Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
File:                     dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa (raw, json)
Hash identifier:          mstglucvACGFpIH2M3ZdBhDfCcCxD3tQLy7a78HgPew=
Subject key identifier:   63:21:C1:CD:0C:95:3F:A7:B6:E6:C0:41:2A:FF:E7:72:CA:EF:60:F3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       56B3ADFEF1E0E4A6A63CB906660A86D7FD319B73
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
Signing time:             Fri 26 Sep 2025 19:00:03 +0000
ROA not before:           Fri 26 Sep 2025 19:00:03 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:9040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b3:ad:fe:f1:e0:e4:a6:a6:3c:b9:06:66:0a:86:d7:fd:31:9b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:00:03 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=f482cd1a780157f0fee073135f74a07979ee12c5e2ada0dbe34ec008d7997fbc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:83:b8:6c:3f:66:06:60:ed:29:85:13:f7:
                    3a:5e:fa:99:a7:61:c8:dd:fd:f7:2d:71:a7:57:c8:
                    d2:4d:29:6c:be:b5:4a:fe:40:a9:5b:24:e1:e8:5e:
                    4b:ec:3c:2d:47:1a:be:a5:77:58:78:4d:e0:3e:c2:
                    8e:7d:8f:d5:08:76:7a:b7:d5:7c:46:ee:a0:69:2d:
                    8a:d6:22:27:ba:cc:20:14:d7:42:f5:db:52:c4:2f:
                    92:5a:d0:6e:fc:68:f5:7c:91:8e:4b:46:32:a5:ae:
                    bb:d2:68:9e:3f:5b:19:72:6a:c0:1c:e7:7b:4f:7e:
                    70:72:93:f2:97:fb:4d:01:07:97:12:46:6f:9b:7d:
                    0c:bb:8d:b7:7f:36:18:2c:35:f3:97:a5:cf:ea:de:
                    b3:a5:37:1f:02:28:17:17:70:31:79:1c:3a:19:fc:
                    28:f2:24:bf:10:f2:6c:17:6a:65:8a:1b:fa:15:66:
                    1f:94:7b:9b:ca:a2:e4:ca:79:4e:df:07:5e:fa:15:
                    18:8b:89:d6:f3:85:62:2c:76:5d:04:eb:d2:4d:e0:
                    73:66:d1:5c:33:ae:76:66:c4:1a:25:9b:42:cb:e3:
                    d3:0b:43:9d:d0:1d:65:a0:38:ff:a1:31:36:70:51:
                    13:6e:09:f4:09:80:16:f4:be:e9:32:cc:e1:3b:fc:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:21:C1:CD:0C:95:3F:A7:B6:E6:C0:41:2A:FF:E7:72:CA:EF:60:F3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:9040::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:38:98:62:63:69:19:db:8e:68:a9:60:18:87:b2:9d:c2:51:
         d9:be:f1:50:0b:28:6f:73:fe:cf:5e:90:e4:74:79:41:eb:1a:
         0c:44:1b:d0:ac:a9:52:c3:fc:35:96:34:c8:85:15:b6:d6:ff:
         31:d7:17:06:9d:57:fb:d2:83:b3:c1:89:0e:58:cc:58:de:8b:
         98:47:56:15:7e:25:c2:25:a3:8f:17:49:81:c7:a8:1a:3f:4b:
         1b:bd:a8:e7:e8:06:e9:0d:fd:1c:e9:b6:f0:6c:e2:72:c5:d7:
         20:03:cb:b3:6a:c1:d7:83:51:44:b7:f8:69:93:e1:46:1a:7d:
         ec:4f:73:96:6e:67:bc:6a:a4:45:45:14:4b:d0:6b:e8:89:6e:
         d6:87:26:48:4b:bf:08:b6:32:0d:ef:2b:d8:b4:d2:46:a4:a0:
         c9:3d:b1:ad:e1:f3:17:90:3f:e2:d2:00:59:c5:a7:ef:90:12:
         4e:5a:62:50:89:d8:61:db:5a:68:17:76:96:1b:d7:57:ca:fb:
         2f:e4:4e:ea:5f:d0:e1:24:fa:26:c3:9e:9a:95:a6:06:9a:14:
         77:63:c6:94:bb:24:79:21:ea:e4:f7:9c:82:48:8c:cf:a8:2b:
         3b:50:1d:42:f4:47:cd:6f:c0:53:e9:4e:00:25:9c:e1:05:c4:
         99:5f:bc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----