Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
File:                     1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa (raw, json)
Hash identifier:          jkDdsKVLQ2yeB4eb1P4JHxpaCs5wl0SrHfZB23Ipnb4=
Subject key identifier:   0F:19:94:54:3F:6B:5C:E0:5B:6E:A4:7C:D4:F7:01:25:B7:4C:06:79
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       35DBFAFE363CC938076F194AD6602F5198079C95
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
Signing time:             Fri 26 Sep 2025 19:00:21 +0000
ROA not before:           Fri 26 Sep 2025 19:00:21 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:8080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:db:fa:fe:36:3c:c9:38:07:6f:19:4a:d6:60:2f:51:98:07:9c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:00:21 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=52b2668a955887b1d10c414a3427f7cdd2d58a4268ea354a30011351bb1d1052, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:3a:01:74:35:37:69:db:44:cd:91:8b:66:
                    1c:1c:bb:ca:d6:ac:3b:75:40:46:6d:f8:18:1e:a8:
                    5b:38:ba:f0:bf:33:18:32:b9:f4:a6:89:8c:2e:81:
                    62:a0:d2:66:c8:6f:70:7f:e0:c1:83:da:e0:a9:1d:
                    6b:8d:97:57:a5:ca:76:59:23:d8:14:4b:99:b1:4c:
                    3a:94:82:50:ef:0a:51:d4:cf:5b:b5:c3:66:5c:90:
                    49:3b:2e:c3:cf:90:5c:f0:99:94:6a:90:4d:b0:5f:
                    0d:54:65:27:cb:ce:05:ef:38:0b:a2:5c:30:20:6d:
                    0d:1d:52:04:e0:0d:45:3e:1a:d3:9c:8b:3d:8d:fb:
                    ab:c0:3e:cc:0d:b8:b2:81:51:4f:96:15:8f:d6:99:
                    bf:eb:40:f9:46:69:2b:0c:28:a3:9a:39:7f:34:22:
                    d1:df:18:e9:02:c6:72:ab:a2:bd:4c:05:a9:b2:ae:
                    2c:3b:5b:07:cf:26:22:58:f0:3c:91:ae:55:c8:64:
                    d1:46:49:54:b8:3c:ff:ee:8f:d0:00:ef:c3:a1:36:
                    7b:f2:c6:b7:b3:5e:4a:19:12:6c:9e:a2:f3:d7:66:
                    37:49:4c:e5:08:c1:4c:9b:37:6d:70:2b:18:82:78:
                    3a:b5:0b:3c:e1:22:ea:0a:05:ae:53:e5:cc:0c:da:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:19:94:54:3F:6B:5C:E0:5B:6E:A4:7C:D4:F7:01:25:B7:4C:06:79
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:8080::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:72:3c:07:1f:40:06:96:99:1a:d4:db:06:bf:3a:ba:01:a7:
         b3:49:b3:57:35:be:e2:7e:86:c5:d1:b0:d5:38:16:ef:a8:f3:
         32:96:85:ca:23:ee:ad:d6:42:50:e5:08:8f:2d:97:48:1a:54:
         c1:5b:34:82:fb:97:e8:00:13:29:d2:b0:9c:37:42:f9:6e:fc:
         22:10:bd:65:b4:03:95:7a:2a:4e:23:94:28:2b:da:7b:e8:bd:
         77:e0:9d:d9:6e:fe:e6:12:26:b9:1f:e5:0c:83:49:08:55:71:
         81:8d:f8:53:26:08:ad:25:c1:2a:57:c0:25:b2:e8:be:a2:ec:
         81:a7:35:a2:c8:fb:ce:95:20:c3:d3:a3:b1:38:76:81:14:93:
         81:be:2a:b7:1a:e7:28:2c:f2:0e:4e:ec:7f:5a:f5:40:f2:fe:
         5f:32:be:bf:29:e3:23:07:4e:da:85:28:1d:f3:af:35:64:74:
         b3:7d:8b:a0:06:b4:bf:b6:77:98:81:a1:9c:d1:d6:5c:3c:85:
         4c:0f:17:24:e7:d2:de:ff:e6:13:0e:0c:b4:e5:84:16:f5:96:
         f3:19:a0:df:43:c5:73:c8:b0:ac:ae:8c:21:56:ee:9b:e6:b5:
         b1:b2:a9:90:68:be:f0:76:f2:a1:1c:fe:01:31:6e:82:b9:f4:
         e3:c3:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----