Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
File:                     4078cff6-9b34-4f16-903f-c7817d86bf50.roa (raw, json)
Hash identifier:          CV5l4IfTUesDqshUQhYpfX/TLhJKZi1b6vMifkoMphI=
Subject key identifier:   B6:63:54:28:58:A0:42:0F:5C:9D:C4:36:28:D9:A7:33:EB:BD:84:BC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7BFEA93FF40258F9F36DA45C969DDBBA4B6A6418
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
Signing time:             Fri 26 Sep 2025 18:38:58 +0000
ROA not before:           Fri 26 Sep 2025 18:38:58 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:a080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fe:a9:3f:f4:02:58:f9:f3:6d:a4:5c:96:9d:db:ba:4b:6a:64:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 18:38:58 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=dd7262a57385bd4d9b0972e8cf219cbc23b1dae6ad28efd824ca3010e81b5880, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:62:3f:19:b3:26:5b:ef:63:f1:e7:ac:7f:d3:
                    02:78:dd:f5:28:a6:ba:11:c1:5d:23:bd:99:07:1f:
                    d5:23:30:22:fc:c8:03:1d:48:b3:2f:8d:5b:c3:6d:
                    9e:50:e9:55:47:77:22:72:4e:b5:ba:20:3d:a3:0e:
                    89:8a:42:5f:c7:c0:b6:7a:1d:30:ba:89:8c:a7:08:
                    9f:eb:b4:25:ae:c9:d8:af:97:ae:11:fa:77:e4:49:
                    49:9d:e0:76:8c:b0:d8:14:8a:09:1e:15:c6:d9:e5:
                    07:82:bf:6a:ea:7b:67:3b:43:42:c9:6f:ac:81:2c:
                    c8:db:a0:0a:82:8b:6c:36:91:1b:e9:5b:7e:90:c9:
                    27:48:86:5c:22:09:a3:f1:a4:dd:a3:8f:f1:b7:c3:
                    2c:cd:7e:24:7a:41:ec:29:c4:a1:4a:7f:13:a0:0f:
                    18:0d:a7:bf:01:7e:41:98:5e:67:ff:0e:9b:7f:7d:
                    b9:6b:5b:89:f9:21:39:44:33:dd:5f:d2:28:91:a7:
                    71:76:35:76:1b:9e:38:3a:28:98:77:95:49:06:c8:
                    59:63:d2:5b:96:ed:bb:70:6e:04:12:b7:b8:b7:dc:
                    5a:3b:d3:35:0a:7f:40:b8:91:65:7c:3f:36:b5:89:
                    4c:97:86:36:ae:ee:66:dc:a2:c1:16:16:1e:44:6d:
                    3a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:63:54:28:58:A0:42:0F:5C:9D:C4:36:28:D9:A7:33:EB:BD:84:BC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:a080::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:d6:d4:83:d0:f0:64:98:12:c0:5d:b3:ef:10:31:f8:17:1c:
         cd:ec:d2:cd:0c:3e:ee:4e:5c:68:38:d7:02:85:8d:2e:7d:86:
         d8:0f:c5:fa:9f:d4:12:35:cd:3b:a9:dd:5f:14:86:45:27:76:
         f3:a6:67:72:03:55:ef:16:b8:69:ee:4a:ef:78:bf:41:83:7e:
         67:19:0e:b8:bd:65:89:1e:fc:94:6f:8c:fa:a4:68:4d:31:d4:
         b5:73:7a:78:47:f7:d8:ac:a4:23:95:e5:26:09:45:4b:9b:31:
         0c:92:18:12:1b:83:dd:b9:ff:64:a9:ea:72:79:38:18:d1:e7:
         b8:d0:a4:66:e7:06:7e:c9:1a:a4:0c:c2:da:1e:f4:bd:cc:8d:
         dc:d8:43:91:6d:9d:d6:1c:7b:7e:7f:21:ba:65:11:97:1d:6d:
         2b:2c:3c:09:b6:1b:7d:e3:25:87:b2:6c:7e:df:04:e2:72:85:
         4d:7e:ae:cb:82:e3:65:36:d7:8d:a7:33:49:d3:fd:51:33:ab:
         41:c0:a0:45:73:a1:93:92:f5:ef:f0:ba:c5:15:46:59:c6:19:
         74:5d:d8:08:e7:83:f3:04:2a:21:13:a5:17:aa:4a:4a:27:7f:
         81:d0:45:80:ac:0f:ed:0d:70:77:7f:7f:01:0a:37:88:f9:0f:
         6c:dd:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----