Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91473fe5-f129-48d9-8d23-63d62cec663a.roa
File:                     91473fe5-f129-48d9-8d23-63d62cec663a.roa (raw, json)
Hash identifier:          7xyaZ4UWPV2K5f9pNzBgziNo+NmC6swZz4HpSR0O9uM=
Subject key identifier:   C1:4D:5A:74:72:19:9E:99:25:48:49:90:74:73:E7:BF:29:68:07:5A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0B550CB9A9B7F6AEAAF2BBCD61B87B376CDD93D5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91473fe5-f129-48d9-8d23-63d62cec663a.roa
Signing time:             Sun 19 Oct 2025 23:50:06 +0000
ROA not before:           Sun 19 Oct 2025 23:50:06 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d038:840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:55:0c:b9:a9:b7:f6:ae:aa:f2:bb:cd:61:b8:7b:37:6c:dd:93:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 19 23:50:06 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=18b82e21ebb345880b8746b113d0d659636805fe2109cd0021f406526bf893cf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:9c:3d:95:1f:4b:d2:41:ee:58:dc:f2:10:
                    f9:cd:8a:5b:9e:c0:4e:db:2d:91:2a:e9:6e:5d:3a:
                    15:01:46:4c:78:db:40:6f:38:38:e7:0f:97:d9:b7:
                    06:c1:15:f7:ee:54:07:7e:a5:de:fc:df:ef:36:0a:
                    06:a8:d8:1f:9a:e4:50:36:1b:84:92:a1:76:60:3f:
                    4e:3c:83:59:e1:dc:19:ea:41:9c:07:c0:69:a5:ec:
                    07:33:35:23:59:f2:82:e6:98:00:25:c1:26:7a:e2:
                    ff:8a:14:c4:73:2a:c6:90:72:e8:11:5e:31:ff:c4:
                    8e:4f:42:6f:18:32:58:64:73:1d:81:39:69:59:85:
                    03:1c:48:90:df:db:81:f1:40:f7:c4:fd:a0:dd:66:
                    88:7f:b3:0a:24:24:5c:8a:b5:2b:ba:5b:33:57:a2:
                    1d:42:d0:9e:d5:d2:08:16:3b:84:15:c9:14:72:dc:
                    b2:35:78:5c:37:82:6d:82:5a:96:81:8c:4c:f2:f5:
                    c7:84:87:bc:c8:9b:56:a5:e4:a7:a6:1c:b3:df:d4:
                    b9:22:8e:2d:15:89:b5:7a:86:3b:1d:77:24:92:37:
                    02:39:0d:33:29:58:cf:37:89:07:db:97:e6:97:f5:
                    d1:56:37:ec:b9:0d:0c:c5:c4:bd:71:37:f2:62:78:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4D:5A:74:72:19:9E:99:25:48:49:90:74:73:E7:BF:29:68:07:5A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91473fe5-f129-48d9-8d23-63d62cec663a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d038:840::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:6a:46:21:9f:2d:49:97:ac:f6:f9:40:c8:b8:5b:3b:8d:3b:
         79:3b:cf:9f:34:00:1f:46:46:d5:b1:51:41:2a:64:15:2e:14:
         96:f8:9a:6d:b3:5f:0c:e8:16:5b:db:90:c8:19:4b:ca:80:84:
         f6:4b:3a:88:e8:af:6c:0f:57:81:07:4a:d5:95:ec:a2:f7:10:
         06:c0:61:e8:31:b9:1e:ab:be:17:9e:39:d2:58:e9:21:89:31:
         b8:eb:65:e3:b9:1b:df:38:18:4e:ee:d2:cf:69:aa:0c:71:23:
         99:89:d9:8e:24:0d:05:11:b8:22:1b:2a:93:c8:ab:18:5c:2f:
         28:df:07:32:58:d3:31:a7:24:cc:be:79:7e:df:93:d6:1d:92:
         c4:9e:28:47:ef:b5:79:f1:4e:50:5a:66:51:6a:e4:af:99:5e:
         d1:b1:40:be:c6:60:42:70:3c:7e:e0:2c:07:13:e1:df:32:e0:
         04:58:fc:4c:2b:4f:73:30:b3:50:5e:9d:1e:c4:1a:11:66:6e:
         7e:af:b5:7d:d3:60:19:b8:37:c7:e7:95:e4:04:f4:f8:63:19:
         c4:11:10:91:83:e7:34:f9:f8:4d:04:d6:80:e0:de:37:8d:eb:
         7f:55:33:c0:e9:c9:d7:c8:12:24:c5:2b:e1:fe:ba:4e:4a:fa:
         b7:93:82:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----