Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec7e5637-f312-4c51-b644-29324b74734e.roa
File:                     ec7e5637-f312-4c51-b644-29324b74734e.roa (raw, json)
Hash identifier:          LwR9xG0rGPgZu90w9HsBJ0MQoKHCVgVQe1n6yVQBfDg=
Subject key identifier:   A7:61:7F:74:55:CB:7D:58:69:A4:6C:1E:E1:B4:DC:B8:60:BD:FD:83
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6C441DE1AF0F49EA4318605EDEC7A42049493468
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec7e5637-f312-4c51-b644-29324b74734e.roa
Signing time:             Mon 12 May 2025 16:11:35 +0000
ROA not before:           Mon 12 May 2025 16:11:35 +0000
ROA not after:            Mon 16 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        176.34.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Jun 2025 13:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:44:1d:e1:af:0f:49:ea:43:18:60:5e:de:c7:a4:20:49:49:34:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 12 16:11:35 2025 GMT
            Not After : Jun 16 23:59:59 2025 GMT
        Subject: serialNumber=b1719a87bd34853535f83dafb79a095bb4cdd134cbede94c5a60f473fc7bf740, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:d6:07:08:39:4b:76:60:05:64:27:38:2a:
                    e8:00:c8:d2:1a:5c:e8:21:78:94:ed:5f:c0:e2:fb:
                    70:30:af:be:d1:f9:9a:9a:75:a3:1b:e2:da:b5:e0:
                    20:b6:e5:c0:f3:d6:1b:1f:3a:9f:e4:67:84:84:52:
                    3f:0b:e6:68:07:38:31:67:08:e2:6a:b0:13:f0:3b:
                    30:2c:af:5d:83:7b:37:3e:4f:bf:83:20:5b:18:09:
                    19:b4:5b:08:0b:c0:0f:56:d1:18:7e:88:0e:28:8c:
                    da:f5:eb:f1:98:c8:75:5a:eb:9d:e3:2d:dc:ad:e4:
                    0d:92:3e:b2:91:2d:c7:8a:de:26:e2:b4:8f:9f:c7:
                    80:0b:4a:7d:0a:42:38:11:a2:87:50:cf:19:f7:eb:
                    91:fa:03:7e:32:e9:38:ce:b6:8c:6c:37:a9:df:57:
                    82:35:ca:a7:74:27:cb:a6:07:95:1d:37:ad:da:ae:
                    a7:da:17:35:5d:9f:75:bf:6a:c3:2f:f2:84:a5:be:
                    f2:46:10:cc:18:47:59:4d:7b:74:22:9b:aa:d4:77:
                    44:6a:d4:67:1e:19:24:d1:6a:2c:99:25:69:88:35:
                    22:50:3b:f8:92:f5:cf:de:c2:2a:97:b0:27:c1:a7:
                    f5:42:05:10:61:6e:69:75:46:d4:6d:16:cc:ad:59:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:61:7F:74:55:CB:7D:58:69:A4:6C:1E:E1:B4:DC:B8:60:BD:FD:83
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec7e5637-f312-4c51-b644-29324b74734e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.34.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:cd:b4:1c:07:e8:53:36:a6:f9:f0:00:88:d0:8b:d8:ca:c7:
         fd:0b:6c:ae:24:98:03:83:e7:4b:09:65:36:44:32:a9:7a:f4:
         6e:4e:8b:a4:7b:85:44:7b:11:ca:68:57:f8:e0:6f:ba:ef:c8:
         57:b5:a7:e1:17:7b:03:ae:2f:5d:d3:5d:d5:62:ce:f1:ca:e3:
         e5:d5:4a:b2:6c:27:3d:b7:d2:ff:48:e2:91:92:7c:63:c7:bf:
         82:6c:67:df:83:55:13:73:2c:36:51:1b:3d:08:67:8b:b7:54:
         43:5c:20:dd:2d:78:f0:f4:6a:23:0f:4f:56:8a:4e:e8:a0:79:
         ac:18:f5:d8:8d:ab:1b:ad:a3:7b:37:0a:e7:c9:6b:2e:7c:b2:
         c3:e9:e9:7f:52:64:9c:38:85:cd:03:9d:38:aa:eb:33:d4:03:
         f7:82:a9:8c:9a:ff:fe:90:9b:00:8b:39:59:ad:76:b8:5f:0a:
         b6:95:04:aa:1d:79:ad:94:75:56:84:6d:24:e7:d8:f6:ed:a8:
         46:c0:d1:b8:0e:be:45:69:b7:e2:54:fa:89:04:17:d9:60:7e:
         9d:fe:f7:9d:76:21:b9:78:6a:e3:88:55:36:d6:f0:b6:08:3d:
         7c:ba:cc:dc:17:e5:16:89:c2:cf:58:02:ea:88:0e:bc:32:d6:
         5d:11:39:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----