Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3be7af4-35f4-4df2-a374-b4daab598a9f.roa
File:                     f3be7af4-35f4-4df2-a374-b4daab598a9f.roa (raw, json)
Hash identifier:          t4NmYM+9yawE3aArIi422B7W4NhHwi9658aVEuOBpEg=
Subject key identifier:   FE:11:76:2E:E6:F6:60:29:5B:5A:56:A4:F3:4C:09:55:75:6F:A7:BD
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4C044B99A07DC2E7C2E75399193ED48F0944F054
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3be7af4-35f4-4df2-a374-b4daab598a9f.roa
Signing time:             Fri 11 Jul 2025 20:01:22 +0000
ROA not before:           Fri 11 Jul 2025 20:01:22 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:04:4b:99:a0:7d:c2:e7:c2:e7:53:99:19:3e:d4:8f:09:44:f0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:01:22 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=3a89cec016f49859dc938d22c9facd4fc2586dee86ebd2aa37d16e087662a11f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:05:6e:43:23:60:6b:c7:b2:53:35:19:65:
                    76:7a:63:90:59:7a:2c:88:00:a6:96:ca:fc:fe:1e:
                    cf:da:95:c6:0e:8e:b1:59:e3:e5:47:71:69:66:f9:
                    e8:2e:a0:22:2b:8c:30:cc:31:6d:7a:e4:11:ee:d3:
                    83:fc:24:ea:fa:63:56:59:22:8c:ca:b1:57:29:57:
                    0a:72:3b:da:f6:af:0e:e4:1f:dc:e4:f6:d5:38:d1:
                    f1:26:e0:f9:51:38:06:40:81:d8:45:df:30:90:1b:
                    bd:c0:34:2f:5f:4d:59:f6:38:a4:b1:5e:61:63:a5:
                    82:4f:98:9b:19:95:c5:a1:8a:21:52:4a:d8:e4:e6:
                    32:a9:36:b0:c9:82:fe:f7:af:70:fb:1e:53:20:48:
                    95:58:d9:c4:28:7c:4b:61:71:05:7c:62:17:b8:c3:
                    d3:a0:62:df:11:52:e4:18:62:b7:07:38:62:3b:30:
                    72:78:df:f8:e3:8d:eb:da:32:d6:e5:b8:51:96:9e:
                    98:3a:5a:1e:04:54:b0:54:1b:08:1b:19:0d:a2:05:
                    f7:b9:3e:ed:f2:d1:95:fc:ad:68:5f:7d:6e:96:ad:
                    76:54:79:a4:08:a5:d9:34:33:b1:7b:32:5f:d6:a0:
                    d7:b9:1a:42:da:9e:48:ad:d1:26:c7:08:3e:de:fe:
                    2d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:11:76:2E:E6:F6:60:29:5B:5A:56:A4:F3:4C:09:55:75:6F:A7:BD
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3be7af4-35f4-4df2-a374-b4daab598a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:3a:9f:b7:f8:7f:02:ed:d8:c2:92:82:ed:d6:cd:c3:2d:93:
         d5:06:83:bd:54:18:de:fc:b7:6f:c7:04:f8:45:84:51:d2:a9:
         af:71:f9:84:2c:ec:a5:72:71:ba:41:6b:3a:3a:0c:64:0b:9d:
         1e:cd:87:5b:46:04:10:f2:fa:da:49:c1:27:83:59:6a:2f:c0:
         9e:8a:e8:d0:23:16:48:ad:45:99:39:81:23:b6:a2:80:cb:85:
         df:42:30:a3:a1:3f:a3:4d:45:1e:3f:ca:a8:ba:33:cc:00:5a:
         1b:21:60:a7:75:e5:40:50:cd:00:cc:5f:ce:62:6b:bd:46:82:
         cf:81:6e:ce:46:ae:a8:75:d9:b9:c3:3f:42:83:f2:d9:ea:07:
         9c:e3:5d:23:9c:ad:c8:87:3d:bf:25:ea:41:85:5c:40:80:4e:
         92:0c:3a:75:66:6e:84:37:6f:e3:48:99:e0:69:d2:cf:4b:0f:
         a5:8e:7b:64:8c:c5:b9:9d:a6:19:c6:b5:66:2f:5d:e2:23:b3:
         fc:6d:f3:96:b2:cc:f1:e9:5d:30:d5:30:1f:2c:23:8d:24:34:
         81:85:36:95:ae:16:6c:ba:76:46:d1:0b:3a:96:44:90:b9:4f:
         60:93:79:72:03:d9:a2:e6:df:87:5b:81:d0:36:eb:0c:36:7e:
         42:52:c4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----