Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da7b8c4e-ee0a-45cd-b6e3-7bacf8a9e2f0.roa
File:                     da7b8c4e-ee0a-45cd-b6e3-7bacf8a9e2f0.roa (raw, json)
Hash identifier:          wvWlg+xp+jKfmZiRPkzwfteLqXtkgZ4mVvX5sZiyvuQ=
Subject key identifier:   FA:37:42:F6:79:5E:89:90:B4:64:83:F5:46:D3:DE:0D:87:30:38:EF
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6CB2A5FD39A1543A50CD0FFFBFCA2C43A2A0A934
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da7b8c4e-ee0a-45cd-b6e3-7bacf8a9e2f0.roa
Signing time:             Tue 26 Aug 2025 17:10:48 +0000
ROA not before:           Tue 26 Aug 2025 17:10:48 +0000
ROA not after:            Tue 30 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06f:880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b2:a5:fd:39:a1:54:3a:50:cd:0f:ff:bf:ca:2c:43:a2:a0:a9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 26 17:10:48 2025 GMT
            Not After : Sep 30 23:59:59 2025 GMT
        Subject: serialNumber=d16ccfe0028384023a3eaa149c15c40f050f485c8393bbc9ec3adacb3ed14b48, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:3f:6e:6d:9c:26:1e:1d:6c:d4:b6:71:53:
                    98:c0:18:63:9a:22:4d:11:58:61:8d:0b:de:74:45:
                    82:c4:96:8a:93:6f:64:06:78:29:93:32:09:06:85:
                    e6:74:f6:71:4e:2d:c4:a6:78:cf:2c:d6:33:2b:ad:
                    db:33:93:fd:a1:19:c1:18:78:36:32:77:a9:d1:e2:
                    7b:e2:b3:71:a0:db:7e:76:20:23:32:f3:23:5d:a7:
                    f8:51:15:e3:cb:44:ba:70:8a:5e:41:03:6e:c4:4a:
                    3d:37:4f:54:f7:ad:b8:1d:e2:d6:bc:9b:05:32:88:
                    51:e8:c2:14:8e:63:41:72:95:f2:8a:5f:a1:cc:90:
                    c0:33:86:3c:95:b0:c8:a3:ef:64:b2:30:2d:ec:4f:
                    4b:46:4a:8a:ad:70:c0:02:a5:ad:6b:43:b0:d2:8e:
                    a3:af:4d:8f:67:a4:cf:e4:92:fd:b5:41:ed:97:29:
                    c5:97:f2:e2:7a:39:7d:19:68:91:91:74:40:71:a3:
                    36:63:48:85:22:8d:d7:93:09:ea:35:43:62:41:e5:
                    a0:9b:c3:06:bd:36:d8:e8:d9:6e:a3:a1:a2:a7:8f:
                    55:cc:bc:2b:4a:21:85:40:42:c4:8f:ec:09:d2:c1:
                    37:57:67:48:d2:17:7c:c9:df:d2:5b:bc:8a:1e:34:
                    30:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:37:42:F6:79:5E:89:90:B4:64:83:F5:46:D3:DE:0D:87:30:38:EF
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da7b8c4e-ee0a-45cd-b6e3-7bacf8a9e2f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:880::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:87:ed:eb:34:b2:43:90:11:ad:a8:ba:b6:fe:15:a5:fe:1e:
         a4:bb:28:3c:05:e8:ab:34:e7:c2:6b:c1:a7:45:6f:51:1c:02:
         8b:02:aa:64:d4:f6:cc:35:36:0d:de:b1:ea:d9:1e:6d:e8:2b:
         43:23:4b:07:4c:9d:f6:d8:7e:dc:00:90:24:30:11:40:f2:d4:
         91:28:47:01:86:c9:d0:83:b8:b9:d4:a3:38:1f:bc:3b:0d:6c:
         6b:97:eb:6c:92:15:5a:e6:d4:d6:7c:ac:d9:53:9e:66:b7:6f:
         fe:4a:6c:c5:e4:59:58:31:5b:c6:04:4d:1f:81:2b:0e:83:ce:
         ab:eb:55:da:d3:33:2a:54:1f:e4:51:68:6c:2c:26:14:21:7f:
         9c:f5:22:e2:dc:dd:40:bf:75:a1:99:f6:b8:77:7e:92:0b:29:
         b2:f7:53:2b:e7:71:36:1c:da:91:91:b2:f4:fa:4a:65:55:46:
         3c:4b:0e:c2:9e:28:d9:cc:f8:8d:c3:56:27:79:f8:62:22:d8:
         1d:3f:be:17:d9:7b:f9:a3:1b:9b:ba:78:7f:50:47:cd:13:c4:
         18:94:a2:04:cf:f0:55:17:fe:b7:48:ed:40:b7:10:f9:ab:da:
         71:6d:ae:b5:af:e6:a2:a0:b5:8d:59:57:f7:ce:f3:10:fa:58:
         c6:0f:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----