Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
File:                     9430d5db-5a09-4461-b80a-b9d755d346a9.roa (raw, json)
Hash identifier:          iZ4YBcsygoEhB0O91Z4n8whjRpihHC0sYd7pAE8mzow=
Subject key identifier:   CD:7E:93:DF:0F:14:E4:58:3F:AC:CC:C8:12:CB:9B:D0:7D:73:EB:B4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5D9C289C11C37C5B42BCF71AA3DF66361A682854
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
Signing time:             Fri 26 Sep 2025 20:00:04 +0000
ROA not before:           Fri 26 Sep 2025 20:00:04 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01a::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9c:28:9c:11:c3:7c:5b:42:bc:f7:1a:a3:df:66:36:1a:68:28:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 20:00:04 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=43e5f16df382a5620214eaa47a6a98eff61fea4ccae637ad75942e7376ba0432, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:e0:cb:32:fc:82:6d:4a:a9:ed:52:e2:52:
                    99:1a:9d:e3:15:9d:10:71:a8:6c:42:43:e4:cc:94:
                    f4:e3:9c:e2:70:a7:c1:29:7f:37:1b:ea:bd:65:2b:
                    fa:ef:3c:81:7c:65:eb:ec:fd:92:e4:54:d5:84:03:
                    86:4c:fe:f0:c7:9f:ae:fe:f0:71:d8:84:a7:1d:28:
                    c1:94:05:74:9f:39:58:a3:82:f8:c6:ca:e3:44:50:
                    68:0a:b6:2d:91:20:d6:28:aa:be:06:50:42:46:34:
                    d3:fa:75:85:74:6f:2d:db:08:0f:30:d2:dc:84:fa:
                    12:1f:54:a6:34:37:5f:ab:12:62:5f:1c:3f:96:17:
                    e6:da:cd:f5:d2:40:03:85:7a:b2:87:33:29:c7:40:
                    5c:14:ab:1f:43:52:0f:22:52:c3:ec:3f:54:aa:de:
                    c5:9b:fb:ba:c4:f8:d5:59:c5:1a:d7:d9:0f:a1:45:
                    7c:16:68:5c:aa:dc:35:18:41:1c:34:87:94:e1:5e:
                    88:2a:88:99:af:14:34:72:e9:d0:33:3f:c3:6a:fd:
                    65:22:8b:40:91:2e:70:f7:2b:80:ba:5f:41:5c:18:
                    93:a2:03:5b:7d:2f:0c:d4:75:58:ae:3d:1a:a6:6c:
                    b4:57:0d:a5:8a:68:31:31:39:b6:ab:5f:5d:51:a7:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7E:93:DF:0F:14:E4:58:3F:AC:CC:C8:12:CB:9B:D0:7D:73:EB:B4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01a::/38

    Signature Algorithm: sha256WithRSAEncryption
         3a:0b:2e:0a:69:84:6f:28:47:48:4e:15:ec:61:af:1c:e5:77:
         cc:14:c8:2d:e6:1a:12:0d:25:8e:3a:83:83:cd:42:c9:50:1b:
         67:8a:1d:b8:f5:6d:6e:b7:f6:7d:da:f4:8a:b3:31:89:81:cf:
         e4:63:b1:42:d3:91:f2:ed:b3:a0:37:d1:ac:82:c0:a2:59:6b:
         2d:16:a0:a8:ac:50:6f:aa:f4:52:42:19:09:5c:9b:fe:e3:63:
         f0:95:72:dd:06:fe:66:a8:ad:5b:3f:98:5e:62:f0:a2:9b:ee:
         62:0d:a3:df:9d:34:fd:f9:f5:87:33:1d:39:49:a3:67:8e:6c:
         38:92:ac:f7:25:6e:23:31:98:57:3f:86:53:00:e7:d3:86:77:
         19:86:52:a0:fa:df:09:b6:70:75:82:1d:5e:37:0b:d4:14:18:
         58:58:26:77:cc:62:43:b6:39:3c:14:af:00:99:83:0f:c6:61:
         4a:ce:62:86:af:1c:28:3f:36:43:e6:8f:86:91:4a:32:22:c8:
         5e:93:fe:3c:5a:1f:36:c6:ad:d1:d7:08:34:d3:b3:07:b5:55:
         87:0b:8d:ac:bb:d6:58:e1:0e:6a:fe:fe:a2:80:f7:ed:30:5f:
         50:dc:74:5b:c1:64:17:1b:5c:10:84:a5:12:ef:8f:21:11:9a:
         05:51:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----