Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2fae133-061b-4a28-9d2b-b752d98ef502.roa
File:                     c2fae133-061b-4a28-9d2b-b752d98ef502.roa (raw, json)
Hash identifier:          Oyu8j1f6DAc1D7NtsPbiv7hCO7lvSmo0FRgDm2fz0Q8=
Subject key identifier:   25:39:FD:A2:C2:09:CF:25:D5:6D:9F:F8:4E:93:5A:41:B1:B1:ED:29
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0834853EF1E1E5B821FC4030AB8811E4BA5ABF20
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2fae133-061b-4a28-9d2b-b752d98ef502.roa
Signing time:             Fri 11 Jul 2025 19:51:22 +0000
ROA not before:           Fri 11 Jul 2025 19:51:22 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d077:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:34:85:3e:f1:e1:e5:b8:21:fc:40:30:ab:88:11:e4:ba:5a:bf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:51:22 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=a7be9348d245a103a013eb0337afe18549273ab3ca225136d6ce8847bec62997, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:ff:bd:22:8e:fc:ee:0e:0c:31:7c:04:a6:
                    2e:d9:61:99:e0:78:03:1e:23:e5:ac:e4:19:fa:7d:
                    f1:c1:a8:ac:fd:96:b4:97:0f:9a:52:b0:cb:d2:54:
                    73:f6:86:90:91:ea:e0:d4:bb:c8:a1:be:74:b9:e8:
                    04:9d:c4:d5:b4:f3:18:a9:62:e4:bd:dc:16:9d:27:
                    b0:62:93:c8:49:a7:8d:15:11:67:4b:a0:ae:07:80:
                    39:a8:0d:f1:d6:c9:39:50:4f:ee:2b:56:67:68:1d:
                    a4:ff:e1:86:03:e9:70:66:ec:fc:b0:52:4e:af:63:
                    2c:8c:37:8d:8c:e0:8a:9f:bf:ec:59:bf:d1:f8:49:
                    33:36:b1:a9:26:21:20:b2:08:7d:30:32:2b:63:55:
                    88:27:4b:4c:14:60:46:65:8c:25:0a:04:55:d6:ee:
                    94:f3:a8:ca:bf:27:41:34:fe:8c:f2:69:21:18:26:
                    ea:05:e3:3a:80:a0:8d:76:b4:f7:42:8c:9c:72:3b:
                    31:82:59:f5:66:c4:11:52:77:e1:41:1b:5e:c7:4a:
                    97:78:6f:0c:fb:22:5d:6f:25:a4:47:e5:e9:38:ca:
                    5e:a5:86:f7:15:52:31:47:cf:1d:4b:24:bc:f7:b6:
                    82:31:eb:a6:3e:38:d3:9e:d1:6e:bf:69:e2:3c:6b:
                    cc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:39:FD:A2:C2:09:CF:25:D5:6D:9F:F8:4E:93:5A:41:B1:B1:ED:29
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2fae133-061b-4a28-9d2b-b752d98ef502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d077:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:62:a1:b4:fe:ff:cc:65:46:ba:d4:79:93:66:ef:b7:d9:30:
         7a:e0:7c:1f:b1:80:0c:68:64:db:f6:bf:63:13:00:8f:03:78:
         d5:e8:f8:c7:87:14:7d:f0:ec:91:58:04:ef:f1:76:ce:59:7c:
         22:0e:f8:b1:a6:8b:07:36:b1:10:47:46:34:57:72:ad:8c:f9:
         4d:67:70:3f:36:92:66:d2:56:8f:2d:99:93:6e:71:a7:a1:6b:
         ce:76:93:8f:a8:cb:60:9b:2d:0c:9b:35:cb:eb:eb:07:f0:0c:
         80:3f:e4:a9:04:36:3a:e7:59:f4:fd:2f:d4:b8:a3:20:66:c4:
         b3:53:47:65:e2:c9:cb:69:ed:02:47:ed:ab:36:14:05:b3:71:
         6c:02:37:dd:18:5a:00:3f:eb:64:7b:40:0c:01:98:4d:bb:dc:
         3d:a2:49:21:2d:63:71:46:ee:8c:41:bf:c6:d7:48:63:6d:1f:
         cd:ef:4e:1e:7a:bf:fa:8e:61:d9:36:37:30:0a:13:a9:3f:d1:
         9f:d5:85:6f:f1:9d:6c:65:a3:18:9b:16:28:75:8b:f1:ba:15:
         38:0a:fb:74:b8:8f:bf:ae:d2:41:10:00:80:e7:aa:79:63:72:
         c7:57:1a:b0:9a:cd:ee:7f:90:d7:98:e6:19:4d:dd:bd:ac:c1:
         17:d8:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----