Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a84526d7-5029-439b-9e16-14cd601eb5a1.roa
File:                     a84526d7-5029-439b-9e16-14cd601eb5a1.roa (raw, json)
Hash identifier:          uRbNBYsJiDBTrip0pGTjLHF++/jCZz2zpKouAU/OG4Q=
Subject key identifier:   8F:DE:AC:83:CD:41:7C:01:B9:2C:B0:30:F9:44:37:58:0D:F5:B9:56
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       681EF352550E56E9690C5A995B8FFABC11D4B1A8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a84526d7-5029-439b-9e16-14cd601eb5a1.roa
Signing time:             Fri 26 Sep 2025 19:11:02 +0000
ROA not before:           Fri 26 Sep 2025 19:11:02 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:6080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1e:f3:52:55:0e:56:e9:69:0c:5a:99:5b:8f:fa:bc:11:d4:b1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:11:02 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=7600650af8b1a3f0163f96696bfd1a71733c85692072e4857fc86403287cb164, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:d2:d4:99:5d:fe:95:16:a6:2a:e3:e6:62:
                    49:8b:18:12:99:24:5d:1f:b0:e4:de:76:bb:ba:93:
                    4b:10:71:2c:3e:5b:73:84:7e:f5:22:fb:83:d8:19:
                    97:3a:bd:79:62:72:69:1a:15:e1:14:18:ba:05:7c:
                    34:27:20:48:37:13:88:2a:b2:ed:de:13:a3:45:27:
                    4d:2b:31:de:45:06:bf:33:53:9d:b6:97:9b:51:47:
                    62:b4:2e:ff:b4:0f:a6:ac:5c:dc:f1:c4:30:8c:cd:
                    c6:72:47:3f:04:18:1c:40:ea:5f:1b:e3:3f:31:b3:
                    5a:1f:b4:16:ad:0b:56:95:95:65:d6:7a:2a:f7:8b:
                    fb:8e:81:b3:6a:d5:4a:9c:6e:71:8b:50:f7:ad:b3:
                    e8:e4:09:21:ac:05:1d:0e:dd:02:30:3c:67:a8:6e:
                    2d:a9:3e:56:92:15:19:de:25:cb:6f:12:db:e2:59:
                    02:ec:5e:6a:7a:51:13:7d:51:c0:ff:ca:f7:36:dc:
                    63:69:a4:d8:03:9a:ff:d1:45:0d:e2:62:7c:ed:88:
                    35:13:f9:14:95:5e:98:f5:c4:f9:c0:16:02:b9:ad:
                    36:59:2b:f7:31:90:d6:73:43:c1:3f:8b:c5:db:33:
                    b0:91:f4:f4:b5:ac:48:8e:4a:d3:1c:c1:6a:bd:d2:
                    b9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DE:AC:83:CD:41:7C:01:B9:2C:B0:30:F9:44:37:58:0D:F5:B9:56
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a84526d7-5029-439b-9e16-14cd601eb5a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:84:f3:f4:04:20:02:b3:18:18:61:cb:ef:03:0e:2c:c1:63:
         1c:04:a5:a1:5f:80:3c:d8:cd:5f:de:dd:65:dd:c0:8a:af:11:
         d1:48:57:7b:7c:7a:cd:99:ad:ab:f0:3e:35:8b:4d:83:a8:d1:
         cf:d6:e9:be:f7:e2:34:b3:6d:f0:be:ba:81:d2:5a:d4:26:6a:
         63:5f:8f:26:4b:d2:e4:d1:19:0a:5f:c2:37:28:3e:0e:68:bf:
         35:f8:25:f8:64:78:9e:36:5f:f0:d9:fe:60:4a:83:ae:ed:5b:
         ac:80:63:ba:ad:2b:28:ef:e2:e7:fc:24:69:29:17:15:75:f5:
         d9:c1:59:58:88:41:ef:86:d2:d2:00:36:46:92:b6:3a:16:99:
         1a:95:79:85:86:0c:29:29:73:ce:1d:de:6b:4d:1d:36:b7:27:
         cd:f8:c7:9a:d0:a0:b0:77:40:67:6f:54:9d:ac:b0:0e:79:6a:
         f3:27:09:29:f5:7f:16:3b:94:84:69:6c:5d:9d:84:10:b9:c3:
         d4:f6:74:c2:f1:5e:15:df:97:f7:49:14:f6:ae:04:14:2e:b8:
         d1:92:01:c6:f3:51:7d:e1:42:21:c4:88:a9:ef:51:12:de:43:
         09:a2:e1:5e:f7:8c:1f:f6:cd:03:2e:e5:dd:07:f2:ca:a0:ff:
         58:b5:71:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----