Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86433272-8233-4231-82ff-92246d0a41a5.roa
File:                     86433272-8233-4231-82ff-92246d0a41a5.roa (raw, json)
Hash identifier:          sXDLViHcwHAhNIK9JYDXBGuMQIiAbnR+ceTluRKhbOg=
Subject key identifier:   4E:07:2C:62:A6:40:40:20:E5:2D:A2:C2:57:CE:0B:39:84:AE:86:65
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7AB9FA84812A6C67134048706266F1A23F41CC8D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86433272-8233-4231-82ff-92246d0a41a5.roa
Signing time:             Fri 26 Sep 2025 18:51:35 +0000
ROA not before:           Fri 26 Sep 2025 18:51:35 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:40c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b9:fa:84:81:2a:6c:67:13:40:48:70:62:66:f1:a2:3f:41:cc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 18:51:35 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=f40d6a2e1c1752666852ab368145d069c46914ffec385df2861eaf630189bca2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:99:53:1d:31:70:04:b4:49:c3:9d:89:5a:
                    1d:da:17:a6:7f:00:97:68:39:9a:11:d6:43:f5:7a:
                    3b:df:dd:82:dc:05:d5:2e:9b:35:b7:d8:ab:8c:fe:
                    9a:a2:7e:5f:5d:71:5f:13:18:a5:20:42:c4:9e:1e:
                    d8:c2:09:60:a2:82:ae:35:84:3f:e2:5d:6c:28:42:
                    2a:39:b9:0b:f6:4d:ba:05:a8:6a:4d:01:02:b6:af:
                    de:b0:e4:12:0f:fc:70:69:e2:26:d1:3a:39:4b:87:
                    a6:6a:8a:f4:76:48:6d:c0:78:5d:8f:06:d4:ec:21:
                    e8:a2:19:bd:67:47:5f:f9:f3:50:e7:42:a4:91:17:
                    91:be:8b:85:60:54:c3:6c:cd:27:f4:d5:6d:93:8d:
                    d4:15:ba:e4:b1:86:58:6b:40:78:3d:23:7e:a3:ad:
                    2b:9a:6e:13:1e:5f:7e:43:76:46:88:58:3e:b2:d2:
                    39:52:01:be:39:32:c8:7d:11:49:97:9d:ac:86:74:
                    a3:9e:e7:50:b9:8a:ca:c0:eb:51:84:28:91:21:8a:
                    dc:12:5e:ef:72:f8:3e:e2:a6:e3:e6:bd:a0:27:92:
                    27:39:bb:cd:0c:87:04:74:65:44:fd:4e:5f:63:1f:
                    62:25:24:ec:30:f4:31:5b:7a:aa:62:54:5a:36:1b:
                    28:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:07:2C:62:A6:40:40:20:E5:2D:A2:C2:57:CE:0B:39:84:AE:86:65
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86433272-8233-4231-82ff-92246d0a41a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:95:c4:17:57:c5:30:d2:ee:9a:55:15:d1:f4:6d:5e:18:3f:
         74:cb:58:1a:fa:bc:60:58:e9:22:6f:a4:84:f8:b8:e8:58:3a:
         cf:50:22:9e:b1:74:71:8e:c4:5c:91:69:1e:0b:20:32:e9:48:
         38:29:c4:e8:55:78:13:52:9a:ad:b2:0b:a5:bd:f8:98:b8:05:
         b9:c8:95:16:21:eb:ab:5a:7c:59:c7:18:45:5f:cb:e9:62:d8:
         c6:85:9f:22:ab:b5:58:67:48:41:14:a4:4a:f6:02:bc:cf:c5:
         5a:82:7a:f2:19:c0:03:0c:6f:a3:21:ce:d2:43:b7:71:71:2e:
         8d:c4:13:db:62:f3:ef:9b:1f:8f:c6:ad:9a:e6:19:d3:ae:00:
         83:03:f0:3d:fc:8c:ad:84:f4:a8:3d:47:ed:81:00:73:17:9f:
         0f:a3:4e:7c:c0:44:de:61:18:e6:ff:e6:41:d4:32:98:ef:86:
         da:c2:81:09:43:27:09:d0:fd:a3:8e:ea:eb:c7:9b:8d:03:a0:
         94:5b:10:09:11:f0:14:25:80:59:fd:92:27:50:34:40:9e:c7:
         59:4e:50:7a:16:cf:4a:84:d3:27:60:06:05:b9:18:12:5a:d7:
         cc:06:8f:41:73:aa:db:9f:33:37:56:74:17:83:ab:8c:2c:db:
         89:2c:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----