Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ebe232e9-8f0a-4125-b83c-7989e39fdd99.roa
File:                     ebe232e9-8f0a-4125-b83c-7989e39fdd99.roa (raw, json)
Hash identifier:          yhhp4Bh31yZG9IaQa/5l8bCh8x0s7euUlqfWMi5XlUQ=
Subject key identifier:   55:A6:C7:BD:A4:AA:CA:28:38:8C:42:86:D1:3C:B4:8E:24:8B:A6:AA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7A6D6422CF6246C399D41DE47E6DD534298ABFCA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ebe232e9-8f0a-4125-b83c-7989e39fdd99.roa
Signing time:             Fri 11 Jul 2025 20:31:36 +0000
ROA not before:           Fri 11 Jul 2025 20:31:36 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06d:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6d:64:22:cf:62:46:c3:99:d4:1d:e4:7e:6d:d5:34:29:8a:bf:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:31:36 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=6c6a2b0454b85b4c4e8ef8011b27fd449d5e45c35479227e7e42251eb601cfd5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:5e:25:2e:dc:fc:e4:45:bc:55:2a:da:d5:
                    02:10:50:b2:a1:7c:70:4d:a7:43:12:b1:bb:e7:46:
                    1c:3a:fa:74:57:c4:c2:df:1c:5b:9a:c1:66:94:6a:
                    2b:fe:bb:21:db:75:57:a4:ce:f5:00:88:9e:be:b5:
                    ac:9b:f0:cd:7d:11:d9:ed:ac:e4:20:60:a0:d5:15:
                    6e:65:ec:63:e0:c3:2d:36:34:fa:30:47:4f:a1:10:
                    3d:f4:64:69:08:d7:1c:e4:41:a5:55:a1:21:68:e7:
                    87:5a:ae:4a:2f:63:10:ec:51:51:a4:0e:4a:14:d5:
                    d0:45:6c:58:a7:56:7c:46:b2:d5:01:f3:93:87:37:
                    30:1e:71:6a:11:67:bf:8c:f9:25:29:de:31:65:59:
                    fb:ac:3a:d5:c5:c0:86:7b:40:85:58:92:ef:b1:84:
                    4f:5a:4e:48:c5:49:34:d4:54:66:01:f3:ac:7e:07:
                    e7:72:35:27:9d:66:b7:24:7f:47:db:70:b9:19:a7:
                    72:97:c4:d9:88:66:84:77:11:9a:ce:64:4a:9e:24:
                    98:e3:79:16:4f:1c:9c:5a:8f:8a:7f:4e:0b:3a:fe:
                    f2:0a:fb:65:15:02:8f:be:ca:46:cd:92:32:4d:ea:
                    cf:2f:b9:9d:0c:33:5f:8c:1c:dd:b1:e0:ec:bf:ff:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A6:C7:BD:A4:AA:CA:28:38:8C:42:86:D1:3C:B4:8E:24:8B:A6:AA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ebe232e9-8f0a-4125-b83c-7989e39fdd99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06d:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:c6:43:33:74:e9:36:0e:61:d4:fa:12:f1:6c:bf:e1:2d:81:
         8a:12:ce:c3:9e:6a:19:cb:b6:10:5d:e5:af:87:d5:c2:f8:24:
         8e:57:86:fe:c5:d3:56:5b:53:82:8a:18:18:31:7a:1d:c9:52:
         0f:22:8b:b0:a1:ff:30:22:c1:8b:24:14:fe:84:e6:ac:6a:26:
         64:a9:b3:b2:73:9f:2b:69:1c:27:ca:b7:07:b7:9c:88:c1:53:
         55:2b:fa:21:51:f4:fb:52:9c:92:3a:ff:0b:80:74:58:83:e4:
         d9:60:54:51:54:31:ba:c6:f6:d0:54:c5:55:af:eb:bb:d8:b0:
         6d:97:53:ea:53:bc:c0:3a:b5:e7:6c:12:a8:b6:b1:a8:cd:52:
         a8:bb:61:64:43:fa:70:3b:f0:2e:98:83:f3:f3:0f:c9:39:28:
         4d:20:90:81:c7:19:1c:12:e3:d0:d4:68:0f:4e:e2:8c:de:47:
         b5:e7:fd:76:e8:05:e4:52:17:6f:f3:47:48:b1:65:ff:b9:c8:
         bc:45:bb:62:04:4e:a5:65:db:39:1a:87:90:3a:09:22:7a:46:
         62:e7:5a:46:e7:9d:56:b4:9c:a9:d7:c2:0c:34:51:32:33:1a:
         df:57:23:9e:ea:fb:c4:08:52:cc:bb:30:c3:4d:27:2d:6a:65:
         df:71:0c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----