Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa
File:                     0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa (raw, json)
Hash identifier:          AzgBaTbKJk9CIzFsQXFeUuLElUGNX5e61tHv1rpyGzk=
Subject key identifier:   4E:E5:00:5E:D8:21:82:E2:1D:FD:DC:FF:57:47:E2:25:1B:C9:3C:AD
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       25A85FE56086C6CFF9C771E177DD8EFAE299BF92
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa
Signing time:             Tue 21 Oct 2025 13:40:31 +0000
ROA not before:           Tue 21 Oct 2025 13:40:31 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:10c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 21:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a8:5f:e5:60:86:c6:cf:f9:c7:71:e1:77:dd:8e:fa:e2:99:bf:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 13:40:31 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=076003cd29a219c360b61ca6ac74d1f26bbe074ea23ef189c40a41adb4c68605, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9d:26:6a:31:95:40:ca:95:79:8f:3d:ea:a7:
                    cb:4f:40:b9:8d:88:19:3a:49:ea:ca:f3:75:28:af:
                    a5:8f:6c:98:9f:23:16:b3:0b:ea:84:c3:4d:35:9c:
                    35:6a:9a:18:cb:a1:b9:bf:30:f0:1c:64:28:e3:40:
                    ed:6b:0e:6d:92:d7:c9:53:25:38:31:cf:05:a3:70:
                    a5:97:08:92:9d:84:2b:ce:79:21:20:6e:2f:c9:a0:
                    32:9e:39:02:11:68:d2:47:b4:ee:d7:8c:97:e8:4f:
                    fe:8b:df:46:fd:fd:75:c1:53:44:fb:16:86:ac:1a:
                    c0:0b:99:3c:35:60:11:ec:ba:5b:b9:60:5b:f3:96:
                    11:ce:42:55:98:d3:33:20:e3:27:2a:7e:97:98:4d:
                    59:f7:b9:59:91:08:d3:08:c8:8d:5a:be:e3:a0:8a:
                    3c:8e:05:b7:63:20:19:61:12:3a:37:04:9c:61:6a:
                    23:1c:59:b0:9e:c1:9d:c2:24:03:09:51:21:78:39:
                    3e:44:97:42:fa:3e:46:ad:fa:03:46:b2:c4:29:d7:
                    1a:60:32:e5:ea:ec:5d:c2:30:1c:40:1d:d0:1b:6b:
                    3a:b4:fb:7f:9f:ab:f9:b1:2d:82:d5:ee:bd:96:b2:
                    47:b1:a4:ca:db:e7:6c:0b:31:2f:9d:9a:36:9a:91:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E5:00:5E:D8:21:82:E2:1D:FD:DC:FF:57:47:E2:25:1B:C9:3C:AD
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:10c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:19:7f:ce:4d:e6:63:65:9f:e9:96:67:01:fa:b5:28:96:
         42:c3:a2:0b:da:bf:9e:b8:2c:e7:6c:58:5b:60:31:a1:04:00:
         81:d5:1d:74:c8:c3:ea:fc:97:91:ed:9a:9e:6e:39:d2:f0:94:
         88:ec:8b:ac:2c:7b:73:98:42:c2:bc:d8:7a:03:82:bc:54:f5:
         2c:32:e7:7f:82:fc:b4:15:48:db:97:dd:47:e0:5f:8a:a3:97:
         bc:b5:e4:4a:3c:93:32:61:c6:af:bc:bb:dc:64:14:46:89:ef:
         0f:91:5e:37:87:3c:2c:ca:f3:9b:ee:c4:07:33:00:c1:4e:4c:
         a1:01:2c:6b:5f:d8:56:ff:93:da:4b:50:fc:9c:0f:35:77:f9:
         f4:21:39:24:a5:fc:1e:30:cd:7a:58:69:22:1e:e1:dc:e0:88:
         e3:25:15:fa:7b:e8:40:e8:b6:eb:ac:79:a7:c7:fb:6f:98:9b:
         b0:d5:19:60:b0:1b:d7:e7:5e:ba:fb:53:7b:34:9a:47:ee:fb:
         12:62:43:98:f6:44:e4:f8:07:19:0b:6e:8a:54:f3:c4:37:39:
         df:d6:d1:eb:d7:49:f2:6a:1d:9b:1f:b2:bd:3f:56:7f:22:47:
         86:5c:69:56:bf:70:9a:c3:a3:ec:ef:e7:a4:d9:6b:f8:42:98:
         5d:d4:f6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----