Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
File:                     f0af2b24-5037-414d-9581-f0315174658c.roa (raw, json)
Hash identifier:          sNLjdcMktFl16yFs+SV9cohiO5GP7NLNH0Hg6bW3Ihs=
Subject key identifier:   0D:61:86:25:64:81:02:1C:E7:00:51:02:5B:BF:BF:C7:DE:0E:7D:1B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5B3EDCC8F7922E003D84928AEE635E368DF0048F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
Signing time:             Fri 17 Oct 2025 21:40:19 +0000
ROA not before:           Fri 17 Oct 2025 21:40:19 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3e:dc:c8:f7:92:2e:00:3d:84:92:8a:ee:63:5e:36:8d:f0:04:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 17 21:40:19 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=ab1961ecfda09e6c715825b56dff6164fa3236aa91cd48f96756c7ad35dafd5e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:f2:b5:97:14:bb:f1:17:78:c3:54:86:f4:
                    22:2e:a3:f2:1f:a5:fc:45:d6:bf:8e:38:d7:70:d6:
                    8d:cd:d9:40:bc:61:a8:97:86:e3:fd:87:fd:96:60:
                    fd:bd:03:91:b8:30:77:1c:39:35:f9:6f:12:96:45:
                    fc:a4:67:fc:ab:c9:f0:33:d4:b3:66:fa:5d:b6:eb:
                    13:af:2e:a2:0e:c9:81:9f:b7:90:03:31:4e:66:65:
                    f7:50:a6:48:f7:fa:ef:b4:d8:2a:a7:6a:41:ea:44:
                    de:03:b1:5d:50:03:8a:f8:41:ac:79:73:3d:b2:9c:
                    79:55:9a:eb:c7:b4:31:27:52:86:cc:11:ff:2b:8a:
                    f4:4a:46:dc:ed:ba:a4:4b:ad:35:43:90:c7:da:c8:
                    c1:f9:91:f1:13:d3:36:3a:1f:29:70:2d:1a:40:19:
                    ca:4e:7b:18:dd:2f:eb:1e:d6:ee:b0:01:ba:f9:64:
                    0b:9d:4d:4f:13:91:9c:b9:6e:fe:40:df:dd:81:7a:
                    f5:91:57:8f:b1:b9:5d:ad:a6:dc:64:2b:8a:5a:80:
                    6b:f4:30:c5:bf:1a:d6:2d:2d:05:a8:91:20:60:da:
                    74:c6:e3:72:7f:e3:1a:bc:15:a2:18:bf:99:ea:7a:
                    64:c4:32:40:06:1e:8c:5e:2b:ec:6d:d3:dc:b9:2c:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:61:86:25:64:81:02:1C:E7:00:51:02:5B:BF:BF:C7:DE:0E:7D:1B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:22:e6:d2:0b:4a:fa:58:b8:d2:2a:5e:c3:ff:8e:1c:22:be:
         e1:9a:a3:ff:57:d3:96:4a:30:46:c7:2e:06:d2:dd:71:f9:78:
         9a:7f:48:62:da:ad:6f:b8:7a:bf:a2:9b:30:03:d4:b4:aa:83:
         12:b8:c4:80:16:d9:e0:70:e7:54:69:22:f2:73:82:fc:d2:90:
         6a:2e:ef:78:ba:64:e6:53:bc:c6:8b:78:9e:82:4e:60:d6:22:
         a9:17:67:e7:25:24:8b:67:da:82:77:77:af:84:81:77:3f:e3:
         41:b6:d2:b1:d8:d7:93:94:51:07:bb:37:9b:a3:1f:81:c1:e0:
         72:a2:5e:f0:e0:9e:ab:a3:c4:e7:a1:22:e8:1e:cc:ee:61:5d:
         52:a4:27:7e:53:50:22:12:8d:db:60:6d:fa:e4:a2:72:e4:e9:
         40:5a:29:f8:97:e7:b6:fe:c1:85:5e:cb:d4:c3:83:29:58:3c:
         08:7e:bb:f8:e9:a4:86:2f:18:66:da:33:8f:59:21:73:f6:19:
         88:31:04:11:33:2c:0b:da:af:91:f0:d2:c1:76:df:b0:12:e9:
         17:06:45:30:9f:68:cd:2b:a2:2b:25:fc:0a:4f:00:b3:f0:19:
         07:95:9d:7b:0e:75:7c:7a:17:e3:bd:e6:cf:e3:e7:8e:31:fe:
         98:4c:7a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----