Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cdfefba-9573-485f-8040-202e038ebf78.roa
File:                     4cdfefba-9573-485f-8040-202e038ebf78.roa (raw, json)
Hash identifier:          XdLwdvx8g/piHR4Yso/W8YGUQNg3pXjkm0fxou1AehE=
Subject key identifier:   92:64:AA:1A:9E:E5:54:E3:41:9F:61:2B:7F:42:34:0C:5D:C7:1C:6C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6F7C9428264C9F0F2768E83069D25F4731F74262
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cdfefba-9573-485f-8040-202e038ebf78.roa
Signing time:             Fri 23 May 2025 00:40:16 +0000
ROA not before:           Fri 23 May 2025 00:40:16 +0000
ROA not after:            Fri 27 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        79.125.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Jun 2025 13:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7c:94:28:26:4c:9f:0f:27:68:e8:30:69:d2:5f:47:31:f7:42:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 23 00:40:16 2025 GMT
            Not After : Jun 27 23:59:59 2025 GMT
        Subject: serialNumber=2a6f1517dcfceb3d7af8813d8154be38b629ce6df2fd848415610165884b89cf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:be:f2:23:8c:51:74:db:b0:b1:bd:48:fa:
                    9d:fe:0a:e3:8b:a5:dd:e8:47:ac:87:7a:cb:bd:24:
                    88:dd:f3:75:01:44:2e:f5:fd:2a:7c:92:5b:73:fd:
                    e4:fc:77:51:b9:fe:09:05:e9:db:20:d4:d3:9f:2d:
                    de:be:81:94:96:74:0b:a9:3f:e8:d8:f8:e2:e0:cd:
                    94:a2:4b:d9:b5:d6:60:61:f7:c9:32:4c:79:09:23:
                    a8:ff:f5:05:b7:0b:ca:97:ed:46:3e:17:53:18:ad:
                    a4:e6:90:f8:18:5a:c4:bd:b6:72:5b:1d:ec:b3:e6:
                    17:2c:5a:12:e0:15:51:36:83:cb:19:78:63:ea:c8:
                    1d:2d:a0:4d:dd:0d:5d:4a:f5:29:6e:38:8f:ec:1e:
                    23:aa:14:01:35:82:f6:70:11:71:f6:b2:ec:c7:dc:
                    70:23:d4:bb:b2:65:64:8c:b3:bc:39:c3:31:bd:7d:
                    51:b4:66:d2:56:25:b1:2d:af:97:46:fd:a3:59:c4:
                    44:65:0e:09:8a:01:5d:99:37:42:a2:0c:2b:24:d9:
                    da:c5:a6:e8:f8:6b:d2:fd:2f:76:4b:9c:61:04:ff:
                    e5:78:0f:b2:1e:a4:aa:26:1a:15:88:be:df:7e:91:
                    b1:a4:9e:6c:97:c8:dc:df:b7:6b:a6:35:5f:9c:ab:
                    0f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:64:AA:1A:9E:E5:54:E3:41:9F:61:2B:7F:42:34:0C:5D:C7:1C:6C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cdfefba-9573-485f-8040-202e038ebf78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.125.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:76:f9:09:81:01:0c:e6:57:89:8c:56:7d:8a:99:7f:b2:b8:
         c4:92:65:08:52:4c:43:fb:60:11:92:93:4d:67:cf:7c:fc:f3:
         fa:7f:d7:19:5c:86:8b:c8:e8:63:65:0d:89:9a:7e:c0:23:93:
         d4:99:83:b7:ef:6c:42:93:ff:cb:dd:6b:ca:e7:58:ed:60:7f:
         12:e8:79:32:8e:8a:4d:e3:0a:80:2e:87:1b:aa:bf:63:5a:13:
         77:75:08:61:8f:01:b4:d6:fb:74:4e:de:e3:74:15:09:51:bf:
         97:a3:79:ed:11:36:64:fa:fa:0c:b7:f7:6d:f5:da:21:85:bd:
         3e:7c:40:c6:27:b3:c7:b5:97:08:80:b8:83:64:5d:55:54:f9:
         61:81:de:8c:98:72:cb:ac:96:44:5f:9f:a6:1a:f1:25:4b:4b:
         21:06:6d:41:59:53:cc:e0:14:81:77:d7:c0:2d:49:dc:9e:99:
         95:1b:31:91:73:2c:62:8a:63:78:f8:be:04:2e:4e:83:e7:66:
         9f:48:e0:6d:d7:2d:c4:17:ab:07:f2:fa:0c:48:93:33:c7:47:
         71:6a:b1:81:d9:e1:0d:cd:48:73:cd:96:eb:e8:23:67:47:23:
         e8:e9:3d:56:03:d6:9c:b3:70:b7:7c:9c:c5:43:42:46:ef:a5:
         0b:2b:0d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----