Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2636a453-2dd9-4fde-9f15-753f76341841.roa
File:                     2636a453-2dd9-4fde-9f15-753f76341841.roa (raw, json)
Hash identifier:          QdQcQQAstuO7P6Ntx5coWByCh6I4IwL2kijRtNcqVZ4=
Subject key identifier:   06:43:7F:59:90:0C:7C:75:B9:26:DE:3F:CB:18:B8:82:7B:CC:94:85
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6ABA55D2692B418D0319A245CF4F5ECB71A8FD68
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2636a453-2dd9-4fde-9f15-753f76341841.roa
Signing time:             Fri 10 Oct 2025 17:04:20 +0000
ROA not before:           Fri 10 Oct 2025 17:04:20 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d074:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ba:55:d2:69:2b:41:8d:03:19:a2:45:cf:4f:5e:cb:71:a8:fd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 10 17:04:20 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=c6046c7e45265aa1df50af9c0de99eb9e76008f2388ecac4ed3b6c0da85aae17, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a4:f9:b1:94:3c:8f:54:e2:29:0a:f9:cf:f1:
                    63:bc:07:4d:63:ae:38:c1:61:d1:38:7d:b7:e9:29:
                    50:43:ab:66:3d:a1:02:87:34:54:71:26:da:d6:a3:
                    19:6b:67:cb:05:a7:c9:6e:6d:ae:72:ed:e6:88:59:
                    ba:da:18:b6:44:9e:52:57:82:66:e7:4d:e8:50:a4:
                    68:cb:cb:75:90:95:e9:55:53:82:7c:64:0d:7a:6c:
                    88:2b:74:32:81:23:28:3c:ff:9b:41:3a:6c:88:a6:
                    0c:c8:58:c5:b8:8e:5c:0b:c0:50:01:76:8d:03:a1:
                    0f:05:5b:2e:b6:57:40:e0:ac:62:12:12:b3:1a:2a:
                    fc:1a:2d:93:20:05:a7:fe:6e:3f:c4:cf:17:ce:78:
                    90:63:7c:c8:82:19:40:b8:c4:a0:c4:ac:a5:57:c3:
                    83:9d:1e:4a:de:8b:5e:3f:a4:c7:55:f9:76:aa:f0:
                    e5:76:56:d7:70:1d:9b:d4:3d:83:6c:92:a5:14:39:
                    22:72:1e:a5:bd:d0:1d:ea:f3:5f:53:ac:50:d7:c1:
                    42:96:ed:72:ab:2d:6a:46:f4:83:f9:45:3d:25:cb:
                    69:14:97:39:b8:3e:df:1d:48:bc:d4:67:a5:2a:14:
                    04:95:1b:ce:e3:0c:78:85:7e:08:fd:c4:80:cf:17:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:43:7F:59:90:0C:7C:75:B9:26:DE:3F:CB:18:B8:82:7B:CC:94:85
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2636a453-2dd9-4fde-9f15-753f76341841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:50:b2:1c:2c:0f:bd:c2:a6:bb:43:1e:51:68:50:82:37:4b:
         f6:20:06:f8:f6:a3:7a:54:9c:c2:02:3e:01:3d:3c:c5:60:67:
         13:71:e7:18:81:bf:b8:d6:35:63:99:d1:d8:a4:08:fd:b6:1c:
         0d:d7:cc:9e:a6:8f:2b:6f:94:60:21:37:b4:29:89:82:fc:06:
         28:80:1a:0a:0b:6b:0c:bd:8f:9d:25:38:65:39:7f:4d:87:62:
         f0:d0:71:0e:3f:c5:ec:7b:31:2a:c2:64:ab:19:cb:cb:f7:39:
         24:08:47:98:4b:d1:2f:b9:37:72:32:de:b4:ce:5a:f0:78:92:
         63:ae:37:bb:3b:da:76:d7:a7:38:5f:c2:5d:56:b6:4f:b4:fc:
         87:ec:9b:fe:ef:e1:a5:dd:a4:ad:dc:8e:0c:51:b0:5b:29:56:
         4b:12:53:eb:32:60:5f:46:c1:e3:d9:f5:f2:58:a0:ea:07:d6:
         7b:b9:09:54:5e:30:bb:73:46:80:2c:c6:72:bf:1a:72:bb:96:
         0a:18:a0:94:50:49:6c:6c:b2:63:2f:22:ea:bd:09:bf:d4:24:
         9f:3c:6a:0f:e1:11:43:e3:f1:e6:48:62:f9:74:ec:b2:dc:6c:
         67:80:a1:70:57:99:5b:e7:2c:7a:88:22:aa:97:3f:58:d7:64:
         97:c5:43:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----