Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3736ec9-491c-43bd-b672-c821fdae78f1.roa
File:                     f3736ec9-491c-43bd-b672-c821fdae78f1.roa (raw, json)
Hash identifier:          rP8Tuwe98X5qW083w/4bjPz2AVsUKlEFEP8RPbC/jGw=
Subject key identifier:   DC:F3:56:DD:6E:D7:52:AF:52:32:85:B4:BB:B8:5B:35:F3:8D:AD:18
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6E3ADDB51BA488923B3511D2FD56048E09D1DDBF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3736ec9-491c-43bd-b672-c821fdae78f1.roa
Signing time:             Fri 17 Oct 2025 23:20:15 +0000
ROA not before:           Fri 17 Oct 2025 23:20:15 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d076:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3a:dd:b5:1b:a4:88:92:3b:35:11:d2:fd:56:04:8e:09:d1:dd:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 17 23:20:15 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=29deb148b9affc81c2a81ba76727467e9700dbd4fe525d6265b70ec078d11d93, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:61:0c:61:11:74:06:ec:0c:b1:e3:b0:41:
                    c8:24:10:47:b5:7d:35:bf:82:fe:9b:02:95:4e:e3:
                    42:f8:0f:29:18:f8:31:24:b6:40:f1:ae:1e:d0:de:
                    83:ac:bd:85:7c:c3:42:22:19:0f:b9:7b:d4:09:ac:
                    b9:5b:ba:2a:9d:9a:5f:86:88:49:1f:de:2a:ea:6d:
                    b9:d6:03:84:72:50:ce:71:4d:93:14:0a:c6:7b:8a:
                    48:82:67:6f:6e:e9:e9:26:ac:55:f0:00:e6:02:42:
                    69:1e:57:85:73:3c:ec:4b:c7:64:56:d8:34:48:10:
                    b8:69:bd:49:4f:7d:92:03:39:63:17:dd:f5:d2:bc:
                    33:4b:e9:d7:de:03:0d:83:79:21:39:ae:3b:c5:43:
                    a4:bb:17:00:b5:62:11:ab:b1:68:55:24:7e:4d:ba:
                    28:2d:bf:8c:22:75:b9:d4:5a:85:ed:3f:f0:43:40:
                    51:fa:c8:6d:8f:70:82:c7:2a:84:44:2d:c8:ea:22:
                    da:90:c4:80:48:18:de:34:ea:07:66:c2:f5:5c:6a:
                    a4:46:ff:e7:7c:2f:ba:28:b0:31:c6:6e:a1:14:ce:
                    be:28:d6:f5:c5:98:ab:17:69:b4:2b:a9:d6:af:4b:
                    f0:d6:5b:b3:27:fc:f5:40:48:10:b3:a9:54:66:4c:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F3:56:DD:6E:D7:52:AF:52:32:85:B4:BB:B8:5B:35:F3:8D:AD:18
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3736ec9-491c-43bd-b672-c821fdae78f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d076:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:59:85:f8:4d:c4:42:b1:1f:58:76:3b:b2:3a:74:68:ae:59:
         61:50:36:7e:ec:a8:2c:69:01:3e:c3:74:32:74:b9:fb:4b:42:
         43:55:08:ff:74:bf:2a:36:c7:10:ab:b3:c0:7c:e6:6b:05:49:
         8d:0a:9b:1f:d0:be:13:a0:e7:96:f7:98:f7:7e:29:ef:64:72:
         e9:62:49:29:a6:8b:30:de:ba:b4:6c:02:62:76:5a:f0:80:c5:
         ac:ec:e5:bd:d5:17:a2:3f:a9:87:2d:63:b0:33:c3:b8:17:49:
         1b:93:5b:0c:df:09:3a:22:98:29:fc:59:e1:4f:9d:6f:81:84:
         99:41:46:24:6a:3c:74:a4:41:a1:c7:ee:48:10:a3:f1:53:73:
         a0:ce:02:a8:b1:10:51:76:00:fb:c6:95:93:75:01:55:2d:f9:
         3b:5d:89:bf:db:78:92:f3:3e:8a:73:ab:62:c9:87:4e:cf:0f:
         c9:3c:49:1a:0e:1d:d5:1b:64:3f:64:ba:34:4d:44:db:a8:35:
         a5:3d:52:c9:a3:62:9e:5a:48:62:d8:a4:6c:14:27:df:ef:ff:
         ea:93:cd:91:19:b7:5c:27:80:72:bf:a6:e1:fb:be:ac:c2:5a:
         97:25:fc:92:a0:c2:bc:b0:6d:c9:68:ce:46:4c:e7:07:f0:4f:
         24:10:57:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----