Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73745b45-c65b-482b-9e7a-25a90d279147.roa
File:                     73745b45-c65b-482b-9e7a-25a90d279147.roa (raw, json)
Hash identifier:          MCTqtNsyUcnRLyr8kqSYjHAPU2yJ7I5ZY1D8BGzCoG4=
Subject key identifier:   DF:D4:BE:FB:4D:C8:2B:94:F6:4E:61:C1:AF:F4:63:12:EB:7A:61:AA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0FC7B7CA143DD50A42FF638371FFC7569F463BC9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73745b45-c65b-482b-9e7a-25a90d279147.roa
Signing time:             Fri 17 Oct 2025 21:10:18 +0000
ROA not before:           Fri 17 Oct 2025 21:10:18 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c7:b7:ca:14:3d:d5:0a:42:ff:63:83:71:ff:c7:56:9f:46:3b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 17 21:10:18 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=eee50285db12d2cd86d5aa534baaf8f05f9bdb1b36bd37765d770f6820f251f2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:df:4a:c3:89:f5:5f:46:a9:74:5f:89:62:c4:
                    91:2e:ac:d3:7b:7e:40:f9:f5:bb:df:d9:45:ad:9c:
                    de:53:50:de:c0:57:a1:08:a4:32:a4:1c:38:be:81:
                    73:e4:fd:46:8c:f8:8a:b5:ca:4c:89:d9:95:fe:27:
                    1e:68:e1:93:80:ae:d7:f3:b3:c5:d7:67:10:fa:71:
                    5e:c6:8f:e2:51:00:36:21:b9:7d:dc:18:af:99:45:
                    d2:4e:d0:26:7c:35:c2:9a:8b:a3:23:ae:82:70:db:
                    39:32:75:b3:29:16:21:aa:6b:a3:ef:f0:04:86:31:
                    b8:ab:27:33:c9:97:70:76:0c:80:69:fd:db:25:ab:
                    ad:89:49:78:b3:c7:ae:a5:59:89:b3:46:af:41:b1:
                    a7:0d:f5:ce:65:d1:ec:5d:be:23:13:c2:8e:0e:12:
                    72:ea:ed:43:81:7b:5d:ef:3f:ea:7f:91:96:f6:65:
                    20:9c:5b:cd:6e:b8:ba:fb:27:af:4a:db:e6:d1:13:
                    e2:35:c4:76:40:b3:a1:f3:f5:32:aa:94:dc:22:31:
                    5d:f6:d2:83:60:24:e4:4a:3d:70:0f:21:85:88:99:
                    c6:3a:dc:90:76:11:af:30:da:eb:b7:bd:2d:28:e3:
                    09:72:a0:43:27:68:ef:4c:2e:15:a6:3e:32:d3:f8:
                    b8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D4:BE:FB:4D:C8:2B:94:F6:4E:61:C1:AF:F4:63:12:EB:7A:61:AA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73745b45-c65b-482b-9e7a-25a90d279147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:31:c3:c5:68:5e:a3:ba:3b:ac:99:06:04:69:ea:8b:23:6f:
         91:e3:fc:32:15:0f:e5:a3:17:c6:20:06:21:85:e0:30:9f:d7:
         da:4d:b5:0a:64:be:15:f5:08:a4:12:a7:96:ce:ea:b3:90:36:
         14:1d:47:51:a6:2a:95:a5:72:3c:4d:ef:73:44:e0:e0:61:c5:
         19:ee:1a:5e:53:c4:41:18:f0:8f:6f:9f:e6:b1:2b:f0:18:af:
         0d:22:d3:5f:13:65:cf:8d:c8:6c:3e:f2:9b:a1:5e:89:ff:47:
         17:58:26:e2:e7:e0:90:1c:8e:9c:83:12:b1:79:b5:f4:cc:1d:
         a0:c3:b6:84:c4:1d:69:12:3c:65:9b:06:08:56:b4:0d:10:36:
         80:98:da:be:2c:ca:a7:41:d6:ac:95:d9:75:11:ff:a4:3d:d5:
         f8:99:a0:11:44:10:16:3a:97:65:84:f1:4e:01:68:f9:f6:d5:
         da:2c:4e:d5:24:bf:ae:79:61:4a:82:19:a7:56:df:00:e2:06:
         ba:54:c3:ed:e5:c6:ac:81:b6:48:dd:8f:14:30:24:b7:a3:0a:
         b9:d9:c2:74:fc:71:0b:f2:95:36:80:5f:1e:50:47:1d:8c:f4:
         c9:b8:99:4f:50:05:89:47:c7:2b:ac:7c:99:05:ab:db:07:c4:
         17:f5:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----