Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
File:                     a33fb27e-b368-403f-89e6-08d05302535f.roa (raw, json)
Hash identifier:          pOC83QplBz+9O/IQm/GgDhO9n85NCVwN3BHn3INYOCM=
Subject key identifier:   F6:31:B6:0D:DA:C6:AF:8E:62:A0:CA:1B:2F:91:F8:12:4D:87:89:6E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       74BEC1AB2990086F7E8BA0B138926069E3616BCE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
Signing time:             Fri 26 Sep 2025 19:11:06 +0000
ROA not before:           Fri 26 Sep 2025 19:11:06 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:40e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:be:c1:ab:29:90:08:6f:7e:8b:a0:b1:38:92:60:69:e3:61:6b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:11:06 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=95ef5a97ff6c934488e03fb09849b97b628c839d2c5dafe0aada2ccd482ce30d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:04:f2:bb:bf:ca:0f:e2:39:12:1b:b5:6e:
                    bf:2f:58:f4:5b:12:df:9f:95:e3:d6:f0:6f:68:aa:
                    fb:92:15:47:47:c2:b7:85:98:94:53:f1:d3:7a:93:
                    62:ec:de:53:a8:d0:e5:f0:65:5c:d8:91:8b:4c:ce:
                    31:c7:f6:4f:7f:07:1d:67:85:8c:fb:ce:1a:aa:dd:
                    b1:43:30:a7:68:d5:81:e6:e1:06:cc:4d:73:34:ef:
                    0b:2e:2b:7f:15:47:88:a5:50:78:3a:cf:54:df:7f:
                    1e:4e:7f:a9:35:ef:ea:51:56:a3:a8:5e:e1:80:fc:
                    4b:e6:40:96:b8:cd:09:34:c7:12:14:13:61:94:7c:
                    ca:4e:39:b1:1b:c5:68:f7:16:b1:ee:d6:1c:ae:21:
                    09:b1:01:9f:8d:25:bc:6c:61:ca:01:d0:2b:f5:1e:
                    3d:0c:ff:ae:0c:f0:9a:a2:41:b0:7a:58:51:09:c3:
                    ee:01:8a:d1:92:3d:70:b4:d1:35:31:da:f5:98:d7:
                    11:ba:3a:80:e6:a5:ba:aa:65:99:6e:0c:20:3e:a1:
                    f9:1a:dd:39:74:2e:ee:5e:25:fe:94:41:43:bd:76:
                    f1:46:f6:e3:ed:f3:5a:ce:71:cb:82:c3:fa:6a:f6:
                    ff:23:43:fa:f3:0e:eb:5d:5d:58:c2:31:54:f2:ec:
                    65:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:31:B6:0D:DA:C6:AF:8E:62:A0:CA:1B:2F:91:F8:12:4D:87:89:6E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:40e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:6f:c2:92:7a:ea:b3:8e:03:54:08:4f:4c:5e:a4:d8:9f:3d:
         2e:a4:46:4d:d5:0f:ce:11:0f:1b:b2:98:41:ed:39:f2:57:f7:
         09:f8:1b:d9:a9:c0:0b:78:d0:02:6c:b1:38:14:a4:4c:34:da:
         66:16:8b:e0:c0:14:a7:d0:84:e0:41:fd:8f:4f:88:2e:f3:00:
         c5:4b:4e:74:3e:1f:9f:d3:8f:45:82:de:ec:1c:23:9a:fc:85:
         cf:83:12:65:d4:79:7d:96:a1:3e:2b:b6:73:a3:b8:51:06:19:
         dd:23:1d:4f:cb:8d:f7:d9:c7:50:f5:b1:59:8b:78:d4:5e:84:
         73:23:dd:d9:61:5f:f4:86:fc:27:62:dd:1a:f5:4c:e9:58:4c:
         f6:51:6d:f0:60:2e:82:fa:c6:23:9d:c9:1c:75:c3:64:37:4e:
         fa:68:fb:7c:51:a0:5e:cb:06:31:30:a4:4d:59:7b:ce:fb:67:
         82:39:8d:f2:af:5b:33:60:f7:f3:d8:c1:1e:38:9a:94:f5:4f:
         32:9c:61:49:6e:de:e0:df:63:b8:09:db:1f:96:49:1f:39:6c:
         42:a0:89:ba:65:5a:31:7e:2a:f5:2e:8b:cc:cb:11:c1:9d:f8:
         59:46:10:93:b1:f9:85:b3:78:3b:f6:31:48:7a:70:91:49:be:
         0f:c0:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----