Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa
File:                     7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa (raw, json)
Hash identifier:          +UAkFBCBCSOwjsJq9RpJaRxjZPWWPV1a6uQrZT1S2WI=
Subject key identifier:   01:C9:64:10:93:74:E2:4A:4C:40:04:36:46:76:48:09:78:C9:40:E8
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0F92E5A883B0C3CE016789714EAA5F6F5D836E46
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa
Signing time:             Mon 25 Aug 2025 16:37:04 +0000
ROA not before:           Mon 25 Aug 2025 16:37:04 +0000
ROA not after:            Mon 29 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06c:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:92:e5:a8:83:b0:c3:ce:01:67:89:71:4e:aa:5f:6f:5d:83:6e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 25 16:37:04 2025 GMT
            Not After : Sep 29 23:59:59 2025 GMT
        Subject: serialNumber=4977f5450bc8e313da5bd8b719c86e234b2838f0d41440eadadddf525998a9cf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:0d:e9:c8:8a:84:10:d8:6b:d6:d0:a4:b3:
                    c3:99:8a:80:7a:a4:4d:44:7b:9d:61:7c:9a:1e:e1:
                    3e:93:f6:a7:9c:4f:70:9c:28:96:0a:30:0a:91:6f:
                    66:d0:18:3d:1f:c6:3d:20:54:f9:37:86:ab:91:49:
                    45:f6:16:f4:ba:10:e6:9e:8d:84:e4:d9:a0:fa:53:
                    7f:04:69:7d:78:77:e6:87:61:43:0e:f9:c6:30:5f:
                    da:08:63:15:1e:a3:8b:2e:74:1c:e1:b9:98:f2:b4:
                    3c:f0:ba:bc:a4:c8:84:be:10:2e:5a:f8:56:04:b9:
                    7a:de:8a:d6:89:f0:d5:9a:a4:62:94:fe:bd:0d:7d:
                    c0:57:d0:3e:1f:2c:90:75:fd:db:99:56:3d:e3:aa:
                    5d:0e:98:1e:6c:6c:93:62:d5:fc:e7:30:b3:c1:d4:
                    81:37:30:c4:61:cd:f2:4e:ad:6d:e5:98:43:80:b5:
                    35:7b:30:3c:2f:ba:da:94:58:ce:a2:d0:65:60:6a:
                    af:bb:20:5a:e7:4e:fb:a6:3d:61:e1:cd:22:af:e8:
                    69:9d:67:da:fa:dd:1e:d9:f5:82:37:8d:5a:4d:45:
                    eb:39:ae:11:7c:ea:45:12:46:91:e0:37:ae:2b:51:
                    3e:54:6b:2c:71:16:d0:e8:4a:52:fe:17:86:75:48:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C9:64:10:93:74:E2:4A:4C:40:04:36:46:76:48:09:78:C9:40:E8
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06c:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:bd:28:4e:a3:0a:b2:ca:c1:ab:52:de:1c:e9:c7:86:26:36:
         9e:7f:e5:be:86:71:4d:c0:7e:4d:e2:fd:34:78:36:1c:de:df:
         c7:71:1d:c7:2b:17:ad:98:15:f6:6e:cd:32:e6:7d:f5:bb:5f:
         a0:9f:77:27:71:8e:dd:fa:39:61:77:e8:57:a0:13:67:2d:ed:
         51:8d:18:2c:db:89:67:4a:bf:b0:5a:38:f4:6a:5d:38:cb:90:
         20:be:24:90:75:f5:ca:2f:38:3c:ae:31:ba:35:c4:57:13:9e:
         32:83:30:02:bf:d5:09:54:b9:be:a2:ca:c7:7a:a4:82:8e:04:
         5c:9b:37:52:68:4c:cd:8c:3c:0c:7d:3f:d0:25:b3:e1:be:49:
         61:39:2c:2c:32:49:b7:ef:06:c1:3f:de:c8:07:cf:db:c3:f2:
         77:51:c5:51:22:a5:ec:79:a1:95:34:cd:11:93:11:a0:fe:f1:
         fb:3e:00:e2:e5:89:ba:d2:c6:d4:d0:94:0c:e8:21:b8:5a:bd:
         9e:bf:45:47:e3:bd:fc:7e:95:53:d9:db:c5:09:fe:e4:d7:eb:
         4c:bb:29:ee:0c:c9:a4:ad:77:c7:6a:aa:0b:88:53:11:80:3d:
         a6:dd:2e:45:fc:47:35:84:c1:7a:a5:02:e9:c0:6e:4f:5e:a4:
         b4:63:3b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----