Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7efd861-8dc6-40c5-8713-0bcfdbed7c2e.roa
File:                     e7efd861-8dc6-40c5-8713-0bcfdbed7c2e.roa (raw, json)
Hash identifier:          By0uGerT2nlrBQamBz61+0I3aWRqncQqcYgbafHhq2I=
Subject key identifier:   AC:92:3D:E4:1C:87:C4:DB:9F:D6:7F:3F:DD:73:71:DF:22:1F:E4:DD
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       06BDEDAB543A1B989DC9E1F72DCF4316E695C7F2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7efd861-8dc6-40c5-8713-0bcfdbed7c2e.roa
Signing time:             Fri 26 Sep 2025 19:40:24 +0000
ROA not before:           Fri 26 Sep 2025 19:40:24 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d03a:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:bd:ed:ab:54:3a:1b:98:9d:c9:e1:f7:2d:cf:43:16:e6:95:c7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 19:40:24 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=1a209198777cda2d70955d144704e3026c8eca6795f71636df9c20a6a48cf0da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:34:ed:56:00:b9:dc:43:0f:22:2f:0e:42:
                    26:ab:af:0e:df:21:32:ab:84:ec:23:03:74:b5:81:
                    fc:c5:48:4f:43:e9:3b:ee:c8:53:4c:f8:4f:30:12:
                    3b:35:96:02:11:23:b8:c6:eb:b2:9b:69:36:47:2d:
                    14:3f:34:2c:c2:88:35:cc:d3:ec:28:af:4f:c2:52:
                    85:9f:00:d9:ac:e8:29:40:5a:3e:52:36:bd:e2:d0:
                    b7:4d:7c:b1:98:7a:45:34:cc:51:fa:2c:5b:f9:6c:
                    32:e7:9d:17:2c:ac:54:36:6f:d8:7d:cd:78:0e:1d:
                    06:0d:94:37:aa:dc:23:d5:41:05:63:ab:d5:c7:e8:
                    b7:46:49:2f:14:c4:60:37:41:d6:35:8c:ef:2e:84:
                    e5:91:72:57:61:7c:c9:6e:57:fe:5c:56:6a:86:cc:
                    b5:95:75:35:e0:0f:bc:41:87:bc:a0:3b:b2:4f:6d:
                    31:6d:2a:90:b3:14:08:e7:3a:5a:6d:4b:d5:85:62:
                    ab:58:c3:86:b7:c1:cd:ab:4a:9c:91:52:d3:3e:37:
                    82:8e:0d:c1:8b:34:76:0e:f0:96:88:40:f4:d8:a2:
                    d5:25:6f:0d:81:2c:f6:10:83:35:dc:46:e2:6d:fd:
                    e0:ea:5b:b0:9f:16:8d:6d:91:20:cd:57:2e:89:9d:
                    8b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:92:3D:E4:1C:87:C4:DB:9F:D6:7F:3F:DD:73:71:DF:22:1F:E4:DD
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7efd861-8dc6-40c5-8713-0bcfdbed7c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d03a:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:9e:fd:9d:92:62:2f:f6:dc:a9:6c:f1:50:12:e1:6e:b8:e6:
         59:68:d4:3c:b3:bf:eb:fc:50:84:51:07:6c:25:d3:50:3a:dc:
         ea:57:94:71:4e:d5:ba:ac:8c:ca:f0:11:66:e1:f9:3c:4f:21:
         e1:98:ce:5b:f2:7e:10:d8:7b:05:8b:c5:21:6f:4c:7d:61:2e:
         b1:65:c4:60:ed:65:9f:91:f5:97:be:4d:79:ba:c5:a8:85:1f:
         fa:27:89:57:3d:3f:32:d2:ae:59:e7:8e:cc:25:6c:9a:e3:3c:
         c2:d7:38:56:a0:51:f5:19:03:8d:72:9d:5d:ef:27:35:3a:9b:
         75:3c:2c:86:94:68:c8:02:06:94:60:ed:fd:1b:d2:03:12:40:
         72:3a:5a:eb:e9:40:c1:61:7c:7d:e2:55:9e:47:8a:cf:6b:90:
         16:7f:8b:82:95:9f:3d:53:34:5f:2c:95:73:44:10:f7:c4:f7:
         da:1f:e9:c8:cc:13:9c:5e:b8:ee:32:13:df:bd:f8:6b:27:51:
         76:f9:3f:11:6b:6d:67:06:57:46:ff:bc:6a:ff:9d:da:6c:e0:
         62:9f:b5:d1:2e:1c:91:ad:7f:bf:12:7c:ac:87:f8:e7:b9:7e:
         ce:24:a5:27:2d:a5:c0:e4:e6:05:3c:0f:d7:83:63:7b:14:e2:
         1c:70:78:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----