Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b6ddca7-172f-4f0e-9a83-9a359f62c43d.roa
File:                     4b6ddca7-172f-4f0e-9a83-9a359f62c43d.roa (raw, json)
Hash identifier:          +8KX9ofNmzkPelSK4TqheIqmHbnEWQ7IVs2PfCsCaZM=
Subject key identifier:   89:83:6D:DE:71:D0:65:32:18:77:C7:76:BC:C3:BD:9C:B0:DD:36:60
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0867246CC49B4A00F280778814E7D4B5363E4802
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b6ddca7-172f-4f0e-9a83-9a359f62c43d.roa
Signing time:             Fri 26 Sep 2025 19:39:33 +0000
ROA not before:           Fri 26 Sep 2025 19:39:33 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:67:24:6c:c4:9b:4a:00:f2:80:77:88:14:e7:d4:b5:36:3e:48:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:39:33 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=ca4cac4e891c97c7e130a9bb3cb597adb7918a8a80a7c5e4d647bf46490b2b17, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:67:29:cb:44:da:f8:45:92:80:35:f1:67:
                    03:0b:35:e7:bc:0e:d3:f8:9b:a9:70:83:d7:de:7c:
                    52:1b:8d:82:fc:e7:9d:a6:77:0e:61:4d:f4:f4:d0:
                    6a:52:ad:b4:2b:ee:54:9d:75:f1:4e:70:7c:01:80:
                    db:1d:47:d9:75:47:c4:63:82:f0:9c:d9:ce:52:b2:
                    c9:50:32:04:76:1c:44:b0:75:93:ae:2c:00:49:d6:
                    ed:56:7e:c0:58:85:e6:be:df:0b:fe:10:3d:87:30:
                    7a:69:71:1b:af:f4:67:47:74:17:8c:56:ab:f0:60:
                    1c:c3:32:9f:1d:63:c8:e3:c0:2a:72:c7:b4:83:90:
                    bb:b5:41:44:5f:4f:ef:17:16:7e:98:f4:ae:47:0b:
                    f6:a2:cc:66:b2:7f:40:97:07:5b:e2:0d:c7:11:4b:
                    94:86:8e:46:3b:2e:f7:e6:59:5f:17:2f:ec:ff:fd:
                    39:d1:eb:0f:60:bf:ec:fa:85:5a:1c:41:95:4b:31:
                    6a:57:9f:6d:4e:fc:90:b0:5e:ff:25:19:f5:12:c3:
                    3d:c5:3f:43:df:c8:73:a3:a6:8c:72:b9:dd:e9:bc:
                    c9:6c:ae:9d:0b:d3:32:8a:ba:28:7c:66:3b:5a:09:
                    9b:1a:ef:44:6e:2c:4f:62:c6:e5:a5:88:14:37:ef:
                    7f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:83:6D:DE:71:D0:65:32:18:77:C7:76:BC:C3:BD:9C:B0:DD:36:60
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b6ddca7-172f-4f0e-9a83-9a359f62c43d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:e7:9a:72:60:46:39:b1:5d:aa:db:c2:b0:95:02:4f:40:fb:
         1c:6c:63:d3:99:80:1e:23:a1:14:98:c8:85:bc:37:0b:62:7f:
         14:45:86:cd:d7:96:16:1a:6d:b2:bd:c0:d5:91:f8:15:15:c2:
         7d:4b:f9:7f:9b:73:89:34:45:d8:64:be:05:13:72:3b:d2:93:
         04:89:5a:d9:2f:19:5e:78:7c:b1:2b:10:d4:fe:20:98:7e:07:
         b6:e9:bc:f0:3e:de:85:33:57:d2:84:c6:af:9d:14:71:8e:14:
         a7:46:c4:4e:f8:5e:d9:10:4f:81:14:31:21:bc:e6:59:bc:a0:
         b2:79:4b:97:b2:77:10:1d:f8:2f:3a:53:a1:b5:a4:af:b9:0b:
         5b:5a:cc:72:62:2a:ad:9d:82:16:cb:f7:af:b2:1e:d0:19:e8:
         d8:58:61:cc:bf:67:a5:6e:9a:4e:49:5a:40:ed:12:02:18:d5:
         4c:65:8c:fc:27:e2:8d:08:1a:d6:2c:0f:5a:37:6d:d8:fd:bf:
         c1:d1:2d:5d:92:1d:9e:10:25:19:b3:45:4f:bb:5f:ad:56:5b:
         34:97:c3:d9:49:fa:87:5a:26:08:c0:6e:c0:ff:cc:aa:6f:0e:
         7b:e7:d7:e0:d0:b4:3c:3d:98:67:15:97:79:8d:56:2e:97:8a:
         e0:df:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----