Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f490cfa0-ccb9-443c-9e85-719668591c22.roa
File:                     f490cfa0-ccb9-443c-9e85-719668591c22.roa (raw, json)
Hash identifier:          75FWP0j6nhnqJ61XUP+paEuboZqcLVdIrn8ssOZiAj8=
Subject key identifier:   DD:29:4F:81:54:74:63:96:F0:30:7B:66:79:A9:A8:88:0E:71:FF:CC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       339961154CE7CA9E0EDA8945BA27A5F404016609
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f490cfa0-ccb9-443c-9e85-719668591c22.roa
Signing time:             Mon 16 Jun 2025 20:31:07 +0000
ROA not before:           Mon 16 Jun 2025 20:31:07 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:c040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:99:61:15:4c:e7:ca:9e:0e:da:89:45:ba:27:a5:f4:04:01:66:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 16 20:31:07 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=a8a50a51fff4b4932b3e2eea127029a880484fee77b7a9666e1d2022c7c118d8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:9b:9d:55:eb:c1:64:8a:7e:cd:77:db:83:
                    0a:01:a9:46:4e:aa:a1:d6:53:51:62:cf:d6:fb:8d:
                    84:b0:e4:95:75:88:2e:a9:64:49:51:d4:6a:52:c0:
                    95:65:d5:a8:02:c3:3f:22:63:6a:26:a1:ec:76:e9:
                    f6:85:09:92:92:be:76:b3:dd:be:d6:58:cf:dd:7d:
                    66:df:5d:88:af:6c:84:56:84:f7:5e:c8:2a:f0:79:
                    9b:f1:fb:a6:a9:7b:00:0b:37:30:cc:e1:fe:44:e7:
                    d3:eb:81:a6:6d:e1:57:cb:9b:51:d8:04:43:8d:3b:
                    7e:6e:68:5d:af:fd:4d:26:18:4b:8f:e7:dc:b0:98:
                    11:65:c3:2d:d5:ab:19:f2:35:6d:44:4d:51:1c:52:
                    57:d9:a9:09:75:03:5b:15:1f:e7:57:f2:12:ed:f4:
                    9c:f7:8a:0b:5f:20:6f:22:c3:a6:b1:b2:03:bd:e3:
                    1d:60:47:f4:6f:7a:43:b3:de:d4:68:73:d1:14:51:
                    22:ef:0a:a5:83:a5:d9:12:08:73:7f:33:7c:aa:36:
                    8e:95:d6:35:8c:93:06:b0:32:96:3b:e5:b8:e5:09:
                    77:b2:1f:49:b8:f8:80:1f:fa:dd:db:7c:19:a3:11:
                    c5:9c:ee:94:1d:8d:ed:2a:1a:54:f4:fc:02:5b:a3:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:29:4F:81:54:74:63:96:F0:30:7B:66:79:A9:A8:88:0E:71:FF:CC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f490cfa0-ccb9-443c-9e85-719668591c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:c040::/46

    Signature Algorithm: sha256WithRSAEncryption
         52:34:97:ec:f6:78:c0:37:bd:96:82:30:20:de:9a:53:ec:94:
         2b:59:15:e4:da:d5:08:65:e3:7a:0a:20:ad:56:f2:5b:20:2a:
         c8:7f:75:86:f0:7e:94:e0:36:0e:ff:15:cd:f2:b0:0e:94:aa:
         62:1d:40:97:7a:91:eb:1e:1d:bc:89:1a:20:90:c7:58:e4:eb:
         ee:4d:e1:c9:18:ce:69:bb:42:10:f6:13:e7:df:99:50:55:be:
         53:c1:6d:08:94:c3:a5:18:29:cc:6b:6b:4f:e7:c4:de:27:8b:
         94:38:7f:e6:ee:9f:42:2f:ba:f4:7b:d8:fd:b5:3a:a5:2a:88:
         3c:54:42:9e:bc:7a:7c:a0:25:f4:03:cf:36:f1:e4:9f:88:03:
         8c:88:f5:3e:47:d2:cb:dc:3f:b4:eb:29:1e:bd:d0:84:3f:1e:
         a2:32:be:4e:e6:1d:19:95:39:32:e2:c9:47:1e:81:50:08:fd:
         57:75:64:26:31:16:5e:52:90:4a:dd:da:a6:99:85:83:c3:05:
         b9:d3:2b:72:eb:21:5a:ea:a6:47:c8:70:ad:70:50:cf:96:15:
         5f:6b:6e:b3:f2:97:30:42:b9:8e:03:6d:2e:eb:00:fc:d8:66:
         65:5f:95:c5:60:f4:86:49:9c:5b:51:44:8a:17:f7:32:93:58:
         3a:e5:a0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----