Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
File:                     a039a10b-545b-441d-bef2-b67325de50a1.roa (raw, json)
Hash identifier:          kRWRonYzXiyg+k2rI3sE7MJG3xbAxQSFCD+OTPUul+8=
Subject key identifier:   33:D1:93:4C:8A:DE:2C:89:8E:10:71:FB:8C:90:F0:83:D6:EF:A7:59
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       68D336E05C7CBA0540EB42992B7078B11A22E32B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
Signing time:             Fri 11 Jul 2025 20:11:30 +0000
ROA not before:           Fri 11 Jul 2025 20:11:30 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d050:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d3:36:e0:5c:7c:ba:05:40:eb:42:99:2b:70:78:b1:1a:22:e3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:11:30 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=897eff61b8f7a9849968552420ea40ad03769acfb3c482955598cf2656f3bee6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2f:51:df:f0:4f:d9:c6:52:ab:90:cd:e6:cb:
                    71:a5:da:04:c1:0a:63:52:7c:3c:24:83:90:67:b1:
                    41:a3:0d:16:cc:46:25:b8:2d:e8:ec:59:29:8f:da:
                    31:e4:da:fd:48:d8:2f:a7:39:d2:76:9e:ad:4b:bb:
                    9a:6a:de:68:ac:93:e7:c3:f7:06:8d:cb:78:fd:03:
                    80:0e:c3:81:6d:f7:91:15:84:82:6e:26:ad:2b:c7:
                    91:48:55:f5:6b:34:5c:3e:b1:b9:48:31:f1:e7:af:
                    21:de:2d:28:c1:88:6c:5f:3f:05:0f:9d:09:48:80:
                    13:40:13:ea:54:21:a7:c9:3c:2b:33:a6:7f:f9:49:
                    8a:eb:72:e0:4e:39:ae:08:38:5d:0d:93:8b:ce:ba:
                    1a:10:09:b0:da:39:a5:57:d5:07:e4:f5:b4:07:7a:
                    bb:08:26:0c:3c:30:68:43:88:a8:b3:7d:31:b2:7d:
                    94:dd:8a:8c:1b:ee:85:02:11:c8:c6:4d:c9:da:7a:
                    a7:19:a8:cf:5f:c1:10:d8:a2:8b:83:cb:89:de:9a:
                    9e:62:c8:9c:a6:66:a0:98:ba:d1:03:c5:e3:05:d2:
                    bf:68:0d:30:56:40:21:fd:63:ce:e9:36:75:c6:70:
                    b5:12:9f:ef:d8:f9:1d:83:b1:18:b2:7a:b3:fb:f1:
                    ec:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D1:93:4C:8A:DE:2C:89:8E:10:71:FB:8C:90:F0:83:D6:EF:A7:59
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d050:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:57:44:0d:24:5d:fd:36:e6:e6:4a:81:1f:6a:1b:63:67:02:
         7c:51:fe:f3:72:c4:fa:f9:c0:53:62:bb:4e:c0:8f:74:e1:03:
         89:72:58:ed:06:52:1c:4a:99:d5:cf:28:cc:e0:75:4d:84:71:
         47:60:81:88:0f:8d:24:65:11:be:2d:18:72:f3:9a:97:e9:b7:
         bf:8b:d5:90:c2:11:20:f0:eb:3f:fb:70:7d:bb:af:4a:52:1d:
         d6:04:5c:05:d6:b1:44:a5:f9:a7:e3:fd:92:bf:00:5b:eb:b9:
         6f:53:3a:c4:6f:27:14:27:e7:48:f5:6e:c8:60:08:3b:fa:23:
         55:9e:97:ee:2c:4f:97:e8:b5:05:f7:28:bc:87:d9:4a:52:ba:
         cd:3c:43:98:8c:91:ef:8a:28:ca:2d:4b:32:75:05:8d:88:2b:
         1f:b2:37:59:9c:cc:59:27:26:3f:5f:41:0e:b0:c8:1d:e2:3c:
         22:a6:83:12:68:d0:88:c9:64:0e:a1:da:31:b0:34:00:5c:91:
         b6:08:2e:03:75:a2:ef:42:de:5d:10:79:f3:83:9f:ba:db:95:
         63:b4:14:e8:c9:eb:e5:a3:ab:6a:88:ef:32:a3:74:6e:37:c4:
         d9:a4:3c:75:ca:56:e3:24:9e:2d:a1:93:9c:49:4e:7d:e1:fa:
         85:42:a8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----