Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
File:                     b41919f2-4e07-4adf-8fc6-43f8940080d4.roa (raw, json)
Hash identifier:          xdOKOn/Q3N6MjuG12+wEl1krmqXkosgio/JrS8ea43c=
Subject key identifier:   EE:7F:3C:94:6C:66:9C:44:04:85:E1:57:F5:B1:0B:CC:63:07:16:79
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       38D9D1E5DEA20C7BA574709BD08C91550988D771
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
Signing time:             Mon 13 Oct 2025 17:55:54 +0000
ROA not before:           Mon 13 Oct 2025 17:55:54 +0000
ROA not after:            Mon 17 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d030:9000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d9:d1:e5:de:a2:0c:7b:a5:74:70:9b:d0:8c:91:55:09:88:d7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 13 17:55:54 2025 GMT
            Not After : Nov 17 23:59:59 2025 GMT
        Subject: serialNumber=668dda6c456a1fa54f332c1365713ded5318541ba7527cabaa15cc2c7fe05cbf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:8b:ca:39:cb:2b:fb:48:09:af:a0:c4:29:
                    c5:97:17:ac:cc:b6:46:aa:d6:d2:b7:d4:b8:28:11:
                    08:3c:84:9c:2a:84:3d:3c:c9:17:fd:85:df:fe:a5:
                    c9:20:68:74:da:f5:81:98:ff:71:21:17:eb:1c:4e:
                    d4:1f:21:d8:c4:45:57:8d:8d:19:c6:26:6a:13:44:
                    59:34:f2:88:c2:a1:99:2b:6a:c0:2f:84:47:cc:4d:
                    f5:0c:60:16:4d:33:e5:b7:66:95:32:8b:58:ef:1e:
                    d6:f4:9d:c8:6b:e0:15:2b:09:4c:8f:d3:04:f3:a7:
                    91:49:08:c4:9c:03:fd:b4:58:0d:31:86:5b:a0:92:
                    52:45:cb:ef:ab:6e:c6:ff:73:2a:ad:e9:8b:a3:fc:
                    ac:5e:b2:3a:71:55:fa:82:68:2f:9b:8d:80:39:f6:
                    02:10:88:84:87:84:3f:2a:00:5e:58:5b:ab:19:75:
                    fc:b9:a7:27:6b:32:c3:ee:b6:7e:71:24:00:39:bd:
                    92:9a:30:fb:18:ea:17:58:ee:6c:38:7f:1f:c9:b7:
                    47:3a:80:53:ff:2c:e4:7f:9f:36:eb:aa:52:3c:c3:
                    94:ee:4c:40:2e:0f:69:9b:44:db:07:8d:0c:93:8c:
                    1e:ed:28:b6:79:96:ae:53:ff:bc:d7:f9:20:e1:6a:
                    f0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7F:3C:94:6C:66:9C:44:04:85:E1:57:F5:B1:0B:CC:63:07:16:79
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d030:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:01:38:e2:90:03:03:0a:32:45:29:f4:83:09:5c:75:a1:9a:
         5e:af:db:02:ad:f1:65:04:2a:ad:f3:ed:ad:90:5e:5a:2e:29:
         86:8d:6a:08:3e:88:e7:02:84:a5:08:4e:d2:a1:b2:07:00:ed:
         92:14:74:4b:2c:c3:12:82:ca:f9:53:c4:9f:e3:d2:a5:42:1b:
         1d:85:df:3a:6e:ca:d5:2d:ed:bf:97:af:53:1e:76:06:18:9d:
         9b:33:fe:8e:e9:00:b3:c9:d2:cb:7d:c9:6e:f8:bf:1e:f2:3f:
         fc:c8:21:d7:5e:9f:a4:5b:89:b9:e2:44:61:5b:83:29:33:0a:
         6c:bf:e4:b7:44:1a:7c:3b:d0:7a:d7:ac:2d:1f:d0:0d:68:86:
         9d:8c:43:4c:53:79:9b:57:1b:00:31:ad:9e:74:22:cc:8e:75:
         fd:bb:75:9e:77:b6:32:ea:2b:89:60:39:a8:93:20:56:c8:60:
         04:d0:c1:9d:ca:a0:26:aa:d8:87:7e:d8:ea:f1:24:e3:55:ed:
         46:e3:32:2a:ea:5c:0f:5d:df:91:f2:a9:fe:73:0b:81:90:81:
         4e:d3:1b:0c:a2:9d:32:ae:60:ea:d3:eb:68:a1:6f:ad:79:67:
         87:4b:0a:0e:7d:eb:fa:de:28:e9:f0:b3:30:51:f5:13:65:90:
         1f:51:c6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----