Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
File:                     a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa (raw, json)
Hash identifier:          xQ/cmakgkJ8naKuR7usNZBadvcAND9OaIuCaIE8gJl0=
Subject key identifier:   54:78:29:39:D0:94:87:38:B9:39:84:D5:FD:0F:C2:7B:1A:71:C1:D3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6902F5784A203E1DE4E9E9AC1441F232698E46C2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
Signing time:             Sat 12 Jul 2025 00:50:52 +0000
ROA not before:           Sat 12 Jul 2025 00:50:52 +0000
ROA not after:            Sat 16 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d010:8c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:02:f5:78:4a:20:3e:1d:e4:e9:e9:ac:14:41:f2:32:69:8e:46:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 12 00:50:52 2025 GMT
            Not After : Aug 16 23:59:59 2025 GMT
        Subject: serialNumber=5682cf9e85f03b762ddf07f569392f7f152412d9705fb8f8d55862f99ef3fd85, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:91:4b:31:6e:24:91:38:b0:1a:46:15:03:
                    72:3a:60:c5:f5:3c:f6:8e:0d:22:0a:d1:9b:92:af:
                    56:a5:84:83:c3:2a:69:cf:b4:13:ed:6a:89:04:e9:
                    04:95:b3:a3:d7:fb:20:25:a4:bb:bb:c8:9c:da:2e:
                    39:9b:ee:1d:14:c8:65:13:5b:f3:76:87:21:d4:81:
                    af:f7:18:88:ab:06:f1:5d:a9:8b:35:f8:a8:dd:13:
                    a3:9d:0a:65:e2:71:f1:3c:96:9a:eb:7b:0b:68:88:
                    07:93:46:bb:55:8b:2b:df:0c:0a:e4:d6:1a:9f:25:
                    17:cf:d6:ec:5f:83:f4:60:23:82:29:aa:4c:9d:a0:
                    51:c3:11:97:42:ab:19:2d:3f:15:b6:12:eb:4c:fd:
                    8d:9a:e8:6f:de:0d:24:05:d6:3e:ce:d9:a6:bf:dd:
                    10:9b:a2:7e:71:38:17:33:12:a2:59:58:f9:9c:11:
                    e5:49:88:e2:9c:95:4a:f2:4d:ae:55:e5:7a:59:ce:
                    78:50:41:a0:28:57:f7:ca:1a:70:97:27:2b:59:b0:
                    f9:08:ad:5a:88:3b:65:72:0e:73:a3:9c:45:e6:e4:
                    96:b1:2d:f5:bc:ce:da:97:4c:ac:84:66:c1:c5:33:
                    02:dc:19:0a:e6:e7:fa:2d:7f:13:fa:8b:fe:ce:5a:
                    91:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:78:29:39:D0:94:87:38:B9:39:84:D5:FD:0F:C2:7B:1A:71:C1:D3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d010:8c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         4e:2d:30:3d:a4:95:a4:b6:fe:62:ff:0b:3b:74:45:dc:a1:b1:
         04:e7:d7:8a:98:4c:a0:a1:da:06:ad:f1:e6:df:66:0e:e9:aa:
         c4:89:d2:a2:f4:b4:e1:20:84:b8:24:aa:f2:d5:26:7e:3a:0d:
         ec:00:9a:bb:9b:3a:bb:55:97:57:4e:a4:28:42:c6:9d:2b:00:
         0d:b4:bf:15:fa:18:59:a8:12:4f:8a:29:16:74:4f:cc:db:a9:
         c7:05:9a:e5:23:ca:67:5c:af:88:53:dc:6a:33:5a:87:01:c6:
         4e:e6:46:df:2c:a1:94:ba:fe:02:1e:85:76:20:19:af:5f:dc:
         2f:15:91:5e:23:4f:6d:b5:11:fa:a7:2d:29:6e:76:32:a2:66:
         af:66:03:18:d9:f9:f9:2f:62:ed:ca:26:61:80:28:0e:5a:9d:
         97:ac:ba:ef:aa:64:90:27:53:9b:ab:39:38:74:4c:50:1a:5d:
         d7:b9:23:4a:ab:f2:32:f8:2a:5a:f5:3a:d3:42:44:c0:68:03:
         8e:a0:d4:4b:fa:f5:b0:66:79:c9:a4:4e:a2:27:58:de:06:11:
         db:c9:f5:54:48:5d:9e:15:a6:0d:4f:25:42:83:b0:6b:89:dd:
         b5:b3:55:48:ab:51:1c:d5:48:4b:aa:2a:19:81:ff:41:3e:85:
         3e:64:6b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----