Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa
File:                     2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa (raw, json)
Hash identifier:          9VUxgQ3cZGrWwT4oPtdiG1mt98NsyotHcaB2TFg000M=
Subject key identifier:   4D:56:52:6C:03:CF:B3:40:06:91:E3:71:C5:B1:CB:E5:8E:24:FE:7B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       310EADE69E77C6CF1B7F58594E19FA3315495BB8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa
Signing time:             Mon 25 Aug 2025 16:37:09 +0000
ROA not before:           Mon 25 Aug 2025 16:37:09 +0000
ROA not after:            Mon 29 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06c:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0e:ad:e6:9e:77:c6:cf:1b:7f:58:59:4e:19:fa:33:15:49:5b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 25 16:37:09 2025 GMT
            Not After : Sep 29 23:59:59 2025 GMT
        Subject: serialNumber=c8ebbce42b66a2b04a2d8264bb47c54ab112b9f4ebd4e58989c014ae2957fc46, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:4f:bd:ab:77:b7:16:37:c6:83:b4:65:dd:
                    34:0f:11:f5:ff:c8:8d:b7:d9:1d:f0:56:9a:c9:28:
                    ef:91:81:80:51:e8:29:54:c6:24:82:de:b4:f6:f1:
                    ef:62:0e:cc:46:44:83:a0:4a:36:97:13:40:82:72:
                    97:39:45:81:59:e4:69:ba:5d:1a:18:85:fb:89:f5:
                    ed:1e:fb:5b:a0:88:4d:01:85:54:90:0c:28:f7:fa:
                    cd:a7:d1:a2:e8:73:b9:76:95:b9:d4:eb:33:f6:db:
                    4a:e2:6c:d6:a2:f4:20:41:1e:fd:d5:35:4d:39:af:
                    2f:f8:df:e8:c4:dc:95:77:6e:7b:1c:5b:bb:cd:7f:
                    f3:64:6b:23:dd:df:25:7f:21:59:85:23:87:71:a8:
                    46:98:00:32:82:d2:36:04:57:11:e8:d1:3c:f4:20:
                    d0:d8:b0:b9:c2:fa:9e:52:8b:a7:dc:d2:94:a0:25:
                    66:62:a4:2f:1d:34:be:51:79:c4:86:49:ec:75:c5:
                    67:53:87:08:c6:0f:2a:67:64:2f:35:c4:4c:20:75:
                    e5:5a:47:d8:ce:94:78:4f:21:2c:08:73:d1:b6:24:
                    c8:d9:cf:ff:b7:32:eb:25:3f:81:94:96:e5:38:26:
                    df:8d:03:1d:ef:ba:3b:30:fc:3e:9d:6d:92:f0:06:
                    0e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:56:52:6C:03:CF:B3:40:06:91:E3:71:C5:B1:CB:E5:8E:24:FE:7B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06c:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:78:d0:82:25:44:55:a1:72:2b:cf:ed:06:c4:de:44:f1:ae:
         1a:91:5c:96:9f:3a:01:16:ff:be:58:e7:2c:e4:c4:8e:ef:f3:
         95:3f:c9:41:12:65:03:37:4d:e1:64:38:82:ed:d4:60:a2:75:
         79:de:b2:bf:fb:dd:cd:c6:76:4a:49:70:b2:e7:50:90:4f:4a:
         9d:cf:f0:96:52:3f:fb:44:e8:5d:81:a4:97:c9:f0:46:30:8a:
         bd:b9:59:70:5c:ac:08:4c:2b:d3:9a:60:1f:aa:7f:c8:65:f4:
         42:ad:5a:0e:d7:62:94:63:04:c1:64:d5:fa:3a:8f:e0:48:39:
         66:70:06:98:1f:3b:0a:83:90:d8:1e:6b:c7:0c:b4:91:52:9b:
         b3:f0:5d:6e:00:9c:fb:9e:72:13:9b:6c:bc:00:30:33:a2:5e:
         0d:34:ea:1f:59:2d:de:f9:3c:15:d1:40:8f:28:c9:99:f9:3f:
         e6:c3:7e:83:5a:ba:41:cf:0d:59:69:52:5a:3b:c3:76:64:31:
         cb:2d:13:3d:fc:21:41:5d:84:c0:1b:33:13:d8:09:01:10:73:
         c7:bf:63:62:0b:d0:85:4e:c8:0e:65:ed:cc:17:15:c5:f2:41:
         d0:f0:0d:0c:6a:b6:9e:b5:5e:15:cc:f3:77:91:60:79:2e:77:
         05:b9:43:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----