Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa
File:                     d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa (raw, json)
Hash identifier:          xTeQhCyKsuM3UhC3dXJd5QipzIff2goTn016bmczIzM=
Subject key identifier:   97:21:A1:C4:84:7F:61:7E:AA:9A:AD:8B:C1:06:B9:6D:B6:72:7D:20
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6E602204F8B5E5B0849A4D1C519FFC63F72BDF71
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa
Signing time:             Tue 15 Jul 2025 00:11:08 +0000
ROA not before:           Tue 15 Jul 2025 00:11:08 +0000
ROA not after:            Tue 19 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d02f::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:60:22:04:f8:b5:e5:b0:84:9a:4d:1c:51:9f:fc:63:f7:2b:df:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 15 00:11:08 2025 GMT
            Not After : Aug 19 23:59:59 2025 GMT
        Subject: serialNumber=02b3b4ad03c0f599496efd02946d222fef48faf85c6117a112a2900c79462aa7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:76:fc:40:82:3d:e9:7b:51:66:11:d8:ce:
                    2d:86:90:ec:e1:46:c6:ac:f1:63:96:2b:08:d0:eb:
                    35:20:4b:b9:f8:93:92:c5:7f:0e:9e:23:ed:ed:40:
                    6a:fe:61:55:5e:9d:5b:02:bf:1c:ee:d0:4a:1d:39:
                    ec:cb:10:78:f5:05:87:3a:ff:9e:b1:80:11:28:c3:
                    dc:25:fa:6a:87:2f:a2:70:04:72:02:2a:7d:84:ef:
                    d4:9e:0d:37:d8:dc:33:a0:6e:75:59:f7:66:1d:d9:
                    ab:e6:da:be:1d:e3:57:1f:f2:19:26:fb:d8:e0:95:
                    df:20:ed:d1:df:c7:ff:b5:4e:c8:18:7f:ec:fd:86:
                    81:43:f9:3c:ed:c0:b7:ac:dc:6d:e8:69:00:7e:45:
                    e6:9c:d6:4e:f4:81:76:82:4a:b3:8f:08:f9:e4:8e:
                    92:97:99:fe:30:3c:6a:1b:25:7e:95:45:aa:3f:05:
                    9f:50:c0:1c:48:13:79:b5:6a:1b:b7:7b:e0:75:8f:
                    e2:a3:86:b9:0d:0e:a4:e3:7c:d2:19:84:e9:f7:48:
                    95:6d:4b:a6:74:b5:d3:25:a8:14:81:09:cb:37:fa:
                    83:69:be:69:81:a6:49:0f:f1:1c:26:3d:cf:77:5c:
                    d1:9f:0d:29:2f:c6:dd:bc:7d:99:6c:d5:dd:87:1a:
                    1b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:21:A1:C4:84:7F:61:7E:AA:9A:AD:8B:C1:06:B9:6D:B6:72:7D:20
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d02f::/37

    Signature Algorithm: sha256WithRSAEncryption
         57:23:68:4a:c8:ee:9e:d6:8e:1b:b4:e1:f4:e7:04:1c:cf:9c:
         46:fc:54:66:bb:65:00:88:8f:03:7f:36:aa:8f:00:41:28:63:
         ae:06:30:c5:15:26:dd:e0:57:0a:18:88:52:b6:7d:99:1d:5d:
         f3:75:f6:a4:ff:6a:7b:2f:88:58:48:ba:d5:e8:85:77:c8:d7:
         3a:33:c7:38:8a:c3:6a:e6:27:b9:c9:6d:95:f5:5d:27:69:ea:
         97:09:64:04:f8:f4:a7:d8:de:71:79:26:c5:aa:99:c5:56:1e:
         2f:c8:3d:55:17:ca:2d:2a:30:41:27:0a:4e:ae:59:62:2a:9a:
         73:ec:69:1e:73:95:b8:50:28:40:57:b6:1b:fe:ec:75:6b:91:
         23:c4:92:2e:bb:de:f6:bc:d0:0d:e7:0f:70:bd:aa:2f:0d:ee:
         71:57:1b:30:4b:46:e9:2f:28:f2:14:28:a1:fc:17:88:cf:d0:
         16:09:07:56:47:98:55:04:ae:55:0b:fc:e1:ea:d7:2a:f1:20:
         89:76:05:c4:d1:b6:50:85:1f:7c:dd:8b:02:de:f5:c7:71:9f:
         31:d4:94:fe:f5:ff:6d:0d:4c:19:45:9b:3c:cc:cb:89:b2:0f:
         d6:c3:fb:97:46:92:df:ba:6f:b5:6c:19:34:88:8d:62:00:b3:
         4a:54:74:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----