Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e68fbde-eead-4e29-b902-4eed053693ac.roa
File:                     0e68fbde-eead-4e29-b902-4eed053693ac.roa (raw, json)
Hash identifier:          Fnd2zg9KE8AIO9VzJXh0jTLdKcX8LgQ6GipPs4DjPMQ=
Subject key identifier:   E3:BE:EC:35:69:9E:92:74:90:AC:AB:4C:A8:FF:2B:68:D7:C3:C5:F0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5E0695A43E7CF74F503B0A493D893F6E5031B60C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e68fbde-eead-4e29-b902-4eed053693ac.roa
Signing time:             Tue 21 Oct 2025 13:31:03 +0000
ROA not before:           Tue 21 Oct 2025 13:31:03 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01b::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:06:95:a4:3e:7c:f7:4f:50:3b:0a:49:3d:89:3f:6e:50:31:b6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 13:31:03 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=f36e1b3f30fe4ee5fdba68975b55dddf7fb8e3402f0d5817471fb4184c0d1883, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3c:c1:bc:51:d7:47:7d:64:61:61:be:14:12:
                    73:0e:99:b5:55:20:a2:31:36:57:f8:d9:21:ab:2e:
                    0b:95:87:d7:99:e4:9f:77:1d:cb:0d:34:22:af:48:
                    c3:17:60:ad:4f:cf:1c:87:59:ec:e5:05:24:0b:6a:
                    b8:40:40:ca:21:8d:18:55:6b:4c:ce:77:25:47:ea:
                    a0:c1:3e:e6:6d:5b:00:2c:28:f8:25:c7:25:75:22:
                    cf:b3:52:84:f2:61:58:b5:11:d8:66:83:d1:f1:27:
                    f5:15:df:c7:73:9e:bd:7f:77:17:13:86:57:97:dd:
                    7b:8e:8e:e0:d9:11:5e:53:39:d0:74:7a:92:f4:e8:
                    b4:e7:21:c4:f3:e1:27:3f:99:3e:f2:34:36:60:d7:
                    5e:cb:cb:f9:c0:bc:af:d7:c6:c6:e7:b6:92:cb:93:
                    4b:26:4e:d8:8b:e4:82:e3:2a:cd:26:ff:cd:92:12:
                    a4:47:2e:c2:5c:42:85:3d:1d:f9:24:b2:66:e7:ed:
                    f2:e3:96:72:fc:c9:3e:89:50:eb:4c:ee:fd:b0:c0:
                    f4:f6:b4:64:69:29:a8:76:e4:e6:ec:fc:06:ea:89:
                    5c:23:93:8e:77:81:94:32:23:05:a1:37:25:22:25:
                    93:38:2f:2f:83:a0:f9:b1:f9:fe:d0:78:c0:3d:69:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BE:EC:35:69:9E:92:74:90:AC:AB:4C:A8:FF:2B:68:D7:C3:C5:F0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e68fbde-eead-4e29-b902-4eed053693ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01b::/36

    Signature Algorithm: sha256WithRSAEncryption
         c6:f2:41:ea:16:39:e3:81:22:90:e3:18:aa:0d:55:80:c6:40:
         db:d5:a6:bb:de:3b:10:2a:77:8c:13:ed:7a:e1:5a:b1:fe:09:
         bb:92:61:c8:d0:44:5e:18:18:6e:30:41:0a:48:31:48:73:aa:
         84:4b:d4:36:f7:a1:55:3f:f1:43:10:ca:33:6e:f0:73:94:93:
         ba:e7:d9:f7:8a:41:b0:70:87:f7:1e:f5:6a:21:e1:cb:f0:40:
         ec:97:0f:72:d1:c8:35:cc:31:ef:3d:4d:07:1d:a9:8e:6a:6d:
         c5:49:fb:66:1a:c2:2d:b3:57:aa:43:bd:7d:82:46:6a:e8:5d:
         05:52:c3:c9:25:42:b5:7b:96:4e:e8:ec:38:e5:79:67:45:73:
         53:53:b9:da:63:7e:7d:a9:28:f7:a4:57:0c:2a:73:a2:37:6e:
         5a:57:a4:c7:af:fe:f9:57:50:a2:41:c3:b4:28:76:6b:df:e0:
         48:3c:b6:6e:e5:a4:6a:08:ae:69:a6:8c:45:a5:5a:f3:2c:bc:
         e2:7a:cf:04:3a:81:94:7a:ff:16:cc:6c:9a:71:00:30:d9:90:
         2c:32:9d:8d:2f:92:db:80:4a:6d:01:be:74:f9:60:ce:19:95:
         d0:96:fb:c9:ac:8b:15:3c:63:bf:be:ea:58:70:c6:3e:a0:66:
         76:40:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----