Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caeeaf61-b927-4d38-b398-1efb2c05d49e.roa
File:                     caeeaf61-b927-4d38-b398-1efb2c05d49e.roa (raw, json)
Hash identifier:          LDaZgINb8yf1pzx3OiXytFLFojG0Vcd2GxCzdl98cnE=
Subject key identifier:   7D:C3:B8:5B:1E:28:E9:01:91:6C:BA:4C:9B:5D:66:1F:E6:14:8F:17
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       48D1920E86D35437D12370300CC63853DDE77683
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caeeaf61-b927-4d38-b398-1efb2c05d49e.roa
Signing time:             Sun 19 Oct 2025 23:50:09 +0000
ROA not before:           Sun 19 Oct 2025 23:50:09 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d058:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d1:92:0e:86:d3:54:37:d1:23:70:30:0c:c6:38:53:dd:e7:76:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 19 23:50:09 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=eb23f863292caed717566f1645199916f6b2983c02354cda18d636376fec916f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:4d:02:06:c5:f8:70:f2:6a:b8:76:1d:22:
                    e8:37:b5:b5:63:dc:36:da:98:37:a7:e0:ab:93:55:
                    af:be:e9:5b:a7:fd:81:2f:9e:24:e6:04:13:da:db:
                    e8:0d:d4:70:86:5f:51:5c:f7:5a:fe:9b:f6:d8:3a:
                    7a:b3:ad:a7:c6:3e:eb:3c:f3:97:55:8a:fb:07:02:
                    e4:74:80:1f:ad:00:36:c2:8d:91:af:15:1e:cc:bb:
                    8c:79:23:46:84:af:02:81:cf:65:9e:29:db:8e:7f:
                    f4:5a:66:e3:9e:96:f9:87:a1:44:2d:93:2b:95:3c:
                    80:84:37:bf:20:13:eb:81:9b:71:6d:b1:4e:5d:64:
                    49:2a:89:f5:cd:1e:6c:12:8d:ec:d0:04:11:84:d7:
                    12:3c:26:0b:4f:f3:d8:4c:2f:a1:a7:fc:9c:18:08:
                    8e:44:d9:b1:8e:77:48:7c:e9:38:b2:3c:f0:5d:40:
                    43:df:d9:c0:3e:be:aa:e4:fc:d2:71:84:f5:1a:55:
                    3a:d2:8f:75:66:da:05:fd:33:f5:8e:63:34:f1:77:
                    e9:14:5f:09:f2:c3:1e:77:19:1a:51:00:e9:75:49:
                    84:06:dd:07:b0:4a:c8:a4:47:c3:f8:f4:cc:99:59:
                    13:8d:86:c5:19:e3:28:a4:4b:7e:4f:5b:a9:f7:a1:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C3:B8:5B:1E:28:E9:01:91:6C:BA:4C:9B:5D:66:1F:E6:14:8F:17
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caeeaf61-b927-4d38-b398-1efb2c05d49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d058:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:5a:af:0d:c4:c5:9c:a4:ba:dc:6d:9d:eb:98:1f:36:12:
         52:89:fc:99:39:18:33:eb:47:4b:5d:9a:d6:70:f8:d8:8f:4a:
         78:4c:5f:d6:8f:f0:a7:db:dc:d7:71:20:b1:8f:a8:1e:ad:7c:
         09:6b:17:3e:4d:f5:9c:0e:64:db:38:cc:0c:23:71:ac:b2:2a:
         c4:5a:8a:90:ed:09:98:4b:66:2f:79:5b:74:c0:c9:18:43:63:
         77:8a:0b:64:ac:03:d5:17:f1:3b:29:50:d3:a5:3d:20:0b:77:
         11:2b:29:25:9e:98:7d:10:80:5b:93:d2:79:7b:67:99:4d:03:
         7c:28:81:82:38:fe:99:a4:c3:da:2f:5e:cc:b5:ec:ad:b6:64:
         53:52:60:2c:98:7f:f3:d0:e6:1f:2b:48:c1:73:93:c9:6c:11:
         a1:d4:5c:d4:50:8f:4a:b7:e2:fd:ad:33:3e:9c:c8:34:92:c5:
         49:aa:5e:a9:8f:e3:50:69:bb:f8:41:f9:b6:e5:bb:1b:ed:85:
         d0:4b:11:24:5d:04:c2:5a:5e:10:84:bb:10:37:95:0b:d4:df:
         79:6b:56:fe:34:92:fc:93:89:02:59:1f:68:12:cf:6c:56:07:
         7e:2a:67:20:6f:20:92:17:c9:9c:35:bf:80:29:5f:3a:12:92:
         f6:e7:fc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----