Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
File:                     7af2d4a0-df22-4933-b605-1ecbbd66f982.roa (raw, json)
Hash identifier:          Mmo6CpJGi9fVrPeHFiLpnxltTahEIkSmtyVrDXjIjRA=
Subject key identifier:   0A:9E:E5:DD:8F:11:D0:EF:F1:82:AB:1C:85:34:83:7B:9A:B9:0C:EC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       06F9CED33E027480031F8BFD286DDD4BFDE844B9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
Signing time:             Fri 26 Sep 2025 20:01:25 +0000
ROA not before:           Fri 26 Sep 2025 20:01:25 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d015:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f9:ce:d3:3e:02:74:80:03:1f:8b:fd:28:6d:dd:4b:fd:e8:44:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 20:01:25 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=e6b1f9867234fe77e19acf6ce465a9fea85c80a485b8f7c3cd7003565339c6eb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:45:1e:00:34:ab:3b:00:78:8d:67:9b:45:e6:
                    50:3b:4e:0b:97:76:70:ca:d1:34:d3:e6:d5:20:50:
                    3d:7d:9a:ef:df:c1:80:42:36:37:a4:31:1c:af:6e:
                    00:49:21:a2:77:7c:56:26:d3:35:c0:7b:2f:05:0c:
                    01:3d:64:e6:79:c3:41:68:44:fa:b6:b4:d1:bf:c6:
                    ee:ff:97:f6:8c:91:28:4c:c9:ad:68:f4:74:aa:33:
                    d3:b9:2f:00:1f:99:f8:e0:bb:42:37:ef:a9:72:16:
                    df:2f:30:da:54:85:70:4e:c2:48:36:5c:f9:8d:88:
                    59:2f:78:3c:d3:31:21:b6:95:63:5b:3e:0d:a4:69:
                    1b:09:4b:01:52:e1:95:38:43:b4:c5:5e:4b:ea:69:
                    77:6d:5f:36:e9:9a:a3:83:9f:e9:7f:94:ce:19:3b:
                    04:a6:52:06:48:0a:e2:c4:19:34:f9:1f:8b:69:51:
                    b1:7f:a9:0c:6a:24:a1:2b:bf:79:11:c9:54:1b:a5:
                    8a:44:06:f5:a9:4d:e6:14:4b:0a:d3:16:85:26:1b:
                    96:c3:b4:7c:80:df:0b:5e:b4:b0:00:3b:2d:c0:51:
                    74:7a:b7:a0:d9:5d:b0:a5:1c:ab:66:a1:6e:35:c7:
                    53:51:d3:9c:84:e5:bf:d4:1c:e9:68:96:34:38:96:
                    f3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9E:E5:DD:8F:11:D0:EF:F1:82:AB:1C:85:34:83:7B:9A:B9:0C:EC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d015:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:b9:c5:11:fd:e5:ee:d8:33:0d:cd:05:2a:17:c5:6e:04:
         d6:76:d5:de:d0:94:96:46:3a:c4:cc:73:47:18:b2:a4:ca:91:
         f6:33:0b:c4:67:af:48:e9:89:dd:cb:12:c8:a6:c6:25:86:78:
         76:f3:5a:95:56:f1:c6:4b:36:db:44:2b:c8:23:56:1d:2e:2d:
         c8:2d:f2:f1:eb:a9:b4:ef:ef:c4:bf:18:ea:ca:7b:97:d5:25:
         26:00:02:01:56:cd:13:d6:fa:39:32:fe:b7:2b:76:b8:ac:05:
         1e:eb:89:e4:0d:24:23:cf:a5:8d:de:2b:19:55:41:af:70:a4:
         55:b7:e9:b7:d9:18:67:64:87:39:f0:b7:7d:f0:d6:c6:fc:b7:
         cc:0d:44:2e:5e:4a:07:0b:82:f7:4a:d5:6c:a0:19:16:50:99:
         34:ef:9f:35:dc:38:64:c4:63:d7:ed:a5:e9:10:db:d9:d0:14:
         54:83:cb:73:5b:c5:ad:b5:22:f3:60:5f:ca:e2:09:f3:a2:92:
         ef:52:f9:34:a0:74:19:bc:70:91:db:29:f7:67:ea:47:07:1b:
         66:85:7f:5d:7a:b8:da:4b:17:ed:77:e6:dc:03:0c:cc:51:92:
         51:90:02:df:af:6f:82:e6:ac:19:00:ff:64:78:09:ae:4d:96:
         a2:49:82:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----