Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ab64f0c-c76e-4d78-bdcc-28b3e3d8a5cc.roa
File:                     7ab64f0c-c76e-4d78-bdcc-28b3e3d8a5cc.roa (raw, json)
Hash identifier:          uIvi92Lp2e84CqSqPsY209I4YhOMRV0KecftYaC2z2U=
Subject key identifier:   EF:25:C3:60:7A:DF:50:C3:0B:BF:20:CB:88:17:E0:E6:78:D4:D8:76
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       48009BBF437DCFBCAAD55B3875AE31E65A919CE5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ab64f0c-c76e-4d78-bdcc-28b3e3d8a5cc.roa
Signing time:             Fri 25 Apr 2025 19:31:36 +0000
ROA not before:           Fri 25 Apr 2025 19:31:36 +0000
ROA not after:            Fri 30 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:b000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:00:9b:bf:43:7d:cf:bc:aa:d5:5b:38:75:ae:31:e6:5a:91:9c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Apr 25 19:31:36 2025 GMT
            Not After : May 30 23:59:59 2025 GMT
        Subject: serialNumber=ef9abff13c528c92438972a094cb003fd0fd32673d9e38533463b39a45d1ee6c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:59:54:59:e5:92:7b:b3:4a:71:6f:a0:5c:9a:
                    70:d2:82:de:14:48:8c:b0:58:f9:44:32:cd:b6:d0:
                    e8:cb:72:ef:e5:b6:0b:27:57:8f:d4:ac:7c:c0:39:
                    22:4a:fb:b5:fc:e7:c1:1d:20:f9:9f:d5:93:48:9d:
                    1c:22:18:8d:d4:82:48:3a:40:25:bf:74:46:af:58:
                    02:56:91:75:67:20:cf:a5:5e:33:76:c4:f2:c6:8f:
                    3d:39:af:bb:2a:bf:6c:24:d2:1b:3c:aa:aa:a6:13:
                    3e:be:89:d0:c9:c1:4c:af:36:08:cc:96:15:97:7e:
                    8b:42:7f:59:d1:20:48:50:58:17:3c:b4:b9:02:97:
                    83:8a:dc:19:92:b6:b1:73:99:0e:8c:39:74:ca:3d:
                    ed:b3:22:5b:5a:6c:d2:1a:0a:54:0a:60:d5:e0:07:
                    02:b1:fd:74:75:89:a5:f1:e6:ad:5b:8b:05:9d:ec:
                    45:7e:ec:07:b3:c1:4f:e9:16:8b:b0:f8:9c:38:d2:
                    69:a9:65:3e:8b:49:43:e0:82:72:c2:8b:ce:4a:3f:
                    3d:a6:ee:9a:99:3a:fe:a0:5b:02:cc:88:cf:a2:cb:
                    8a:3d:d9:dd:de:ea:87:09:4d:a2:af:4d:f2:a9:ab:
                    80:30:87:58:f0:09:ff:34:ea:a8:7c:bc:a2:5d:47:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:25:C3:60:7A:DF:50:C3:0B:BF:20:CB:88:17:E0:E6:78:D4:D8:76
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ab64f0c-c76e-4d78-bdcc-28b3e3d8a5cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:4e:69:bb:65:d6:5f:84:de:2a:08:bd:62:43:13:d2:83:45:
         c9:7d:87:00:46:bf:af:81:82:d1:11:e5:6a:55:17:61:00:d7:
         9e:1e:9b:28:53:b5:2a:0f:55:c2:8c:86:fb:f9:48:e1:bd:c9:
         bc:89:75:89:8c:88:6d:8f:7d:44:d0:e7:32:b8:af:d3:fa:92:
         5f:85:54:ad:ae:55:10:95:40:23:83:45:91:ab:5a:ff:41:be:
         fa:2c:1b:34:6d:b6:cc:84:ac:e5:9c:1d:f9:a6:71:5c:6d:54:
         6a:9e:de:2a:52:c2:76:17:8b:04:d3:18:b0:01:6c:e8:04:79:
         7b:b2:bb:4f:ad:4a:b0:bf:a0:ae:e1:fa:e1:41:ab:51:cf:05:
         5e:52:31:f5:79:97:e2:df:fc:17:b5:76:da:34:8c:26:07:e8:
         ef:b6:c7:b3:2b:f3:fe:9d:ac:d4:0a:5a:71:1c:30:5c:9e:73:
         85:dc:92:85:78:aa:3a:fb:0a:56:f4:3d:9b:0c:f6:41:80:20:
         82:5b:73:87:aa:e8:2d:f6:13:fb:1b:61:40:0c:1c:19:af:7f:
         24:e0:8c:6a:11:2c:b4:e6:89:4f:6d:84:b7:e5:de:62:2c:8c:
         55:ef:f5:59:00:b8:39:50:5d:09:f1:42:65:17:4d:2d:d7:45:
         c2:f1:ed:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----