Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa
File:                     c3736673-707b-4dfc-aca4-88dcbb52a94d.roa (raw, json)
Hash identifier:          9BkrhgfHqOhkc1gcleCpy86zSRCWY11gFrz1w7gE2z4=
Subject key identifier:   6A:61:D7:8A:3A:4C:0A:06:25:85:21:6B:7F:3A:7A:95:10:D7:A4:7A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7F27313ECF19736A19F4B48F49A77B26433826E7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa
Signing time:             Sun 19 Oct 2025 07:00:11 +0000
ROA not before:           Sun 19 Oct 2025 07:00:11 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d078:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:27:31:3e:cf:19:73:6a:19:f4:b4:8f:49:a7:7b:26:43:38:26:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 19 07:00:11 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=c4361556570301291140c4917e138fe73cfb9d3a22f6b4fcbdb5fc68133e66c9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:63:df:aa:6b:06:d5:b4:e6:64:2e:1c:db:
                    8d:20:fd:59:80:b7:af:a6:e1:bb:d6:5e:35:3d:76:
                    9f:e1:0d:1d:bf:58:c7:e8:4d:75:77:ff:80:ba:ea:
                    75:51:4a:e8:a5:c7:ea:61:a1:c7:1f:4e:12:4c:98:
                    86:5b:83:df:e7:a4:44:b8:f8:09:b1:ef:d9:07:8b:
                    2d:37:3f:84:ea:2c:5c:62:fc:f9:50:70:11:ca:28:
                    61:5e:e8:ca:9a:40:40:aa:17:b3:c0:72:ee:9a:8d:
                    1a:4f:bf:6c:af:d9:a4:c8:85:df:fa:bf:6e:7c:3a:
                    5e:90:81:71:48:66:74:53:ba:d2:07:7b:38:93:05:
                    ec:46:5f:2d:92:f6:d6:b7:31:4a:c3:f0:19:7a:1e:
                    d9:2f:0b:b7:24:46:86:09:c4:fc:c2:35:f8:a4:ad:
                    62:fa:bb:48:25:4c:a0:a8:86:64:f1:c8:80:27:f7:
                    be:df:70:4a:9a:75:b4:0c:e1:3d:52:28:c8:5b:3c:
                    63:c6:a0:ee:3f:27:f3:89:00:75:9a:bf:12:b0:d3:
                    a0:9a:5a:61:c5:47:f5:c4:05:44:95:14:86:bf:9e:
                    6b:ea:8a:3b:63:31:f8:30:0e:4e:63:c0:a7:09:06:
                    79:76:b8:92:78:db:fe:a5:73:81:db:ec:53:22:16:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:61:D7:8A:3A:4C:0A:06:25:85:21:6B:7F:3A:7A:95:10:D7:A4:7A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d078:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:cc:f0:07:97:e6:59:05:4e:eb:8d:c5:54:2f:03:b6:a4:c9:
         4c:c6:77:c1:e4:b6:b5:d2:ee:46:66:0b:fc:d0:e9:87:51:c7:
         e7:71:44:cb:37:65:47:5c:c0:dc:be:06:50:5e:09:80:85:10:
         f2:16:63:48:56:df:3a:bd:37:17:af:3d:6a:47:cc:64:38:d3:
         5a:5f:3a:b1:60:3f:ab:74:5e:dc:15:b0:3f:7c:8c:a0:87:c7:
         89:79:8f:82:30:66:cb:a5:c6:e4:38:83:36:02:e1:c5:41:6b:
         d9:47:5e:82:4d:71:0f:ea:0a:b0:fd:ce:85:17:6f:8b:1d:ed:
         20:26:9c:a9:af:57:21:f6:05:5a:8d:64:52:35:b7:33:8f:b6:
         92:fb:76:3d:18:07:eb:d5:a6:3d:ad:87:13:78:b8:1c:e5:03:
         58:62:09:e0:d3:82:eb:b6:5c:85:e2:55:d3:14:4c:76:f1:e8:
         43:75:a4:1c:1a:4e:f3:4b:29:77:1d:60:7e:bb:a3:eb:5a:cc:
         35:53:9e:65:a2:44:4e:e7:97:7f:44:b8:77:5b:1b:93:21:84:
         f2:a3:1d:80:78:04:41:dc:d9:50:bb:b8:7a:28:ff:80:46:7e:
         dc:62:96:81:d0:a1:67:60:f4:c6:b5:5e:e5:15:b1:45:59:c3:
         53:da:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----