Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa
File:                     ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa (raw, json)
Hash identifier:          49RqA4mUORHugebpBq94d7lz3igJV5oQpHkAycevrM8=
Subject key identifier:   34:5F:30:E6:A6:4D:95:0D:F8:6F:24:74:F4:2E:58:D8:11:17:7C:30
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3FA4E8618C94540E08D22BCC54E423729E71BC18
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa
Signing time:             Tue 21 Oct 2025 13:31:04 +0000
ROA not before:           Tue 21 Oct 2025 13:31:04 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d06f:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 21:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a4:e8:61:8c:94:54:0e:08:d2:2b:cc:54:e4:23:72:9e:71:bc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 13:31:04 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=b09ad59bffc5f9d6cdc8e20067b50284317495b4db25b5724443925c82915ae4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4c:af:f9:2c:35:d1:45:0b:c8:fd:cf:a4:34:
                    b6:1e:f3:47:ca:c0:57:7c:33:c4:39:5c:e3:2d:69:
                    5a:82:7f:9f:66:ad:d3:ad:32:d9:4c:d9:a5:14:c7:
                    84:60:9d:36:6e:2e:d6:b5:93:b3:b6:8f:55:7f:96:
                    c6:1b:f6:68:a0:93:5a:98:c4:c7:57:87:3a:69:79:
                    ae:51:5e:ee:b2:b5:c4:f0:d8:a2:bb:9b:e5:c5:39:
                    a6:f6:76:d5:d6:b9:49:c5:8e:31:92:d2:37:dc:49:
                    06:35:79:7e:54:0c:11:e7:72:90:6e:32:eb:b8:9b:
                    85:8a:4c:9e:f1:aa:17:5f:aa:ce:8f:d0:08:45:c6:
                    48:c4:b1:d1:c8:e9:96:08:f8:78:c8:b9:a7:74:63:
                    80:73:2b:0f:31:34:f5:3b:c2:25:9b:bd:c4:5b:1d:
                    ff:73:f0:29:0e:7e:ce:26:81:77:62:82:a7:12:7b:
                    dd:44:b3:db:bb:91:97:48:53:55:de:f3:d8:b2:04:
                    fe:75:25:ec:20:36:4b:9b:e8:c4:56:55:28:80:91:
                    6f:a1:08:39:3b:da:90:1f:4c:44:0b:12:ea:f1:fe:
                    7e:8c:ef:b3:a6:ec:2a:2c:e4:dd:80:aa:3c:7d:23:
                    6b:94:bd:3f:bc:7e:98:a0:5e:9b:ef:4c:e7:6b:2c:
                    9c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5F:30:E6:A6:4D:95:0D:F8:6F:24:74:F4:2E:58:D8:11:17:7C:30
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:2d:3f:6b:34:73:d0:59:1f:71:95:f2:93:73:77:cc:54:e2:
         b4:6d:17:06:90:86:8d:f5:4e:e5:74:66:12:7e:f8:24:01:31:
         43:af:a3:e1:18:69:e3:73:ea:2d:43:cc:4f:69:7a:3b:33:ae:
         b3:8a:dc:70:9e:f4:55:58:d2:a5:1d:1b:f7:4d:4e:8e:09:5f:
         9b:32:e8:46:c1:90:43:93:1f:78:cd:ba:1b:90:c7:9d:b1:a5:
         11:60:46:d6:c7:85:bb:b2:e0:d4:47:d9:5a:96:9e:13:15:62:
         ea:bd:e3:c9:0e:2f:9a:eb:fd:79:20:87:3e:0e:9f:37:7c:b0:
         bb:21:e1:ad:bd:2d:61:a8:80:e6:72:67:eb:57:e3:37:43:69:
         d7:f2:a7:a8:9a:a4:df:4d:ac:ad:0f:91:f3:d6:78:52:7e:e6:
         de:d1:04:03:72:20:e7:37:fb:69:cc:2b:c6:c7:fe:53:ae:3d:
         53:bd:4e:7e:c1:e8:9a:fb:82:03:c4:c0:62:ad:94:00:ac:da:
         63:67:0c:81:c3:ef:a8:80:6b:e6:68:ab:63:69:c5:59:8b:c1:
         c6:53:ae:6b:58:d1:5a:ac:79:d6:fd:cd:bb:a7:50:e3:2d:b7:
         c4:bf:cf:0d:89:c1:52:0c:d4:03:55:41:6e:aa:71:9b:25:d9:
         6c:80:1b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----