Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04503b16-d14e-46c1-93ab-4dafd21d6078.roa
File:                     04503b16-d14e-46c1-93ab-4dafd21d6078.roa (raw, json)
Hash identifier:          8Mx1MggdyRszjQ4kH5HA+qbXEBXgY48rA58UiHf81FI=
Subject key identifier:   76:66:84:1F:6B:D3:B5:A3:F9:93:90:E5:BE:E2:6B:FD:3C:58:E2:39
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       65E358D226AB45DA36C952F4FCC71A8039271757
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04503b16-d14e-46c1-93ab-4dafd21d6078.roa
Signing time:             Fri 15 Aug 2025 15:40:02 +0000
ROA not before:           Fri 15 Aug 2025 15:40:02 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:a040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e3:58:d2:26:ab:45:da:36:c9:52:f4:fc:c7:1a:80:39:27:17:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 15 15:40:02 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=35ead621baf8f5b0427c528486d6067ebc82df38358423694dd903adccf873b8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:35:92:4f:26:8f:9c:60:d8:bd:f5:7f:cc:1b:
                    56:16:d8:af:32:10:a9:94:5a:5d:59:28:7e:63:db:
                    dc:78:91:f2:f2:60:7c:a1:f1:17:a3:35:41:dd:bd:
                    26:bd:de:2d:87:f3:9e:ab:97:7e:95:18:9e:3d:de:
                    c2:e6:86:2e:ec:5b:17:06:0a:94:14:66:aa:8e:15:
                    e9:2f:50:be:f0:a8:ae:09:91:d3:84:ce:97:d3:a1:
                    a1:02:0e:c7:d7:1d:28:8a:49:e8:3a:ae:e3:7c:69:
                    ca:a2:97:69:8d:89:50:d1:f7:92:cb:00:5a:52:20:
                    0e:39:27:de:16:8b:41:46:3b:00:72:2f:c6:28:18:
                    07:b0:d0:c8:28:4e:55:d9:20:ce:09:79:80:e2:eb:
                    92:4e:2f:ff:44:5f:54:67:75:57:9e:1a:72:59:c5:
                    47:4e:d1:54:4c:63:91:7a:5d:2e:fc:0e:71:69:45:
                    06:73:3e:d3:16:1f:1c:b7:20:70:a7:55:54:57:34:
                    05:4a:30:89:af:81:d2:0f:61:45:76:e4:2e:85:03:
                    55:5d:75:52:10:e2:30:ef:1f:5f:8e:56:d9:07:30:
                    77:00:b9:cf:8c:96:56:50:4d:f2:d2:f5:03:3e:d7:
                    e1:67:51:48:33:a4:ea:0e:08:54:07:f6:1a:04:a1:
                    cc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:66:84:1F:6B:D3:B5:A3:F9:93:90:E5:BE:E2:6B:FD:3C:58:E2:39
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04503b16-d14e-46c1-93ab-4dafd21d6078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:a040::/46

    Signature Algorithm: sha256WithRSAEncryption
         52:0a:92:71:fa:8e:c9:ee:66:74:3f:cb:bd:f6:6e:5f:f4:11:
         bf:7a:4a:77:cc:8c:94:e6:37:86:58:20:26:2f:e2:67:dd:4e:
         98:ac:1a:6f:6e:53:b5:c4:59:71:ac:aa:5f:bf:40:2f:b9:6f:
         6b:0f:6a:90:8d:46:96:ec:ae:a1:fd:e5:6b:75:f3:c0:87:ed:
         c4:0a:c4:14:83:b4:97:26:86:84:37:76:0e:31:ff:cd:54:f7:
         e0:9b:ef:58:88:dc:c6:58:1c:0b:c8:09:a5:2c:71:45:f1:16:
         5f:ea:7b:ef:6a:b3:f9:b3:ad:3c:26:cf:82:cb:3f:a1:d2:ef:
         04:5c:19:b7:f4:69:03:ab:9b:04:dd:60:d5:e0:a8:4b:31:5f:
         e0:95:1e:45:86:f2:0f:14:04:da:2e:c5:59:ad:b8:13:6f:4f:
         d9:1e:f3:21:09:3e:69:33:ab:24:dd:3e:fc:01:87:85:1f:05:
         bc:56:e5:a4:35:38:ee:26:aa:a7:b3:83:1c:09:b1:63:6f:0b:
         b0:27:a8:d5:cf:0d:4f:ec:c4:dd:7d:9e:cf:66:9a:d2:75:d4:
         3a:ff:d5:bd:ba:e8:81:51:53:28:1b:79:ba:8e:93:b9:66:f7:
         62:0f:0c:96:a3:1d:2a:e7:7d:4a:35:c7:43:11:40:c2:b6:7e:
         e1:cc:f7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----