Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e11a1fd-46e4-4d91-84e8-f174e0774136.roa
File:                     6e11a1fd-46e4-4d91-84e8-f174e0774136.roa (raw, json)
Hash identifier:          aKMxRjPtTR09Mf9AoORG1gkWTQQbaGlyZOXSWE4fI5E=
Subject key identifier:   34:09:D0:49:A3:1D:4F:48:85:5D:71:9A:B1:8E:17:2E:E4:DB:20:54
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2F191107F463007926FAD3C8E36D6109E83A7EED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e11a1fd-46e4-4d91-84e8-f174e0774136.roa
Signing time:             Fri 15 Aug 2025 15:50:49 +0000
ROA not before:           Fri 15 Aug 2025 15:50:49 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:e0c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:19:11:07:f4:63:00:79:26:fa:d3:c8:e3:6d:61:09:e8:3a:7e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 15 15:50:49 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=beae8a703c3bb23296fa1a3b4f55645fe8d06b7d18f356bc7e0d674b2b309f81, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b6:33:3b:d9:a2:31:7c:64:f8:c9:06:9f:e9:
                    b6:52:6c:b4:9d:22:79:f6:19:bd:17:4b:26:3b:40:
                    12:60:35:c4:d1:97:02:ca:d3:df:d0:3b:eb:c3:a1:
                    13:36:3e:51:4d:d7:73:fa:c3:fd:4a:d3:21:0d:ef:
                    b7:48:bd:a9:fa:8d:04:8c:04:7b:eb:d7:91:52:7f:
                    08:ef:d1:4e:bd:84:d1:ea:82:0f:f6:9e:8c:8d:69:
                    19:55:cb:37:54:57:14:7a:3f:4a:60:94:91:1e:ff:
                    97:1c:3e:ec:aa:1a:81:fa:b2:07:f3:33:a3:79:32:
                    c9:75:f9:78:90:85:a7:14:19:f7:4f:b2:bb:3a:cc:
                    7d:29:84:90:32:f1:24:6b:9c:cb:3a:a1:03:60:74:
                    34:2c:7a:1e:99:15:18:83:6c:56:47:3e:aa:da:55:
                    16:9e:6a:32:41:55:01:bb:1b:a0:eb:d2:41:64:b4:
                    87:d8:b6:c0:39:51:ff:58:ba:ca:33:ec:7b:dc:87:
                    15:d2:5f:78:b1:83:03:a2:8b:f3:02:a9:f7:a1:c4:
                    af:9d:9b:32:70:d3:33:d2:c3:db:62:2f:29:5b:30:
                    36:5e:1d:55:4f:3a:bf:2a:cf:e4:37:0b:af:6b:9e:
                    77:e2:96:70:76:8e:4c:b4:0f:11:c5:20:94:1b:e0:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:09:D0:49:A3:1D:4F:48:85:5D:71:9A:B1:8E:17:2E:E4:DB:20:54
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e11a1fd-46e4-4d91-84e8-f174e0774136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:e0c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         00:1f:e5:a3:c7:0c:db:c8:06:23:0e:57:03:fd:9c:cc:c6:4d:
         8d:43:75:50:14:28:09:c6:9e:07:c3:a7:47:35:49:49:03:62:
         c6:10:9d:fb:0c:5e:b0:61:bd:1b:58:2d:5e:42:a4:e7:f5:97:
         2e:58:5c:c2:e4:91:22:71:df:e2:07:64:34:3e:7b:da:a4:db:
         04:b6:4f:7e:5a:92:a9:ca:24:07:62:df:2f:58:c7:d7:b8:a0:
         e7:a3:91:9c:bf:ba:71:57:ac:97:3a:d9:36:2c:13:22:3e:7f:
         5a:ad:a1:36:9c:78:f7:15:d8:1c:1d:12:a2:49:6a:2b:91:53:
         af:04:57:77:f7:40:71:49:a3:ff:58:26:2a:c1:54:44:8d:12:
         11:9c:6d:0f:9d:43:3a:cc:96:1d:b3:6b:79:19:9c:46:b7:49:
         08:3c:f1:5b:d8:fa:d5:3d:fd:aa:ee:72:18:0f:88:f2:4a:89:
         2a:ac:9e:f6:53:5b:de:64:c8:52:27:04:44:78:08:cf:0e:94:
         47:a9:e8:6f:1e:a2:81:1b:80:7c:f7:76:09:fe:cf:b1:4d:8d:
         5a:61:4d:20:b2:18:1b:5c:b5:2c:ae:56:b8:16:16:af:7c:ed:
         ec:45:76:d6:58:d9:56:5f:5b:f2:b4:d7:cd:c5:c0:73:59:a4:
         d0:1c:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----