Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df59e31f-1e32-4e7a-a595-74adb3f93176.roa
File:                     df59e31f-1e32-4e7a-a595-74adb3f93176.roa (raw, json)
Hash identifier:          E8MOZb/0xdztuEoj45d1DvOmfbIowy8BN7tD5BlH2nA=
Subject key identifier:   8F:A6:4B:F9:33:F4:EF:F7:F4:FE:89:B5:5E:9C:CA:CC:61:C2:2A:13
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5A31EA398F556E8FED330CFAF741737F41C6C2CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df59e31f-1e32-4e7a-a595-74adb3f93176.roa
Signing time:             Tue 21 Oct 2025 14:00:08 +0000
ROA not before:           Tue 21 Oct 2025 14:00:08 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:31:ea:39:8f:55:6e:8f:ed:33:0c:fa:f7:41:73:7f:41:c6:c2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 14:00:08 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=cca375a732f113218b22f600a915995ccc302975193d78b912f637ca534f6e18, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:69:e6:c3:99:b3:d9:fd:c5:80:01:c3:52:70:
                    1d:c2:3c:ca:99:f0:11:ff:ee:19:66:12:12:14:5e:
                    8e:40:b9:61:81:e4:e0:8e:57:eb:b0:62:78:20:8b:
                    62:3a:5d:fb:ed:9e:6c:ca:47:37:fb:c2:f3:12:1a:
                    08:f4:50:27:78:99:55:05:a7:c6:2c:63:5f:09:f3:
                    0c:0a:b4:a9:99:ae:fc:c8:2f:6a:23:f7:df:cf:28:
                    99:6c:27:be:83:b4:96:95:9e:aa:98:4f:58:5d:93:
                    ce:3c:92:1a:05:55:58:dd:25:60:39:7a:ad:f2:ce:
                    23:bd:fd:43:6f:dd:e3:bc:c7:d6:72:e8:d4:a3:5e:
                    ad:5f:e5:6d:88:4e:b8:ee:d0:1a:89:f6:a4:44:5f:
                    17:33:c5:b4:d1:ff:c0:e7:f0:4c:cd:37:0a:f3:67:
                    ee:79:53:91:82:f5:00:fc:0e:3d:a1:99:0e:a9:9a:
                    63:34:07:93:3b:65:08:81:22:e5:62:b7:7c:be:aa:
                    fc:3f:ed:49:a9:5a:f2:08:36:b7:ef:0f:98:11:30:
                    03:43:13:f1:fc:cf:05:a7:99:21:ae:16:48:36:fc:
                    db:fb:e9:0b:ec:71:1f:91:49:01:bd:5e:85:c8:ca:
                    3d:4d:cb:18:1c:ff:66:c6:e2:dd:6b:ab:9a:1c:84:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A6:4B:F9:33:F4:EF:F7:F4:FE:89:B5:5E:9C:CA:CC:61:C2:2A:13
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df59e31f-1e32-4e7a-a595-74adb3f93176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c9:8f:0b:61:53:b5:7d:b0:5e:48:36:91:13:fd:c9:8d:20:1f:
         3a:29:58:ed:79:74:a4:f9:f8:de:57:a8:67:d1:a1:86:ed:84:
         80:86:a8:3b:cb:10:50:69:e3:73:ad:f3:a3:14:36:0a:10:e5:
         ac:b9:67:d4:12:43:62:39:86:3b:41:4f:02:bf:72:a5:0a:d8:
         ad:64:78:81:13:cd:42:ea:da:38:e9:ed:7c:aa:39:49:8f:57:
         6f:e8:2f:4c:38:ae:ff:25:93:54:8c:07:db:68:fc:da:91:8c:
         73:b4:61:bd:86:cb:c6:e1:46:2d:b4:34:08:bb:2c:8d:84:a1:
         fe:e4:3b:b4:91:49:6e:a7:53:66:f7:96:db:8b:bd:4e:fe:1a:
         1d:a8:2d:f6:86:1c:c7:10:7e:7e:21:05:d3:b5:ea:9d:3f:cc:
         48:b8:e2:9d:be:2c:db:a9:05:52:54:e6:1b:8e:6c:27:fd:94:
         7c:52:d7:6e:ca:a5:bc:f9:93:44:bc:f4:ad:91:eb:54:96:3a:
         10:35:25:bf:0a:73:21:17:2a:d6:47:cb:7f:b1:9f:e9:71:99:
         2c:1d:90:e2:b8:17:a6:82:e7:75:eb:ec:f2:89:44:56:d3:6f:
         34:d1:9c:ca:10:70:cc:9c:20:1b:7b:b9:64:c0:d2:6d:9c:95:
         7b:a8:26:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----