Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adb1351f-3dd5-4e4f-8955-1514f42e48e2.roa
File:                     adb1351f-3dd5-4e4f-8955-1514f42e48e2.roa (raw, json)
Hash identifier:          p1n0jC+cGVcgO1GJo1D0mZeMZACc7+2D41MF60Ht6Sg=
Subject key identifier:   99:19:50:33:24:45:DE:45:27:16:B2:F0:C9:FF:A9:41:54:D4:BE:CB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6419DC997D1013C24E9E217271985FDC393125DD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adb1351f-3dd5-4e4f-8955-1514f42e48e2.roa
Signing time:             Thu 26 Jun 2025 19:37:04 +0000
ROA not before:           Thu 26 Jun 2025 19:37:04 +0000
ROA not after:            Thu 31 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:1080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:19:dc:99:7d:10:13:c2:4e:9e:21:72:71:98:5f:dc:39:31:25:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 26 19:37:04 2025 GMT
            Not After : Jul 31 23:59:59 2025 GMT
        Subject: serialNumber=1b7e1cdf999d139fe79c7a8e215f278895279cc0bf00803205482be84b696317, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:a6:ff:d0:dc:5d:2f:3f:58:ee:d6:4b:3e:
                    50:0c:86:11:c4:c2:2e:0e:03:be:76:9b:a7:2e:3c:
                    4a:9d:c4:7b:49:67:17:d1:df:2a:82:c0:c3:b3:f7:
                    bd:92:e1:2d:79:cd:75:55:70:8d:1d:f6:fd:be:86:
                    46:41:2c:79:01:07:bb:85:49:a3:b9:78:f6:00:cc:
                    b1:1a:ac:e1:15:1c:97:ef:74:65:45:c1:b2:eb:85:
                    8c:95:7d:cf:7f:f4:b3:8e:4e:a8:0f:ef:8a:5a:c5:
                    2f:97:79:ed:6a:39:6e:ef:76:97:21:23:99:8d:a5:
                    d6:f0:5f:cf:5d:e9:0f:11:b6:01:09:9a:28:cd:a3:
                    15:81:3d:bc:05:ac:3f:81:1d:38:13:e6:fd:ea:49:
                    02:58:b9:17:3e:98:db:3a:04:52:6f:4d:a7:dd:c4:
                    fe:ad:52:3a:66:ea:ae:30:17:84:35:0d:2c:35:80:
                    22:f0:9c:e6:97:29:1e:92:2e:f7:89:d9:76:0d:57:
                    4f:80:e1:b5:62:4e:6f:31:39:ef:2a:5c:39:c0:da:
                    bc:c7:2e:ad:a6:33:6a:70:5d:bf:60:40:da:06:f6:
                    c0:cd:2b:99:51:2f:0e:b9:02:60:6a:2e:ca:ca:2b:
                    61:5f:eb:7f:b8:ac:6c:30:7a:48:e9:a3:e9:b4:56:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:19:50:33:24:45:DE:45:27:16:B2:F0:C9:FF:A9:41:54:D4:BE:CB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adb1351f-3dd5-4e4f-8955-1514f42e48e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:1080::/46

    Signature Algorithm: sha256WithRSAEncryption
         ac:a7:1c:e6:d6:03:7e:78:b2:58:5c:6a:94:bd:68:12:41:96:
         15:68:2b:83:5c:2d:2e:b6:17:cc:db:9f:5b:a0:1b:8d:5f:f2:
         a6:e2:b1:d6:d5:09:b3:e6:4c:9a:1b:dc:73:f0:ba:60:91:b7:
         5f:6b:60:67:29:a6:0d:61:5e:ba:71:a8:1e:19:8f:de:d5:66:
         9e:81:32:d3:cb:77:09:7b:65:b9:85:ee:19:05:00:94:eb:ad:
         69:26:01:a9:d0:01:3e:59:df:39:44:99:77:de:9c:52:7c:bf:
         8e:cf:39:ff:16:83:c5:57:43:80:69:6b:b4:d7:2a:14:f0:96:
         a0:c4:d2:0c:95:7a:7b:12:37:06:ad:63:52:eb:64:99:fe:4e:
         3e:8d:11:a7:ca:5a:fd:53:99:81:f8:86:4a:90:5a:34:b0:62:
         c2:70:49:0a:94:a2:20:bc:18:ac:de:59:f1:aa:36:22:0c:06:
         d3:b1:c2:36:80:2d:62:a0:06:3a:11:24:5d:5e:91:27:45:52:
         22:c7:f7:cb:73:25:45:b0:a9:dd:41:bd:ca:c6:82:fa:74:1a:
         cd:61:8a:36:7d:5a:f2:69:33:e8:f4:dc:ad:a6:7f:96:63:62:
         8f:47:84:68:12:25:6b:e9:6e:70:f3:af:07:85:5c:f8:30:0d:
         cf:7c:63:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----