, json)
Hash identifier:          PoLCakyoG5CGrcBopTWPoMs0eZLHuB4lxpCfbAp57tk=
Subject key identifier:   6B:4D:71:01:45:BA:68:35:D0:4C:EC:B9:0E:6E:93:E8:0A:B4:2B:8B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       699210F1C53008943A17DE7392B209D4E17BB861
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/89b0de0f-6d7a-449d-a144-e777ce29ce82.roa
Signing time:             Fri 11 Jul 2025 19:31:22 +0000
ROA not before:           Fri 11 Jul 2025 19:31:22 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:92:10:f1:c5:30:08:94:3a:17:de:73:92:b2:09:d4:e1:7b:b8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:31:22 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=ab417a20cfb6d02449c50e2246b585bb42a79ee5a442a0c9560a8edf1b4d3f28, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:ce:37:43:df:be:f6:64:ed:68:af:f8:f7:
                    a5:0d:79:be:45:f5:50:7b:ca:4b:df:a3:9b:49:25:
                    2a:84:e6:a3:ea:33:fa:81:2d:e2:bc:e6:9b:3f:0e:
                    20:ec:f7:17:d1:80:b8:ca:55:27:c1:87:95:9c:6c:
                    16:11:d5:9a:74:31:83:03:b0:dc:8a:87:f0:e8:7b:
                    c4:0f:b6:d7:ba:02:47:35:68:57:49:16:e9:48:3e:
                    50:4c:61:f5:09:9d:02:35:fa:73:af:95:e1:24:ab:
                    c6:82:17:51:04:8d:45:57:3c:65:4b:52:ff:c6:b3:
                    79:53:c8:df:bc:c2:d8:17:de:92:cf:3b:61:af:7c:
                    f9:90:a3:18:4f:3f:33:ea:91:42:2d:38:d0:99:12:
                    73:a5:2e:f3:78:6e:bb:04:84:7f:f5:89:e2:44:f9:
                    23:49:7b:04:9b:ff:7f:cc:05:a8:71:dd:69:ab:a7:
                    5a:5d:ea:e1:e7:f4:39:8d:8e:ed:30:49:b6:75:9e:
                    33:bc:84:9c:1a:7f:fe:3d:98:67:27:dd:78:f7:00:
                    64:1b:53:64:65:33:83:37:09:bc:32:28:f4:7d:36:
                    23:d8:11:ae:19:c5:c6:0e:e8:73:1b:8f:68:4b:9d:
                    19:33:de:26:b0:0f:c0:35:92:a3:6f:eb:e8:e1:78:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4D:71:01:45:BA:68:35:D0:4C:EC:B9:0E:6E:93:E8:0A:B4:2B:8B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/89b0de0f-6d7a-449d-a144-e777ce29ce82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:05:48:b1:19:f6:2b:c9:fe:39:21:70:c2:c1:ed:a5:3e:96:
         7d:93:d7:cf:d0:8c:53:ba:b2:48:6b:29:8c:3f:3d:f5:8d:2d:
         5c:f5:6e:d1:1b:33:27:45:56:a7:1a:65:d7:c5:ba:df:08:e6:
         b2:64:48:50:a1:f4:7a:fa:82:99:ab:79:46:8d:70:22:4e:54:
         d1:f7:f0:10:49:27:ee:b4:2d:43:0b:70:bd:9c:6f:ee:00:15:
         b8:28:b0:a8:6a:c8:de:90:99:ee:42:79:51:72:92:f1:af:29:
         c8:bd:72:1f:13:c1:87:6d:cb:3e:e0:01:23:22:86:b9:e3:7d:
         0e:85:df:22:b7:fb:36:37:9f:69:4a:54:d4:55:7c:34:0d:bd:
         ab:5a:4d:cc:96:ab:3b:40:22:af:7d:84:8b:b1:10:bb:c2:82:
         12:df:03:5a:32:10:1b:a8:74:a1:fd:ca:9f:82:34:8d:37:88:
         f0:c0:93:c0:34:34:41:dc:50:4b:ac:56:e1:c6:11:38:3c:c9:
         ca:89:4a:9b:a5:ed:08:b1:e1:e4:cd:af:37:3e:a3:60:72:2f:
         86:24:aa:6c:2f:68:8d:f6:d1:4d:46:47:6a:0f:bb:9f:37:25:
         3a:87:93:a3:70:40:4d:0e:7e:44:ef:af:55:42:ea:39:39:90:
         48:a2:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----