Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de12834a-9370-4c63-969f-bf8eef4cd73b.roa
File:                     de12834a-9370-4c63-969f-bf8eef4cd73b.roa (raw, json)
Hash identifier:          4Na5WCCmon74HNanCZrumcq+a+ylaaGAYW7D/GFSKK0=
Subject key identifier:   BB:E7:35:B0:CA:5D:B7:7A:21:1D:64:CC:85:43:D5:9C:03:C2:F3:0B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       627949AA47A54268C086308B4C79B1F7670B60CC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de12834a-9370-4c63-969f-bf8eef4cd73b.roa
Signing time:             Mon 25 Aug 2025 19:00:13 +0000
ROA not before:           Mon 25 Aug 2025 19:00:13 +0000
ROA not after:            Mon 29 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:4010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:79:49:aa:47:a5:42:68:c0:86:30:8b:4c:79:b1:f7:67:0b:60:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Aug 25 19:00:13 2025 GMT
            Not After : Sep 29 23:59:59 2025 GMT
        Subject: serialNumber=fea0d91be2496ffc65ce913ada0a8e30ec78bf842ff7879e8c5da35507ba0a6b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:6a:35:34:79:e8:a9:7c:01:13:3d:79:84:
                    4e:80:4b:b7:46:eb:7f:53:1f:3a:d6:58:bc:52:32:
                    bf:a1:f3:2e:50:bc:79:d9:09:79:48:de:1b:70:b2:
                    55:eb:28:e6:6c:fd:5e:ee:eb:8d:5a:2a:df:4b:20:
                    4a:4a:c9:98:51:eb:90:cf:99:5b:b5:85:f4:11:59:
                    bd:7d:f9:9e:1c:4a:3c:12:12:c9:3f:a0:14:4e:5d:
                    79:d3:38:3b:3c:56:35:54:70:af:d3:9a:7f:4d:4f:
                    37:27:e2:ca:d6:3e:1a:1c:7c:7c:66:c4:ad:6c:75:
                    19:67:ff:49:ca:77:fa:c8:91:87:5b:9d:31:70:1f:
                    08:64:a5:c4:3a:76:12:c6:f4:a3:f1:71:57:a6:48:
                    49:ec:0b:83:b1:fe:43:18:66:24:4a:0b:33:a5:4a:
                    25:1f:b7:28:58:35:e1:09:3a:75:47:87:2c:dc:12:
                    12:d8:d4:71:95:b1:24:01:a5:b3:35:76:98:99:90:
                    50:22:54:a0:b1:86:4a:8e:20:be:d9:50:f0:2d:07:
                    71:17:28:8c:7f:32:f8:fd:1f:1f:02:4a:ab:33:29:
                    c4:1a:58:b2:0b:bc:30:69:fd:d8:eb:7d:61:0e:76:
                    bc:ef:0c:92:1a:ed:58:d6:d6:d5:31:53:69:66:a9:
                    7f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E7:35:B0:CA:5D:B7:7A:21:1D:64:CC:85:43:D5:9C:03:C2:F3:0B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de12834a-9370-4c63-969f-bf8eef4cd73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:4010::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:4b:ed:dd:9c:72:64:22:4b:95:0b:d9:3f:a8:f9:c2:ee:1d:
         34:11:f1:e2:76:d6:ce:09:67:d7:16:e2:b7:d0:c5:cc:eb:eb:
         c6:56:e9:93:38:52:7e:45:f0:96:1a:a5:99:23:d4:cc:44:9a:
         da:5d:a3:6c:9a:3f:12:6a:68:f4:37:c8:e3:0f:51:82:de:b6:
         2b:6a:ec:5b:11:2e:28:49:cd:f7:25:6e:be:bd:bc:ec:1a:e4:
         28:f9:21:8d:cb:43:24:44:a0:75:26:fc:e5:35:a8:50:bd:44:
         4f:ce:e1:f3:10:10:75:0e:ec:db:4a:0d:32:5d:5c:b6:da:8f:
         46:c2:cd:ba:f9:d6:49:d5:64:92:9d:15:18:fd:09:60:c1:db:
         e7:c1:f1:a9:1a:fb:b7:cd:07:12:20:d6:c8:1f:85:b9:0e:f8:
         28:bd:b2:7e:57:81:02:be:7d:55:eb:d9:22:6c:54:ea:f1:77:
         ac:8c:e8:d1:45:c2:6c:73:f8:15:96:7e:9c:24:77:af:e7:bc:
         fe:9e:4b:af:c8:9b:bb:d1:22:77:9f:d2:07:84:62:f3:3a:1e:
         c7:d4:a7:5a:c4:70:82:f7:6e:c0:5c:74:4d:69:d0:a1:76:90:
         41:d6:3f:68:4d:0b:1c:d0:c0:c3:bf:aa:be:d6:18:82:f1:e5:
         fc:08:d8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----