Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
File:                     4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa (raw, json)
Hash identifier:          VxstWuaXhllxs5rErmG+RG35G4emuzaRhCDb2FmP4u0=
Subject key identifier:   16:7F:D6:B6:7E:05:F2:CD:2C:C9:2E:3F:4D:D0:E5:87:1D:0B:EF:F5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       669A62834F42955570A10313F8FF7E004451F19F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
Signing time:             Tue 21 Oct 2025 13:50:42 +0000
ROA not before:           Tue 21 Oct 2025 13:50:42 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06f:9000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 21:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9a:62:83:4f:42:95:55:70:a1:03:13:f8:ff:7e:00:44:51:f1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 13:50:42 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=714c526ec2382cffc28ab9384eb76aec6c9f3c9d96eb1e5f23484e75db621fcc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:fa:36:5a:fd:0e:e8:a7:0a:7f:c1:16:6d:
                    80:cd:d1:68:ff:1f:96:75:05:a6:54:bb:39:09:8c:
                    ec:94:b9:e0:07:fa:78:92:98:76:e7:1a:44:67:08:
                    a5:6b:80:3c:19:c1:15:6d:9a:99:2b:61:d9:16:1a:
                    eb:25:6d:28:cd:6a:5e:31:4b:46:6e:bc:27:76:06:
                    02:26:20:39:66:a9:cc:66:7b:e1:30:74:d6:3c:02:
                    d5:2a:40:1e:18:a6:ff:a1:8f:82:74:74:65:6d:c5:
                    fe:52:31:4a:ff:3c:28:35:79:53:a0:3a:ab:59:10:
                    14:6e:8e:e0:de:b7:bb:f5:b9:13:75:b7:e3:1b:da:
                    26:47:10:8f:0e:e8:e4:85:7d:a2:7b:ef:85:cd:8f:
                    2e:8f:dc:e6:de:c1:7e:d8:05:ce:3e:4c:60:84:f8:
                    08:a7:8a:64:4a:bc:ba:eb:94:22:2c:a5:28:77:3f:
                    d4:0b:a6:e0:84:4e:48:0a:fa:a3:8f:f5:81:b5:7a:
                    b5:34:c7:25:be:4f:aa:6a:c1:26:26:a6:4b:5c:bb:
                    0c:c2:e5:0d:94:9c:d9:0c:52:4d:43:82:40:13:85:
                    2a:fb:22:72:25:a9:49:d2:c5:8c:db:fc:31:eb:fd:
                    5e:3c:25:8e:e9:9c:04:f3:e7:cd:28:cc:67:e5:22:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7F:D6:B6:7E:05:F2:CD:2C:C9:2E:3F:4D:D0:E5:87:1D:0B:EF:F5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:a1:d1:95:13:54:04:46:fb:d3:5b:7d:7e:a4:a1:72:3b:e7:
         05:6a:44:49:75:ad:84:58:59:21:f1:1c:46:3b:29:f2:dd:5f:
         1a:92:36:e5:6c:f9:40:32:a9:20:59:52:ed:36:69:48:e5:79:
         a7:35:e9:21:b2:34:64:88:4b:3a:d1:b7:a0:48:ba:60:c1:f4:
         b8:a3:c9:a3:75:4c:4e:2d:29:c6:2d:c2:0f:35:cf:36:49:dd:
         61:19:e7:9e:af:0e:a0:21:0c:22:c0:bb:31:42:f7:2f:bd:3a:
         69:cf:dc:ad:41:3c:a8:a8:ef:b6:5a:19:ff:41:81:6f:14:a5:
         ea:36:fe:d5:4c:4f:18:d3:88:43:1e:eb:6b:1f:dd:d2:fe:09:
         e5:86:e3:51:7a:f2:d0:0f:fc:bd:46:62:48:55:38:11:c0:68:
         c8:ae:7f:d7:c5:c2:81:d6:4a:19:6b:46:e8:d6:56:7f:b2:f1:
         07:3c:b9:1d:92:2f:e1:98:0a:12:6a:ca:a0:e3:72:3a:6c:c5:
         cf:54:b7:7a:88:62:13:c8:d4:f0:e4:57:08:ad:f4:c5:d3:6a:
         27:d8:f1:c5:d3:64:54:2f:77:d6:94:42:a4:dd:50:00:d7:bc:
         b0:d1:f5:c1:09:23:cf:1a:4f:0e:27:5a:63:6d:a6:8c:97:bc:
         55:51:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----