Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa
File:                     bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa (raw, json)
Hash identifier:          JPDVpEUhHUkngAt8UGTP/JjrbLe/Puc16s3WzBFObTk=
Subject key identifier:   1B:61:11:E9:78:D6:95:C1:D4:B5:7D:F1:77:A4:B6:0E:F8:B9:67:9A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6E8C12035154805CAC1D36644E29A7B8C3BA13E4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa
Signing time:             Fri 26 Sep 2025 19:38:37 +0000
ROA not before:           Fri 26 Sep 2025 19:38:37 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075:b000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8c:12:03:51:54:80:5c:ac:1d:36:64:4e:29:a7:b8:c3:ba:13:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:38:37 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=10b65a93f43011864d5ca0f647a50dbc5ca9af38e6177323f0e0019d4701bb81, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:e1:6f:93:cc:66:48:b5:b6:a1:73:8d:98:
                    c5:92:d2:b9:3d:ad:b7:42:df:fa:00:1d:f6:af:0c:
                    8e:83:2b:74:cf:87:8d:04:70:5a:03:87:81:4b:bb:
                    50:ce:71:d3:2b:92:3d:b0:33:db:fa:53:32:cc:24:
                    cc:0d:32:e8:f6:cb:57:61:17:07:4d:7b:8f:8e:02:
                    a9:65:86:2c:ab:61:cc:fa:28:f4:c9:d2:e7:b8:de:
                    0e:c0:87:6e:da:a2:33:8e:67:39:18:03:12:13:67:
                    eb:6a:2f:f2:41:da:ea:f9:16:33:8c:2e:fc:62:75:
                    41:ba:b0:0b:c2:5d:b3:75:ce:1d:9d:91:32:9a:12:
                    c5:93:8a:11:51:8e:85:eb:12:9e:40:4a:a4:ca:a9:
                    4a:96:59:1b:0b:66:03:ca:90:f5:7c:be:ea:8b:2a:
                    b4:f1:56:99:0f:97:57:f7:ee:18:ca:4c:33:19:33:
                    bf:b3:9a:22:89:52:5c:81:04:9d:28:f8:55:28:1e:
                    68:73:2e:ad:9d:2a:d8:a0:57:71:bc:05:77:e6:dc:
                    66:bd:87:3a:18:23:0d:b8:be:4f:b1:72:e1:e3:f1:
                    46:0f:31:aa:eb:1a:af:e3:b8:d0:42:1d:0c:3e:5f:
                    97:75:dc:4a:e3:7f:2f:2e:96:d6:f6:fd:61:65:20:
                    65:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:61:11:E9:78:D6:95:C1:D4:B5:7D:F1:77:A4:B6:0E:F8:B9:67:9A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:15:14:9f:af:27:a6:51:68:3c:5e:a0:b2:04:0f:2d:4b:19:
         53:94:9e:8e:62:93:0a:98:8e:73:ca:ac:d3:f9:dd:2a:c2:7c:
         2c:18:b3:d6:eb:21:83:35:01:45:36:ee:6c:be:f8:9f:72:59:
         91:76:0b:17:5f:ab:5f:bb:ae:84:78:9b:9e:7c:d8:f0:9c:f4:
         08:56:38:54:b6:c3:80:a0:e0:43:a8:fe:49:92:79:58:57:26:
         47:8d:a3:9c:65:e7:32:57:ab:a1:5f:0f:00:66:73:cb:f7:f2:
         f9:26:15:26:4e:a1:8f:15:b5:30:11:80:b9:11:ac:b9:79:2b:
         87:70:d2:d1:be:7b:a7:e1:47:40:31:2d:3e:2d:c8:c1:a5:ba:
         46:8e:40:9e:aa:08:e5:b7:01:a7:9b:b3:c8:5e:30:7c:c1:81:
         75:c0:0c:16:57:fd:74:b6:a5:70:20:6b:e2:6f:d4:ac:18:8e:
         91:61:f0:b3:79:96:3a:fb:b2:3e:0e:37:63:b4:14:f8:7e:11:
         32:76:df:25:2e:29:28:67:78:e2:41:8d:3a:c9:3c:5c:90:91:
         8b:db:fa:57:ec:0a:7a:64:2c:c4:37:5d:89:0b:61:dc:25:73:
         6c:02:01:51:f5:19:07:70:74:a4:35:8f:97:96:00:63:4b:c4:
         c2:a9:88:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----