Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
File:                     fa3b401f-ea91-45a9-8182-d567cfac077a.roa (raw, json)
Hash identifier:          c7SpnCVDy/CwpreLJkXFA9XBsHmtrSaSjiCS72BMKm0=
Subject key identifier:   1D:CE:46:7C:46:F5:F4:3B:58:60:D6:AC:EA:C8:A5:36:58:F0:55:C0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3716A23C38C2A77F8DDF1829B1C9A6CA5F9443C0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
Signing time:             Fri 26 Sep 2025 18:39:49 +0000
ROA not before:           Fri 26 Sep 2025 18:39:49 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:b080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:16:a2:3c:38:c2:a7:7f:8d:df:18:29:b1:c9:a6:ca:5f:94:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 26 18:39:49 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=56656850f650a867b583cad09b30dc186db645b18948fc710fbcc373809bfd17, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:fa:2e:45:24:aa:aa:b3:e0:c7:ca:31:bf:
                    93:d2:04:70:67:0c:0b:0c:14:86:1c:6a:70:60:a9:
                    02:5e:37:66:86:a9:61:92:e3:cd:0d:6c:19:14:c4:
                    44:b4:a2:fc:50:c2:b6:7f:d1:e7:35:af:fa:d3:eb:
                    69:03:ea:31:39:4e:a8:f2:46:6c:6f:c7:21:8c:96:
                    60:7a:3d:bc:c5:c6:5f:f1:dc:97:d5:b7:ba:1e:7d:
                    e7:3b:bb:06:f5:cf:11:03:69:95:14:87:81:6d:52:
                    b8:38:f7:c6:e8:35:d9:e7:d7:e2:b4:76:ef:02:54:
                    51:31:70:23:3b:ef:97:db:70:5d:ca:bc:6e:25:64:
                    d9:8a:ff:34:e8:4b:68:fb:5e:f7:d4:72:99:95:cb:
                    62:0c:bc:71:c6:f1:5e:91:54:b1:80:ba:52:91:65:
                    4b:b5:d9:97:d4:24:7e:80:8c:41:41:00:2d:f9:6f:
                    c6:7b:6a:9f:61:c9:60:ed:53:82:b9:9c:bf:0c:0f:
                    1a:36:85:e3:6b:54:ca:93:14:31:c0:10:67:89:88:
                    ed:ec:bb:b0:02:ee:ac:0d:5e:53:45:0a:f7:47:a7:
                    ea:23:4a:2d:c4:1d:25:b0:e9:1e:55:09:6a:a6:ef:
                    6d:4d:79:fa:1b:11:09:6f:dd:2f:21:a1:e5:8c:ee:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CE:46:7C:46:F5:F4:3B:58:60:D6:AC:EA:C8:A5:36:58:F0:55:C0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:b080::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:6e:da:1e:14:75:9a:e0:c8:cb:64:48:1c:77:a8:23:3f:0a:
         ed:e9:46:bb:20:1d:68:03:bb:4e:a6:f2:ca:57:a8:4e:d9:e8:
         46:72:23:08:c6:fc:e7:7d:f6:29:71:70:75:4e:e4:39:82:82:
         41:36:0e:00:f5:12:38:5d:71:b5:6b:0d:0e:68:88:f8:55:00:
         69:b7:e8:5c:7b:7d:80:9a:7c:b3:d6:4d:a8:5f:40:b9:af:d0:
         3e:93:7c:39:fd:0b:63:1c:12:8c:c6:8d:19:e5:93:ca:3c:94:
         d4:ff:44:a5:80:ce:99:79:f4:13:ed:2f:bb:df:d6:b3:2f:1e:
         6c:da:aa:ae:81:14:9b:6c:d0:a0:e9:3c:d1:ba:4e:1a:bc:fa:
         f9:20:2c:66:55:66:7f:a5:ad:c3:1e:7c:97:63:79:49:f0:96:
         91:e1:c2:65:8e:7c:19:ba:88:fe:b8:8f:0a:e4:57:c8:92:23:
         d2:79:e2:0f:50:d4:fe:59:c0:e5:33:41:78:35:af:b2:20:f5:
         f4:60:48:18:5d:41:c3:d1:1a:03:b4:e0:29:b5:7f:34:02:f6:
         02:05:4a:ba:83:9a:ec:53:df:3a:28:09:20:2a:0e:0a:66:42:
         7f:49:6d:d5:f1:1e:3c:09:dc:8d:9f:cd:97:4e:bc:4e:1f:76:
         68:62:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----