Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3901d4e7-d120-481a-a199-4762783cff5b.roa
File:                     3901d4e7-d120-481a-a199-4762783cff5b.roa (raw, json)
Hash identifier:          s1P0P40vqWbqKPlk01OhambQnHztSdZvApepoIz+UNQ=
Subject key identifier:   C4:2A:5B:2E:00:0B:36:6C:CB:6F:5F:9B:6B:AD:FB:0A:6E:E2:11:ED
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0C7D750D5DEDE39D7754F48B86E2937E7160175E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3901d4e7-d120-481a-a199-4762783cff5b.roa
Signing time:             Fri 26 Sep 2025 19:38:44 +0000
ROA not before:           Fri 26 Sep 2025 19:38:44 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d059:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7d:75:0d:5d:ed:e3:9d:77:54:f4:8b:86:e2:93:7e:71:60:17:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:38:44 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=0347520466864857dfe2dfd309b4ca7d9cc1541f452113b5f8ecd16b671c341a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c7:59:4b:21:2a:cb:a7:fb:d1:7f:be:3c:88:
                    97:19:75:30:fd:00:44:03:ec:5c:42:56:d4:04:c6:
                    e4:24:b3:22:33:4a:c3:e1:7a:20:68:7f:3b:15:14:
                    bc:14:ae:ac:dd:32:55:f5:46:ee:6f:a6:0a:52:8d:
                    9a:af:4c:fd:44:7b:65:a9:3b:33:69:47:ad:26:4e:
                    45:6d:1f:85:df:b8:2a:24:b4:7d:48:73:4a:be:be:
                    7a:04:c0:84:af:06:c7:0d:a1:24:5e:70:2b:a9:58:
                    16:02:60:39:e0:dd:63:9b:04:63:1b:9b:cb:75:40:
                    bc:e3:e5:2c:fb:21:b2:73:cb:ee:58:16:2a:50:06:
                    74:51:76:96:65:7b:10:f1:ae:87:f9:7e:45:11:58:
                    f8:18:3a:83:70:a2:87:a9:42:4c:40:51:61:6b:0f:
                    8a:68:cc:22:12:31:28:43:04:6d:57:29:7b:76:7e:
                    2f:a0:1d:7e:46:f6:6c:1b:cb:03:cc:9f:32:46:78:
                    23:5f:06:4e:c0:99:de:89:68:85:7c:00:5f:3c:24:
                    e1:26:49:20:4c:76:06:f5:72:87:ba:dc:ba:f8:6a:
                    d2:a7:b0:4a:c8:54:18:e1:91:f2:f8:74:c8:8d:de:
                    10:b2:c3:b9:dc:5f:48:16:5b:92:a7:4f:92:4d:f5:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2A:5B:2E:00:0B:36:6C:CB:6F:5F:9B:6B:AD:FB:0A:6E:E2:11:ED
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3901d4e7-d120-481a-a199-4762783cff5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:b3:81:1a:22:62:bb:36:55:b0:76:74:7a:6d:d4:43:5a:80:
         81:c1:85:b0:e3:fe:dd:9a:68:62:e0:9b:96:0d:8f:a9:d0:ab:
         21:1a:ff:90:96:8a:bf:99:2b:40:5b:35:0c:3e:a8:ba:a9:a7:
         73:a8:e2:3b:a9:c6:d6:1b:8f:2d:27:f9:f0:df:ab:cb:49:1c:
         3b:a9:4b:92:d1:3f:3d:86:fc:d5:4c:f3:19:b3:bc:ea:51:8e:
         97:74:79:cf:be:27:24:84:dc:82:74:a4:fe:c2:96:b5:6f:5c:
         aa:e6:2c:21:da:5c:cb:5d:ee:76:50:f5:21:4b:4d:49:77:da:
         04:cf:ab:0d:1a:7a:80:f2:46:7b:59:87:6d:d8:73:74:f2:88:
         3d:2f:57:06:4c:1d:e5:51:c8:d1:ae:06:8a:b8:83:0e:aa:6b:
         4a:36:71:a9:aa:c9:22:12:47:99:ca:25:b3:9f:75:49:1d:c5:
         f4:88:d7:dc:f0:9b:99:10:ae:30:82:76:0d:0a:b8:a9:46:b6:
         f3:5c:11:7c:2c:7c:c0:81:86:03:ea:9f:61:58:f7:74:91:11:
         a0:f5:82:d5:71:9d:09:c8:87:99:69:a0:28:b2:30:c6:a0:d6:
         c0:77:50:b3:b9:44:66:d7:ca:4f:b6:a3:97:6d:ec:41:33:0d:
         e8:7a:1b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----