Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77bc679b-5199-43c2-8199-be5c04a6c0d9.roa
File:                     77bc679b-5199-43c2-8199-be5c04a6c0d9.roa (raw, json)
Hash identifier:          PR1LOydJXITLYI16WCvI9H2Ty/RcgwVs4W+nW9OLoco=
Subject key identifier:   92:9B:B5:08:5C:0D:F4:9F:9F:01:82:31:CF:FE:7E:3F:9D:D7:98:38
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3B8BA6CCF78BCBBC47DDFDB4C75CC123D2024418
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77bc679b-5199-43c2-8199-be5c04a6c0d9.roa
Signing time:             Fri 26 Sep 2025 19:11:36 +0000
ROA not before:           Fri 26 Sep 2025 19:11:36 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:c040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8b:a6:cc:f7:8b:cb:bc:47:dd:fd:b4:c7:5c:c1:23:d2:02:44:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:11:36 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=80de1d8b0513b554a9a36de6e96591c54ae081a741410fae2027f20417257686, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:6d:86:ce:7d:3b:a7:de:07:07:5a:fc:b7:
                    54:32:78:03:b1:08:f1:d7:d3:6b:12:eb:74:e2:d2:
                    35:44:f4:2d:d6:ca:c3:da:87:ca:9f:30:ad:6b:f1:
                    f7:9c:78:ca:2f:04:82:6f:98:15:6b:cd:28:71:b6:
                    36:86:e4:77:d8:de:53:d0:a0:6c:52:aa:b6:05:52:
                    df:65:15:47:bd:1b:78:44:3c:05:78:4d:d5:2a:40:
                    d3:96:14:0a:99:bd:83:8f:88:a8:88:6d:ac:a5:e8:
                    62:07:ed:65:41:f5:16:f4:38:86:c5:2b:31:28:99:
                    e1:72:11:43:85:97:36:c5:c0:c6:a7:b8:7c:bf:52:
                    77:65:1c:9a:19:04:d5:f2:fe:e7:97:af:27:1a:92:
                    f9:d2:96:a8:84:37:89:d3:dd:61:ae:e4:68:30:72:
                    9c:a7:55:6c:44:a7:49:7e:50:c7:c5:40:5a:74:39:
                    4b:c6:20:96:94:2c:db:36:46:46:5f:5d:d7:0d:42:
                    a3:b9:81:c7:a3:12:b4:56:2b:32:08:2e:6e:6b:07:
                    83:85:b7:b4:13:ce:87:0b:d1:9c:7b:f6:3f:37:e4:
                    70:6d:b6:2a:40:06:7a:a8:9d:2a:29:55:e9:17:15:
                    58:ca:ea:34:5e:33:68:c0:40:25:bb:ca:01:42:ef:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9B:B5:08:5C:0D:F4:9F:9F:01:82:31:CF:FE:7E:3F:9D:D7:98:38
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77bc679b-5199-43c2-8199-be5c04a6c0d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:c040::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:0e:ad:9e:82:ba:09:e7:f2:66:eb:f5:3c:38:70:b0:36:15:
         84:a5:7c:cb:44:54:a5:3d:11:bd:45:80:60:de:d6:4f:7b:b3:
         4c:0e:3f:ca:6f:bf:d1:29:14:75:1f:fc:21:ed:4d:6f:77:00:
         47:87:49:67:98:bf:8e:6d:ed:11:a6:c2:f3:e2:2a:20:e0:0d:
         51:b8:a0:9b:ce:9b:f4:d7:19:4e:ba:c1:9f:8f:ff:3b:76:d6:
         5e:d1:12:bc:9c:8a:11:4b:85:70:49:ec:61:7a:3c:4b:e3:20:
         0b:b5:9e:c8:76:d3:dd:8d:ce:64:62:db:0e:64:26:4b:4d:70:
         cb:70:75:f4:4e:e4:b7:e3:19:3d:ff:81:bf:3b:f4:cb:2f:93:
         e7:06:f9:e3:50:63:96:91:c1:88:66:d3:f3:3d:bb:7a:30:80:
         df:90:4c:a3:99:eb:a9:00:a9:dd:a4:15:b1:9a:6d:7e:24:f8:
         a8:a4:2f:68:aa:e2:ef:7a:2c:ec:bd:4b:63:3c:70:28:1f:54:
         cb:41:f2:2d:dd:3b:11:07:62:ba:24:d8:66:4f:62:a2:17:82:
         4d:1a:77:7f:61:cc:1c:96:5f:cf:5f:57:46:da:68:1d:b5:7c:
         70:b3:e6:ee:f5:96:d5:8a:74:5e:53:97:33:cc:96:bc:0a:61:
         7f:c2:40:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----