Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa
File:                     975dfb4d-ef39-4371-9678-ff7909080d1e.roa (raw, json)
Hash identifier:          c63HaXN/nFInzJ6DUTTfOzsQQSkMTCcE5afXrRtmZ5I=
Subject key identifier:   18:BB:F0:B5:CE:E1:24:C4:FC:8D:68:64:F8:84:C6:CB:B7:01:19:3F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2771443D348CD49F05F3B6F8965248676E586173
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa
Signing time:             Fri 26 Sep 2025 18:42:09 +0000
ROA not before:           Fri 26 Sep 2025 18:42:09 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:b080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:71:44:3d:34:8c:d4:9f:05:f3:b6:f8:96:52:48:67:6e:58:61:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 18:42:09 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=8dce164269f10ea6e782434026ec5a5bfed5b911e618bd893b755e863e32671e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:66:a2:1f:b0:48:72:a2:88:dd:f6:92:9a:a8:
                    a1:80:f2:e0:53:71:0d:33:67:af:19:74:f1:9e:a1:
                    e3:31:27:3e:b8:70:f7:93:85:5c:87:99:c8:6f:1c:
                    22:ec:47:3c:d8:46:91:7a:d3:d9:48:d5:1b:27:00:
                    57:fc:b5:ab:4d:b3:2b:ac:3f:0c:ca:20:fb:a9:f5:
                    71:89:2d:74:2a:13:76:10:6d:57:ac:91:66:fa:4f:
                    97:02:98:63:7d:ef:0d:97:06:63:38:65:d2:db:10:
                    ee:cb:1c:c2:32:50:78:62:16:b2:ca:a5:36:73:3d:
                    5f:2c:35:ff:cc:86:13:94:60:65:d2:2a:75:44:b9:
                    f1:6b:a9:e2:a7:c7:ae:44:1f:b3:15:67:6e:28:4f:
                    89:75:49:fa:e4:54:f0:16:24:32:7d:7c:fa:01:6c:
                    be:d3:53:17:a4:06:bd:0e:6b:95:45:92:d8:40:fd:
                    0b:bc:40:46:bf:c3:c0:6b:69:76:a0:77:62:70:23:
                    34:76:4c:b5:15:fb:b9:cf:31:0b:64:66:75:9f:5f:
                    67:e8:29:c0:0e:03:b6:5e:6f:c9:15:e3:36:5f:db:
                    7a:cc:72:51:6b:07:9c:f8:77:ee:7d:3a:dd:e1:3c:
                    9d:76:47:de:4e:60:02:06:36:7f:bb:f0:29:78:d9:
                    64:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BB:F0:B5:CE:E1:24:C4:FC:8D:68:64:F8:84:C6:CB:B7:01:19:3F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:b080::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:15:4b:4d:92:85:eb:97:9d:d3:f7:be:a3:a0:e3:9b:29:
         68:18:da:94:34:fa:a4:d7:ac:d7:4c:82:8a:14:6b:60:f2:ea:
         6e:49:c7:a2:cf:ed:7c:52:4f:fc:2b:a5:7a:fb:d8:4f:85:51:
         d1:7f:78:6c:d5:15:a1:79:f3:1e:fb:87:93:7d:7c:be:83:4a:
         3d:6c:9a:6a:5b:12:0b:ca:4a:29:e8:d0:e6:65:e1:47:c1:00:
         ae:03:3a:d7:c4:e7:bd:fb:c1:2a:37:91:1e:6f:26:7b:69:eb:
         9e:bd:79:d7:b2:65:db:df:a5:78:57:30:22:88:9c:b6:81:1d:
         3b:79:7f:8a:8b:b6:04:67:dd:e5:be:d0:6a:32:65:cd:87:45:
         b2:f3:f6:1f:aa:c1:d0:b1:eb:0b:27:33:45:ce:68:b9:76:b3:
         03:0e:ae:df:4c:fc:8e:a4:f6:22:2e:cd:8c:5b:e2:c1:43:3b:
         b4:ae:2c:87:ac:4c:f3:85:6f:78:22:e5:c8:e2:04:c2:c0:2a:
         10:03:74:32:36:8b:4b:b0:c5:16:86:bc:44:ef:a9:31:0e:06:
         89:7d:c2:46:b9:5e:91:8a:1e:4c:0e:7d:61:79:42:82:90:66:
         d1:06:87:24:f7:c0:eb:3c:cc:b6:b4:38:eb:7d:8c:96:ca:f5:
         68:a7:c0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----