Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa
File:                     bed4158d-91b8-4ba5-81d9-75a65b550b92.roa (raw, json)
Hash identifier:          8vHV1F6FvOJLxmMg6sAK/gG9KBXMXw+fE1I+seSseQs=
Subject key identifier:   94:D3:CD:04:11:2E:19:CB:67:68:CD:F0:FD:51:2D:7E:2B:A8:14:9D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6AD7772544F5E49DDC302C9D11937E28FE2ACCCF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa
Signing time:             Tue 21 Oct 2025 12:30:09 +0000
ROA not before:           Tue 21 Oct 2025 12:30:09 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:60c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d7:77:25:44:f5:e4:9d:dc:30:2c:9d:11:93:7e:28:fe:2a:cc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 12:30:09 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=8880cdd2b8e6b303f50dbef118f61217abc95b87a568e531e25ed8bfbc0c1d88, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:8d:14:08:89:fc:b7:4a:2a:97:fc:86:c7:
                    c3:c4:26:d6:b7:2a:d9:da:54:aa:1b:17:5d:56:d3:
                    6f:42:3f:2e:f8:85:6a:aa:fc:5a:e7:59:23:83:2b:
                    10:e5:dd:cf:1b:1e:88:50:3d:52:9e:33:e2:fa:e7:
                    06:cf:ca:7c:b4:ab:53:a9:c3:56:09:25:b4:6b:c0:
                    84:59:52:82:4a:93:14:1a:ce:c8:e6:fe:7b:59:8e:
                    e5:c9:da:da:51:d6:dc:1a:55:23:e8:f5:55:94:a8:
                    89:b9:66:a9:bf:8c:b7:b5:9f:60:ee:3a:f1:4a:cb:
                    c7:44:2e:5b:bb:92:6c:02:90:15:e4:10:18:02:a5:
                    5c:96:03:a4:36:31:53:a0:f0:35:e0:b3:38:8b:5a:
                    eb:bf:fe:c5:bd:43:fc:15:5f:8b:87:9c:1e:dd:e4:
                    77:27:b2:b8:6a:70:45:05:58:07:66:63:a3:b2:8d:
                    97:e1:f3:e3:27:5e:1b:8d:f8:d5:8b:ef:b3:d5:29:
                    85:18:f6:04:ed:3d:54:09:aa:39:90:df:51:e8:be:
                    a5:f8:95:7d:6f:ee:f1:ec:b3:8d:47:36:7b:ca:62:
                    e3:96:04:ad:a8:8d:4b:88:5c:4f:47:50:4f:85:d9:
                    0a:c7:52:1e:fb:05:12:29:5c:7f:15:e8:a2:97:5c:
                    47:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D3:CD:04:11:2E:19:CB:67:68:CD:F0:FD:51:2D:7E:2B:A8:14:9D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:60c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:ae:d6:72:e9:c7:36:de:e4:2f:cf:e1:44:2f:18:c1:db:ab:
         23:33:b0:e8:99:24:2b:fc:c6:70:0c:ad:0e:93:24:09:0f:ad:
         03:ad:d9:71:1b:4a:cb:6b:11:35:8e:00:54:e0:c8:98:e1:f9:
         57:25:a2:58:58:23:1e:2c:0e:36:84:d3:11:12:7b:6e:9a:32:
         a4:09:b7:b5:3e:1d:63:ae:9a:c9:19:0e:27:f9:ec:dc:d8:c7:
         ea:e4:6e:be:e8:53:95:3d:0c:15:f0:c9:ff:51:f2:a7:24:62:
         bc:fa:f4:26:92:5f:fb:fd:8a:9b:d8:19:1e:ad:b3:48:9d:74:
         96:10:81:45:68:69:ac:3e:7a:ba:46:61:8b:f0:e3:18:a2:a3:
         38:03:02:51:12:29:40:59:88:57:77:44:84:b2:d1:bc:de:ef:
         a4:8f:ac:62:56:3b:7c:0a:44:4b:be:90:0d:7b:f0:88:72:a9:
         4b:61:3a:5f:68:d9:e7:fd:d2:4b:21:90:04:8b:59:2f:96:5f:
         9c:77:68:e6:cd:6b:f4:5e:14:3f:11:d1:97:78:d3:a9:7d:86:
         a2:fc:6f:c8:5f:8c:49:6a:61:b0:30:59:ad:a8:68:10:0e:e6:
         2a:5f:4d:cb:3f:c3:ee:b4:b9:e7:0f:12:b6:85:06:b9:e3:f8:
         14:a0:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----