Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
File:                     5767e356-231b-4b87-98ab-c496dcc2d53f.roa (raw, json)
Hash identifier:          sIsBPl01xcL8LkNDS0lgmjDXaglhyV647nqM32oVqCE=
Subject key identifier:   F9:9E:6F:DE:96:7C:F0:7F:5E:DC:45:86:24:33:AB:A5:11:FF:3F:78
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6BD5F1F8AD754FB73B366EBD374D8C99CFCAB4DD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
Signing time:             Tue 21 Oct 2025 13:40:49 +0000
ROA not before:           Tue 21 Oct 2025 13:40:49 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d036:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 21:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d5:f1:f8:ad:75:4f:b7:3b:36:6e:bd:37:4d:8c:99:cf:ca:b4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 13:40:49 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=ccff67ffbc6af65bb53671512b41195e13b97bf616870245ca4775706f0b2dd7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:df:43:4e:2c:01:1b:a3:a2:0b:d9:a0:64:
                    96:7a:de:23:95:21:e7:07:f8:de:46:70:dc:08:3c:
                    83:4a:d7:83:36:78:31:0d:c9:24:54:5e:c6:a1:5a:
                    ad:bb:31:78:19:9b:eb:74:f1:43:59:8a:2c:07:72:
                    77:8b:5e:b5:ce:72:a7:96:2e:c8:f1:08:9d:46:d0:
                    63:09:af:d5:84:94:ac:44:a0:32:31:23:c0:1d:2c:
                    7b:f4:51:cf:98:23:6f:7d:36:ec:df:b6:93:d3:c5:
                    13:da:4c:94:23:62:5a:7b:0e:b8:86:a7:cb:00:28:
                    83:8f:04:a0:e5:ab:c6:3d:4c:cb:3e:45:5d:03:74:
                    0d:e8:1d:b0:01:74:f2:4f:d0:86:2c:54:ab:18:45:
                    37:83:15:52:40:76:5f:eb:a1:a2:12:37:fd:65:68:
                    7f:79:9c:9f:02:b8:36:6b:af:3f:91:fe:18:91:13:
                    df:57:4e:77:f0:f3:27:47:fb:aa:ae:38:6d:75:f2:
                    35:82:1e:0f:9b:90:5f:15:90:97:a1:1b:b3:4f:c4:
                    2b:f4:1e:5f:a8:7f:51:f4:ba:c9:5e:83:05:b4:c0:
                    16:4c:bd:77:55:f4:9b:12:60:d5:35:9c:15:92:76:
                    92:9e:13:fc:aa:f3:5d:c9:04:8d:51:10:9c:73:69:
                    0d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9E:6F:DE:96:7C:F0:7F:5E:DC:45:86:24:33:AB:A5:11:FF:3F:78
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d036:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:e5:c8:f5:e7:bf:e8:54:20:1d:0a:1e:c4:e9:c7:04:85:b5:
         23:99:fd:a0:3b:9b:37:0c:ce:5d:0e:9e:b9:5a:4c:a3:ff:c5:
         63:bb:7c:de:01:db:76:7d:46:35:6b:01:ca:38:f3:80:ab:fb:
         83:1c:6b:9c:bc:97:e3:84:20:01:5b:cd:7c:e0:c8:2b:22:33:
         e9:5d:4c:b6:ae:51:08:23:df:b7:df:e3:51:67:23:b9:4d:f0:
         69:cb:df:dc:e9:d2:64:5a:41:4e:bc:00:4e:dc:83:aa:2d:9e:
         cc:37:35:c8:50:83:11:f8:43:4c:9f:2a:59:a2:df:54:7c:44:
         bf:df:1e:38:56:ac:e7:a7:05:96:7f:b4:13:f1:5b:9f:d5:1a:
         66:92:37:89:5c:24:c7:bf:46:1d:ca:87:39:d5:96:4b:89:d5:
         53:0e:d3:9f:a3:fe:2d:e3:0a:53:4f:24:7f:a7:da:07:1d:34:
         6c:38:fa:df:97:73:9a:9a:a2:c5:bd:7b:37:a4:8d:d7:bc:88:
         c1:1d:7b:df:53:79:0d:7c:8b:1b:b1:4f:48:d1:15:35:c0:d1:
         93:dc:74:4c:f9:2e:8f:4a:b6:a1:04:e0:d2:45:58:31:0e:31:
         2c:c9:d5:69:d0:8f:e1:4d:79:3e:20:33:ec:24:5a:89:f1:73:
         37:cc:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----