Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa
File:                     48ce7dfe-434d-4b57-b520-9001ae26be85.roa (raw, json)
Hash identifier:          D7G+IMhY7tMbMUXZaywSGE4sIcGayOa3kcgYLhoaGvU=
Subject key identifier:   5C:C6:21:27:8A:23:70:2F:74:E1:9B:14:C0:AA:2B:2A:EC:C6:F8:0A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       737E9E69460125075D759D5344A7911096240328
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa
Signing time:             Tue 21 Oct 2025 13:30:13 +0000
ROA not before:           Tue 21 Oct 2025 13:30:13 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:8010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 21:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7e:9e:69:46:01:25:07:5d:75:9d:53:44:a7:91:10:96:24:03:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 13:30:13 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=512b2506f3364734278d6583676ed2254b6f622c4a6eed957bc278a9872a0eb9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:5e:04:0a:2b:cf:0d:0f:42:50:ec:13:ca:
                    1f:fe:18:28:d0:65:8f:ef:57:d9:cf:3c:d6:29:58:
                    76:87:07:38:67:9c:08:c1:da:2f:1b:20:46:56:c1:
                    3b:d6:8b:44:25:21:4b:b8:d3:db:86:e8:06:e0:94:
                    5a:30:86:42:83:7f:b3:cb:a2:07:a1:9c:81:89:18:
                    9d:30:58:92:43:ed:e5:52:d6:49:47:2f:f3:4a:e8:
                    14:22:55:dc:d1:d0:88:d7:f2:e8:ab:f8:16:c4:02:
                    c7:4a:96:81:2c:6c:a6:02:dd:a6:ec:d3:0e:16:5e:
                    fa:0f:8f:d9:4e:f2:d5:5f:23:ae:72:0c:d8:00:b4:
                    d3:b0:89:9c:3e:46:02:cb:c4:b0:f8:1f:5b:5d:ff:
                    d6:61:61:45:03:57:ff:d7:66:18:09:c7:2c:72:f8:
                    aa:21:03:ec:44:f7:38:18:1e:db:e9:80:88:3d:f6:
                    2d:77:d8:95:99:ec:e4:c8:6b:ea:1c:64:70:02:71:
                    ad:2a:0f:15:85:0f:c4:34:a9:6a:c2:42:12:5f:40:
                    c0:6b:b5:dd:e0:d4:3c:54:4d:42:a4:d7:17:82:51:
                    ef:cb:95:b3:0c:03:da:3e:46:7b:23:2d:82:aa:6a:
                    0f:c2:2e:31:b3:32:50:43:25:35:e8:b6:35:44:98:
                    e7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C6:21:27:8A:23:70:2F:74:E1:9B:14:C0:AA:2B:2A:EC:C6:F8:0A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:8010::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:e6:c8:5f:08:3b:d2:87:cc:3f:30:4b:3e:d4:a5:99:67:
         bb:50:ca:93:e1:5d:4e:0e:05:ef:d8:de:42:c4:a6:55:11:8a:
         6f:f2:19:69:42:2f:18:82:51:2c:49:55:11:df:c5:96:90:76:
         46:52:f3:76:0c:93:f3:49:2c:b0:e3:ee:f4:0b:c4:2c:6a:ae:
         6f:41:18:ab:1b:fb:40:5b:4d:3c:a5:03:a2:c9:39:a4:f8:6f:
         8c:63:67:29:44:e6:61:4a:b3:da:f2:17:bb:09:1e:a0:e9:7f:
         b5:fe:09:2a:7d:55:67:4c:89:78:75:0d:bc:a6:c6:ae:6e:64:
         5a:10:22:59:54:a2:2a:a5:ee:5f:1a:17:79:97:3d:53:58:c5:
         41:9f:ce:72:a1:2d:f1:00:e9:59:72:68:a3:87:5e:2d:4b:f6:
         3e:3c:b0:77:9d:0b:63:45:c3:91:81:ff:c3:23:b3:0c:9c:d0:
         44:3a:5b:ad:f2:2b:f3:c8:b0:85:18:5c:75:7c:3e:cd:f7:6c:
         9d:d9:f1:42:b9:8b:4c:2b:d0:69:f8:0c:5b:4a:46:b3:9d:f0:
         a8:2f:ea:fa:62:84:56:6c:a8:2e:25:38:34:13:8c:af:79:c3:
         9c:0d:bc:26:41:13:a6:fc:d3:71:f7:be:45:ac:01:67:62:a7:
         17:a7:c1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----