Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
File:                     470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa (raw, json)
Hash identifier:          XCvN7k9QE3eCG4bd1nnBe9N/gHVYqoJpv729FmOqFg0=
Subject key identifier:   F8:30:D3:36:61:D8:D7:BE:D5:E7:50:5F:C0:2C:02:16:5F:DA:92:32
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       682BB5C7AEAD9C765AECA55357F1959898D8F814
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
Signing time:             Fri 26 Sep 2025 19:10:58 +0000
ROA not before:           Fri 26 Sep 2025 19:10:58 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2b:b5:c7:ae:ad:9c:76:5a:ec:a5:53:57:f1:95:98:98:d8:f8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:10:58 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=748d15a8d204003827e7fea5e404c07bc34ba1199e2a11b8e3184cbda7b20989, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:1e:70:4c:5e:eb:4e:d2:b8:55:dc:63:83:
                    48:12:fe:f1:34:33:58:82:6e:7e:08:68:d3:d5:47:
                    8b:93:3c:fe:ac:2c:71:81:b0:08:8a:79:09:6c:0e:
                    2e:ea:15:fe:23:0f:75:fd:c2:ae:68:7b:75:8e:41:
                    ac:c5:6c:84:4d:cb:7c:a9:c9:bc:60:82:36:b7:df:
                    17:ec:74:52:a2:55:37:ad:81:63:d3:99:4b:0c:a5:
                    84:ad:4c:c2:aa:1f:a8:de:11:93:c0:8d:07:1f:07:
                    11:ac:1e:64:36:1e:79:f2:28:36:3b:5c:9e:87:ab:
                    6a:0c:a2:a9:cd:22:9d:a0:28:1b:2b:c3:17:8d:08:
                    17:e4:f4:06:cc:08:2d:dd:51:f3:18:ef:55:d2:9d:
                    91:58:2f:62:29:2c:6a:10:c9:c2:a3:e9:65:20:b3:
                    cb:cc:61:48:a5:8f:4f:80:15:41:b3:91:b9:95:36:
                    1b:f9:93:cd:ce:77:03:6a:9c:ad:03:95:69:a6:c5:
                    7b:a1:c8:26:26:55:54:04:2b:09:22:97:ed:92:f2:
                    6f:e7:b5:e4:05:55:d2:0d:9c:df:3a:36:a7:c1:49:
                    aa:14:f5:db:2d:eb:12:2b:0a:18:10:53:d4:d1:04:
                    fc:4d:7b:08:44:27:23:58:80:89:60:d3:72:1f:be:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:30:D3:36:61:D8:D7:BE:D5:E7:50:5F:C0:2C:02:16:5F:DA:92:32
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:71:e6:50:ba:aa:98:0e:36:a5:6c:9d:73:f0:22:07:96:
         15:e6:8c:d4:24:14:f6:46:f3:27:38:08:97:8c:f0:2e:89:9d:
         38:a8:73:c3:f9:17:de:ea:97:33:7e:41:dd:43:9a:56:7c:45:
         ac:40:0c:23:58:27:cb:5b:60:63:b9:26:02:f3:b3:9d:cd:78:
         4f:45:3b:64:4a:f3:a1:db:d2:98:e7:66:32:bb:97:b5:40:09:
         db:8a:4e:0e:87:9b:25:23:d3:2c:f0:dd:6f:a4:eb:62:53:19:
         44:8e:a3:68:cf:cd:3a:e1:bc:6f:b9:ea:63:14:b8:71:3e:16:
         38:2f:c5:13:f4:ec:e1:f8:ee:8f:2d:4d:70:95:8c:e9:39:40:
         df:55:33:2e:20:20:7d:c9:00:35:13:a8:1e:c0:b5:47:35:16:
         58:a2:19:cd:61:20:e9:f2:3a:f5:f0:92:b7:9c:a1:0c:fc:2b:
         d5:50:8c:d3:c3:f7:e3:9e:a5:25:e4:7b:05:d2:c1:37:7f:c8:
         52:4d:4c:55:e1:73:a7:6f:af:f2:0d:1c:72:18:d8:b1:5a:57:
         a5:5d:9a:50:f1:60:9a:ed:9e:b9:b7:e9:99:f3:c9:ba:28:c6:
         15:64:bf:e8:90:d8:1b:fa:46:8e:0d:dc:95:01:35:5a:46:fd:
         61:a8:3e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----