Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4bc5ce4-db80-4527-b720-60a744036322.roa
File:                     b4bc5ce4-db80-4527-b720-60a744036322.roa (raw, json)
Hash identifier:          pBRfcw/znqcrBfH5oA9DQqwc7uSrY9Rw2YjSnuHDvg4=
Subject key identifier:   EC:10:DC:CE:74:3E:93:A6:27:FC:4B:1F:53:2D:83:EE:00:CD:56:A1
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1517F9CC15AC6B208EBEFF55708899B9A2DE5692
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4bc5ce4-db80-4527-b720-60a744036322.roa
Signing time:             Fri 26 Sep 2025 19:21:39 +0000
ROA not before:           Fri 26 Sep 2025 19:21:39 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07e:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:17:f9:cc:15:ac:6b:20:8e:be:ff:55:70:88:99:b9:a2:de:56:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:21:39 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=56a00c0497b63ae525c0aeef73417fbab7fe12901e477fe382e912c6e63063c0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:53:65:d1:46:b5:42:7f:61:ea:4d:9e:11:
                    26:2c:33:d3:15:e4:7e:4d:9c:9c:43:d0:20:42:69:
                    ae:c7:19:4f:f8:7e:7a:dc:82:49:51:02:fe:58:f6:
                    37:f4:a0:cd:97:de:0b:8e:2e:e6:c4:32:9d:a2:d3:
                    42:10:65:96:0b:6d:0a:16:ca:dc:b5:25:9d:52:33:
                    ef:8e:19:4d:e3:df:17:38:01:dc:3b:95:7d:0b:fe:
                    2b:67:9e:90:b8:c2:66:9f:b1:8e:99:b1:ea:87:38:
                    a5:c1:d4:66:a5:b2:6f:17:ff:c8:3f:2c:3a:e1:55:
                    14:30:28:cb:6c:1b:14:b6:91:a6:6c:69:06:3a:36:
                    93:94:e4:42:d5:ce:8e:df:da:29:0f:44:40:64:8f:
                    45:8a:d7:10:e2:31:69:8a:14:48:b4:4e:4d:3f:de:
                    cc:65:2f:ef:42:6c:fa:48:74:86:08:80:ea:74:53:
                    15:7d:51:46:ca:df:2d:0e:3e:42:20:d0:0b:8f:26:
                    d6:f5:dc:10:86:c9:1f:2f:14:62:da:03:f8:f5:f7:
                    3c:4d:09:dd:cf:25:2e:89:b6:2b:9f:6f:21:6b:a6:
                    9b:70:c2:11:45:8a:92:6e:c7:46:55:0b:f1:7c:f8:
                    a2:a3:3d:71:62:e4:64:9d:63:71:6c:fe:e0:b9:74:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:10:DC:CE:74:3E:93:A6:27:FC:4B:1F:53:2D:83:EE:00:CD:56:A1
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4bc5ce4-db80-4527-b720-60a744036322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07e:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:b6:07:9e:33:c2:73:12:a3:25:ef:67:bd:cd:3e:aa:d3:97:
         01:32:98:26:23:f0:a5:90:fa:b5:86:65:b7:50:ec:1e:3d:a3:
         9e:69:58:af:b2:32:7c:f6:bb:a1:3c:f4:20:02:8d:79:eb:29:
         75:16:4f:54:23:d5:f4:9b:d8:25:d2:eb:94:15:bd:d7:6b:4f:
         ae:c4:e1:68:03:d3:6b:3f:34:4d:18:3c:1c:1e:b1:53:38:d1:
         29:74:db:94:e1:5e:96:94:5e:07:62:8b:57:2b:7f:a3:b7:7c:
         88:1e:32:8d:7d:99:d5:1f:05:89:00:83:e7:39:05:05:30:b9:
         75:e1:3f:68:2a:13:fc:d1:17:9d:26:86:58:41:59:fc:f3:5b:
         47:66:90:86:ea:e9:f8:85:cf:a0:55:b6:65:c1:c5:b0:8c:4d:
         63:9e:d6:da:3d:54:21:f4:2b:7f:5a:f0:16:20:b3:51:5a:14:
         71:61:e0:d7:93:35:47:81:75:2c:f1:ed:5b:07:5b:a9:8f:3f:
         36:cd:41:94:ae:fe:0b:be:27:63:cc:4c:08:0e:1f:4d:f7:a9:
         2f:c2:1f:bb:ef:d0:49:d1:15:fd:76:d2:ca:a9:49:3c:a6:bd:
         f3:5b:fc:08:b1:a5:1c:5d:82:65:0a:2e:e8:19:1e:46:0c:15:
         96:ac:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----