Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
File:                     2331f846-3447-4dea-ac7a-63323853ebb9.roa (raw, json)
Hash identifier:          pJJ7+mCB8hC4eVnjdyDJTMewypdvfRW2wN7tSpPZNzU=
Subject key identifier:   C1:25:BF:45:24:FC:73:15:1E:B3:31:AB:46:A8:91:92:95:19:00:FC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       15CDDD80C1EF3D12E95153A473B707A470B87372
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
Signing time:             Fri 26 Sep 2025 19:39:28 +0000
ROA not before:           Fri 26 Sep 2025 19:39:28 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06f:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cd:dd:80:c1:ef:3d:12:e9:51:53:a4:73:b7:07:a4:70:b8:73:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:39:28 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=cd722022360025382443d895662b94829d48b906877f99096b1ec1450581d2ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:57:4a:c4:73:06:15:88:c7:f9:67:7c:22:
                    f5:58:6e:0c:96:c4:6b:b6:c9:c2:e7:93:a1:7a:8a:
                    d2:bc:c6:9b:b2:77:ff:5c:bc:d6:60:c9:07:d9:6e:
                    3d:a4:75:86:71:eb:41:9e:b9:63:68:0f:27:6b:bb:
                    c2:ac:83:bb:89:73:a4:5b:eb:33:93:4c:ee:b6:ce:
                    d6:49:dd:b6:90:b7:90:ac:47:a6:57:50:21:9b:5b:
                    23:3e:5a:0f:9b:ea:8a:4e:e8:a3:cd:6b:f5:68:f7:
                    96:9e:81:68:1b:52:74:a4:99:bb:c8:25:c4:7f:83:
                    71:ad:5e:51:39:f1:70:52:cc:13:1a:32:49:fa:65:
                    27:62:cf:4f:1d:b8:a5:3c:7c:fd:c0:ac:04:42:dd:
                    13:1c:86:1f:cc:28:d0:19:af:83:0c:25:c7:64:17:
                    b9:2b:43:0e:4a:06:9b:74:10:bb:83:ed:d2:49:ca:
                    42:1e:8e:19:e9:bc:a9:5b:50:fe:3d:08:22:63:fb:
                    6e:c1:3f:66:55:6b:b1:ed:d3:24:26:24:7b:55:4c:
                    07:8c:48:06:51:02:c7:f1:ef:b9:61:2e:89:ee:6b:
                    34:64:7c:0f:dd:b0:39:d3:c1:7d:4d:34:86:b3:da:
                    11:7b:71:f3:71:d0:ef:52:f9:f8:8a:2e:a3:ee:d4:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:25:BF:45:24:FC:73:15:1E:B3:31:AB:46:A8:91:92:95:19:00:FC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:a2:8b:b2:eb:3a:5e:87:bc:08:62:70:82:f1:ba:d4:63:75:
         15:5d:5d:2e:21:9c:6a:f0:b5:c2:5d:08:77:bb:7c:b9:bd:05:
         c1:65:c8:1e:00:88:31:8d:65:04:62:34:14:14:fd:f3:15:2c:
         83:fd:47:47:d3:a5:b5:ec:3e:37:a3:fc:bc:a9:2a:f7:6e:84:
         c0:74:b7:d8:ad:c1:8f:43:5d:6f:50:3c:49:f3:94:2a:b0:d0:
         5e:db:93:1e:4b:49:70:75:f7:97:e9:97:5d:4c:31:f5:8d:78:
         7f:96:39:6e:06:11:6b:cf:b3:68:f8:2a:af:c4:0b:93:0b:dc:
         df:ae:02:0f:1f:f0:27:af:1c:2f:6b:d6:53:2a:18:1e:57:46:
         fe:60:c0:be:0a:8d:e4:f7:cd:91:5c:03:f9:4f:4f:0c:40:20:
         90:e6:1d:4b:9b:39:f3:5d:56:d5:70:84:6d:97:08:5f:6a:55:
         eb:a9:78:5f:25:3f:22:32:18:fc:5c:fc:7e:95:af:5b:69:18:
         96:77:2b:06:1e:ba:df:46:63:cf:66:db:96:44:61:dc:56:2b:
         df:c7:e3:92:17:1d:51:70:a7:0d:3a:be:ac:2b:ae:1e:69:48:
         27:40:e3:ad:75:df:93:db:d4:76:29:6d:87:85:61:89:fd:b2:
         7b:8b:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----