Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce994b51-2051-4114-a1f2-9e4d82f52f31.roa
File:                     ce994b51-2051-4114-a1f2-9e4d82f52f31.roa (raw, json)
Hash identifier:          2IxqlB3ldkVlujfFAb50H+TgqrOUUIdjkG6BvpSj2OA=
Subject key identifier:   3C:41:4B:8A:64:5D:42:43:7C:20:CF:43:D0:58:00:FE:0C:81:B3:A7
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       788B237FC29ABAD3FB3933A50BF25DED442C1C28
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce994b51-2051-4114-a1f2-9e4d82f52f31.roa
Signing time:             Mon 21 Jul 2025 16:40:44 +0000
ROA not before:           Mon 21 Jul 2025 16:40:44 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d077:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8b:23:7f:c2:9a:ba:d3:fb:39:33:a5:0b:f2:5d:ed:44:2c:1c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 16:40:44 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=e4bbe1a128f56a225bf4079627630658f7a8112b8e958beb889f53fb68e5175c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:69:f7:ae:56:53:8a:45:11:b1:d6:1c:76:
                    91:55:c2:54:6e:1e:d7:07:50:0f:cc:ad:b5:16:43:
                    c8:0e:87:d4:16:11:74:4f:01:8b:dd:a6:27:31:e2:
                    29:87:00:cb:c6:e5:0c:58:4d:47:2c:6b:d6:b8:dd:
                    9a:89:60:5e:3c:f3:35:0c:ec:3c:b3:a9:5a:6f:9c:
                    43:12:00:47:f6:a9:7f:bb:de:6a:24:3a:5e:17:c0:
                    88:28:83:1f:82:13:2e:c0:16:95:9b:7e:1b:e1:cb:
                    22:be:2d:bb:0e:0e:c1:e7:df:e3:a6:7f:54:29:c0:
                    5d:10:dd:02:77:c5:18:4a:8a:d4:38:d8:80:3c:47:
                    7e:0c:ee:74:c9:92:41:e5:1d:89:4f:ff:a1:26:df:
                    8f:85:69:33:f5:cb:4a:a4:03:32:42:fe:43:e1:c6:
                    26:c2:7d:18:eb:ea:04:82:1b:7d:74:6c:77:14:c8:
                    c7:41:25:78:38:17:79:40:fb:5c:cf:7b:a7:f4:6c:
                    c5:f7:7d:0a:15:74:ae:c9:c7:a5:9b:1b:d8:3b:a8:
                    a2:d9:73:59:8c:4a:39:a4:b7:c7:d4:4e:d4:9a:11:
                    d4:27:7a:d4:2d:7d:f5:56:59:bd:24:2f:40:58:da:
                    12:09:f5:45:47:2d:97:5b:15:40:01:bc:eb:a6:aa:
                    88:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:41:4B:8A:64:5D:42:43:7C:20:CF:43:D0:58:00:FE:0C:81:B3:A7
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce994b51-2051-4114-a1f2-9e4d82f52f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d077:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:7d:9d:b3:2e:5e:26:cf:6b:47:be:74:8e:fd:22:36:b8:78:
         0f:fd:f9:4d:64:23:18:5b:94:d5:60:89:71:99:d4:e1:77:82:
         4c:70:c3:5f:ca:52:76:19:0d:76:f0:e0:d1:7e:e5:5e:65:c4:
         f9:a4:8e:f0:94:d7:7b:b8:44:18:56:cc:71:0b:11:21:32:b0:
         d7:01:6b:37:4e:73:b7:00:12:09:93:4d:ed:86:c9:dc:b2:1c:
         1d:f1:8f:d4:48:49:66:50:e3:d4:47:70:e9:4b:9d:b4:f9:e4:
         b2:2a:38:9a:5a:5f:93:28:90:cc:7c:55:0b:a2:1d:52:d5:6d:
         2b:2d:7f:da:8c:74:c5:78:fd:f4:67:a0:02:ff:1e:c9:b1:a2:
         58:f9:dc:68:33:87:98:fe:41:c0:60:5f:97:3b:b3:0d:c5:a7:
         11:e5:a4:cc:99:0b:b5:d5:fa:32:ba:67:01:f9:de:12:77:df:
         62:5e:ef:19:dd:73:1c:fa:ba:88:23:73:80:b2:69:aa:c4:1d:
         9c:10:5d:0e:ba:43:b1:33:a4:48:ae:46:38:e5:0d:c2:25:c0:
         78:dd:07:de:4f:81:2b:5e:9f:7b:d0:3e:9f:a2:5d:c2:a5:f1:
         13:d4:dc:ae:e7:8a:93:c4:bc:a5:e5:fe:9a:3b:60:84:ef:32:
         0d:f6:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----