Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
File:                     4cb86308-98a0-48e5-8825-d398c0ce8099.roa (raw, json)
Hash identifier:          sqoTW8tGih9IMMDOoF6+Ya5CWEavNvGxBN95anAIyB0=
Subject key identifier:   F8:F2:44:39:6E:D5:71:D1:F8:65:67:4B:7A:F5:77:62:2F:F8:83:F6
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       412149F3489ED789D12FC60A46BBDCD2D6F21E42
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
Signing time:             Fri 26 Sep 2025 19:11:46 +0000
ROA not before:           Fri 26 Sep 2025 19:11:46 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:5080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:21:49:f3:48:9e:d7:89:d1:2f:c6:0a:46:bb:dc:d2:d6:f2:1e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:11:46 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=2745205bfac03b79727e677be9118b8ee86f89db079efc01a58fb597262da934, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:25:c6:d6:83:ef:97:b5:27:c2:11:66:72:
                    a6:37:51:34:39:37:cd:9e:c1:79:e8:88:60:54:32:
                    9f:26:22:df:cf:49:bd:15:4e:ef:d8:51:57:34:5b:
                    0e:8a:bf:90:46:4d:26:8c:a6:eb:ea:d3:11:a5:cd:
                    12:3b:46:8b:41:81:1e:cb:a6:3c:34:68:c8:29:4c:
                    84:b6:44:71:15:ee:62:66:22:f7:74:5f:5b:c6:cb:
                    be:3a:e9:0f:3c:13:11:dd:26:6c:c9:7c:57:91:d8:
                    3d:1c:1a:39:ff:7f:dd:91:e2:d3:72:c3:5d:a1:a0:
                    31:02:4f:7a:48:93:c8:a0:40:75:22:a8:00:5f:84:
                    e5:ce:84:e0:57:ef:e5:9e:fb:df:8c:f1:df:ea:e9:
                    ef:d5:fb:b1:b8:ac:8a:e1:08:81:6f:64:ed:01:3e:
                    98:54:77:ea:18:4e:49:3c:94:41:aa:f0:12:c0:8e:
                    1b:56:d6:1e:94:7a:e0:54:c9:ba:a2:5e:e8:5f:0b:
                    6f:59:22:32:95:60:52:a2:7c:5c:f4:0d:d0:8e:07:
                    d7:0c:7c:75:01:05:9f:20:b9:a3:69:64:0b:dd:3d:
                    d0:3a:c9:31:b2:68:4e:d3:75:36:8d:72:47:6a:31:
                    6f:a5:56:cb:13:31:cb:c7:80:49:18:19:22:c4:53:
                    42:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F2:44:39:6E:D5:71:D1:F8:65:67:4B:7A:F5:77:62:2F:F8:83:F6
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:5080::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:05:a8:84:c7:b5:e9:17:92:e3:cf:75:98:ae:18:57:d3:e8:
         1f:bd:2f:70:03:e4:bb:a5:47:75:3f:f6:e3:1d:0e:79:52:7a:
         e6:fb:d3:7c:d9:6d:25:c4:87:62:0e:2e:00:4e:41:61:d1:bf:
         d4:53:89:a1:12:57:90:d7:9e:f4:66:a6:4a:eb:d1:e9:d0:a3:
         46:10:a1:6d:ee:1d:46:f3:e1:8d:d7:f1:3f:7c:01:72:d9:cf:
         0d:16:68:98:29:e8:17:44:e8:a8:58:96:9f:b4:2e:a9:aa:2a:
         8e:fc:fd:33:57:fb:36:e5:7d:0c:13:d6:1d:af:18:ef:aa:d7:
         1b:8f:49:60:04:55:4c:80:36:16:70:fa:03:08:db:68:13:f6:
         c3:cb:a9:c0:22:1f:58:31:6b:56:b1:b0:1d:aa:cc:1b:f4:76:
         91:67:c8:c6:5e:c7:6e:4a:e0:c4:f9:91:b8:89:67:21:17:b8:
         8e:f4:f7:a1:57:e2:cd:92:ee:6d:d4:f9:22:f5:64:5a:ab:a4:
         4c:7b:cb:3f:85:a9:7c:30:61:0a:69:90:dd:fa:3f:06:ef:1b:
         66:59:03:d5:29:32:97:2f:97:7f:32:9a:0b:43:3c:af:47:a7:
         2e:57:1b:01:1b:74:4f:7d:5e:ba:f3:7b:b8:db:e4:c6:b6:03:
         db:91:e9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----