Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa
File:                     be610cc2-170e-494b-b1f3-db73bc5ff027.roa (raw, json)
Hash identifier:          dC4lPXwyby8Z9UuqmrzNqf9ZgTDIwZI8Em69r7BK3jA=
Subject key identifier:   AD:36:93:F8:0A:C2:AF:B8:E3:09:22:2A:9A:7B:0D:39:31:6C:CF:F8
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       606C4EAF292394A50F643E4F0A778CF851457FC6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa
Signing time:             Tue 21 Oct 2025 14:10:45 +0000
ROA not before:           Tue 21 Oct 2025 14:10:45 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:6080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 21:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6c:4e:af:29:23:94:a5:0f:64:3e:4f:0a:77:8c:f8:51:45:7f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 14:10:45 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=fb1eaa925307a7acd6d98ca13738547d2dcad4ffa2ca77c5e1a1bd7643195204, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:cb:67:ae:f1:95:32:c3:e3:7c:78:19:c4:
                    77:e8:0f:98:1a:2e:4a:5f:5b:de:37:6f:9e:da:35:
                    6a:f0:97:10:50:c9:d8:40:34:4d:13:11:50:67:dc:
                    4c:26:41:8d:ec:3b:6d:0a:9f:0d:6f:ba:93:20:6e:
                    12:d8:39:ed:1b:d2:e8:22:50:b0:0c:87:02:b1:4f:
                    f5:55:c2:b3:de:a3:70:1b:de:f7:a7:d8:33:61:1a:
                    00:fc:77:99:4f:cd:c9:d2:32:de:52:d8:6d:1e:94:
                    ac:d7:38:cb:73:65:47:2d:b1:80:63:78:56:4f:f0:
                    23:b0:68:46:19:77:22:e5:7b:ae:c5:8d:c4:c4:15:
                    c2:d3:01:9b:d0:36:22:3d:3a:0b:a0:cd:28:a5:56:
                    4a:88:6d:67:58:27:41:db:85:0c:46:8d:8b:a8:ba:
                    1a:97:73:33:19:3e:72:1e:07:77:69:2d:fe:04:fd:
                    00:60:c7:3e:53:73:2e:91:9c:85:29:6c:70:f0:8c:
                    06:62:ad:bb:fe:a3:c5:1d:42:7c:9c:15:d9:6a:ae:
                    3f:47:d8:74:fa:e8:94:01:1d:c1:e5:74:d4:f7:7d:
                    4d:b4:65:40:06:c8:85:b8:3b:ce:f2:25:f5:c8:41:
                    3e:a0:d7:38:b0:f1:30:34:48:45:06:d6:6d:52:a5:
                    e4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:36:93:F8:0A:C2:AF:B8:E3:09:22:2A:9A:7B:0D:39:31:6C:CF:F8
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:e6:1e:c9:b9:ad:d9:79:62:ae:63:7e:94:03:75:c8:be:
         3a:73:1e:59:be:6e:ad:4a:63:60:ab:9c:a5:dd:4f:83:7b:95:
         79:31:fa:96:2a:b4:53:73:5e:b4:bc:d5:d4:5f:f5:9a:03:d9:
         bd:df:65:b7:18:b6:55:5a:3e:4b:12:82:31:31:14:9b:71:10:
         71:f8:79:9a:e4:b1:8d:e8:45:a4:88:0b:b7:e6:05:4f:5f:07:
         bf:30:e4:6d:db:ab:0a:d6:a9:c0:08:5e:2f:de:e6:0f:8b:00:
         d8:56:6e:88:8f:50:5a:40:97:22:9b:1a:a3:88:cb:4c:1d:8b:
         5f:32:db:fb:06:9f:48:ac:90:1d:89:95:bf:a6:1d:30:ab:57:
         91:dc:b0:f1:f9:bd:16:63:54:d3:10:06:31:da:d8:29:e3:9a:
         d5:d9:f9:f3:26:11:d2:c1:f0:a4:6a:a8:3a:b9:3c:6c:b3:ad:
         06:55:87:33:97:b6:35:43:1d:ae:ee:99:b7:68:ac:a5:d0:70:
         16:a6:e6:fa:5a:ba:1f:2d:53:f8:7d:80:da:9a:bc:7a:d8:22:
         d8:cb:58:d5:96:96:66:48:8d:0a:55:b0:45:75:ba:55:d7:8f:
         19:c4:a9:07:0a:a4:d8:78:59:b5:b6:06:34:3d:e7:e2:b1:d7:
         67:e5:ab:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----