Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
File:                     fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa (raw, json)
Hash identifier:          NjqjC54uy5a8fswtrfHyBU28wafgoQeH6eJmZzPCNJA=
Subject key identifier:   46:3B:06:B1:C4:4B:EA:71:6F:45:EE:EE:92:71:43:19:05:F2:77:B4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6862C43D25C755C80E4766B42F3FF1B7672561B9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
Signing time:             Mon 16 Jun 2025 20:11:25 +0000
ROA not before:           Mon 16 Jun 2025 20:11:25 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:2080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:62:c4:3d:25:c7:55:c8:0e:47:66:b4:2f:3f:f1:b7:67:25:61:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jun 16 20:11:25 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=054e3062552e8d5066b9b0c1ddb6c07c4735263942064a42fead22671c455288, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5f:e8:51:1c:de:7a:e5:d0:88:8c:3d:e8:0c:
                    a7:1b:f5:b2:d8:f5:99:c5:93:c5:f3:3d:f0:4f:ae:
                    cf:0d:09:6d:a1:28:c8:d7:90:75:63:aa:82:25:51:
                    e9:85:e2:3d:7c:c4:28:56:08:88:7d:30:70:6d:c4:
                    46:58:23:5f:78:d4:d3:8a:aa:80:c4:96:a4:28:11:
                    f9:75:77:6c:e7:89:d2:f9:02:14:e4:dc:29:fe:59:
                    a8:58:ec:11:f9:b5:5a:cc:a2:08:49:72:5a:8e:24:
                    51:ca:74:75:26:01:88:b5:0e:e5:da:db:73:81:a6:
                    27:12:bc:a1:e8:99:ac:88:9e:d5:78:80:37:c8:2c:
                    be:e8:57:b4:fc:2c:2e:1e:2a:56:8a:75:04:72:4f:
                    a8:00:cc:82:71:e5:10:8a:6c:83:5d:ad:2b:5a:5e:
                    b1:95:57:19:58:95:69:33:2c:c5:84:54:b0:80:42:
                    b2:5a:27:fe:dc:29:8b:75:0b:2d:ed:8a:f0:d2:9b:
                    85:89:c1:0a:5d:52:01:c6:50:cf:98:d9:4d:90:68:
                    1b:d3:a0:d1:0e:5c:47:4c:9e:ab:d5:aa:9d:26:22:
                    cc:ac:78:47:14:52:e6:cd:35:ed:88:92:3d:26:9b:
                    60:b0:9e:44:ac:ee:6d:d2:e4:c7:d8:c9:2b:98:57:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3B:06:B1:C4:4B:EA:71:6F:45:EE:EE:92:71:43:19:05:F2:77:B4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:b0:91:99:b2:96:5a:03:f7:f8:f0:f6:50:56:f8:b8:b8:e1:
         18:1e:42:12:bd:48:a1:8d:3e:88:f7:7c:62:6a:5b:a4:7e:f8:
         99:22:46:91:f2:cf:42:54:1f:18:7b:34:88:23:7f:91:a1:bf:
         b5:90:eb:9d:20:06:61:74:0d:a3:22:b0:96:56:95:b8:06:ba:
         4a:77:60:ee:7b:25:94:0f:08:65:c5:9f:4e:6a:3c:fd:24:84:
         e9:7a:b3:47:b4:67:7c:e7:b2:a8:9d:40:51:15:57:4d:53:de:
         3b:0e:0a:2b:c9:5f:53:3f:c0:c0:c3:5e:64:6c:7f:29:a2:c1:
         b1:b8:45:0d:27:39:10:b8:60:b3:76:3c:b1:47:67:06:4e:4b:
         32:e4:7e:19:f3:2d:49:06:c5:97:9c:16:c2:d2:97:f1:a5:d5:
         88:9f:b1:32:03:11:a3:71:6f:09:ab:63:e6:46:5c:d4:81:61:
         db:c8:2a:a8:90:68:fd:92:1c:fa:7d:77:d8:e2:a2:9e:df:6e:
         cc:23:d4:39:a1:d0:07:bf:8d:8b:1c:27:0d:95:56:89:f3:45:
         99:da:30:7e:28:e8:73:14:d1:59:bb:39:42:b9:97:e3:6d:59:
         8a:2f:b3:20:4e:fb:5f:f9:7a:bb:79:47:80:20:c1:0a:84:3e:
         ed:c2:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----