Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14a1cb35-92d7-4bc2-854c-094a3829c73e.roa
File:                     14a1cb35-92d7-4bc2-854c-094a3829c73e.roa (raw, json)
Hash identifier:          YbQv2uaPOwD7m7He98Q5ewNPokb4mzu0NjduD9rec5s=
Subject key identifier:   F5:C1:8C:AC:12:B3:6B:89:D3:45:8A:0E:36:9F:21:53:2D:AE:CD:4C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       299885AE49C6CFAC6DF716C7D8AF37FE6D39BA3E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14a1cb35-92d7-4bc2-854c-094a3829c73e.roa
Signing time:             Tue 20 May 2025 18:40:11 +0000
ROA not before:           Tue 20 May 2025 18:40:11 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d038:8040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:98:85:ae:49:c6:cf:ac:6d:f7:16:c7:d8:af:37:fe:6d:39:ba:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 20 18:40:11 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=396453534c19bead026a78cfae8335a5025eb12127dceddff89e1baf488c56fb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:75:0a:2a:d7:cb:b6:0d:22:3c:22:34:ee:93:
                    e9:23:56:d2:63:ef:31:77:b6:6b:1a:a8:09:e9:40:
                    23:6d:27:53:d2:bb:81:a6:21:a3:c5:2e:10:8e:9f:
                    08:ff:46:80:a9:ae:4d:91:8d:0d:f3:7e:91:c5:51:
                    f9:3a:d8:b5:f0:25:0d:d5:10:f4:15:f1:39:5d:d6:
                    f4:90:ba:4b:24:1d:64:60:4c:c3:30:24:0b:7b:83:
                    c1:51:2d:42:ab:e1:89:a7:03:b8:32:b9:fc:b3:0e:
                    1d:27:b7:8a:af:2e:b3:01:3b:e0:ea:18:f1:c1:6f:
                    62:f1:eb:67:ab:c0:3f:88:d6:24:f3:1a:b3:44:91:
                    0b:0b:01:fa:7d:b1:d5:cf:10:40:5f:5e:92:72:72:
                    70:fa:e5:9a:64:a1:66:38:18:1b:04:26:c5:fe:ff:
                    cf:c2:3a:2b:60:dc:f0:34:2a:35:2b:f4:37:c2:46:
                    4c:38:96:b3:0c:33:56:f0:2d:6a:af:35:32:45:06:
                    bc:0f:39:ad:74:f8:eb:a2:2a:f9:46:47:59:cf:aa:
                    f1:bf:06:3f:b2:90:5e:50:8b:dc:29:92:a3:db:12:
                    fa:5a:84:3e:40:84:26:6d:2e:d2:69:9f:df:8a:4d:
                    07:fd:b5:5f:d8:5c:8e:a2:53:0e:92:87:57:bf:bd:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C1:8C:AC:12:B3:6B:89:D3:45:8A:0E:36:9F:21:53:2D:AE:CD:4C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14a1cb35-92d7-4bc2-854c-094a3829c73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d038:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:6e:f4:cd:09:93:f9:79:ac:d1:4f:cf:c7:b1:19:7a:90:d8:
         3c:2f:ba:87:c7:20:ec:e6:64:35:3a:4b:34:9e:3f:5e:38:ef:
         8d:5c:5e:95:d6:1b:36:54:bb:44:13:7a:67:7c:8b:36:57:c7:
         de:32:e4:f0:28:22:34:dc:73:8b:f1:e1:90:73:c0:6b:e1:5f:
         a7:b1:1f:05:22:20:ea:62:98:5c:55:fc:2b:18:a3:de:64:ec:
         39:64:56:c5:8b:e2:70:89:44:16:b7:74:ef:f3:fa:01:bf:27:
         e2:68:30:66:9f:30:c4:36:24:13:59:e2:bb:95:f9:1a:da:01:
         96:67:50:e3:d3:60:46:c4:bf:16:a2:58:22:2c:e4:b1:5a:00:
         f8:37:28:6e:50:c1:a0:83:7e:16:81:93:81:4e:3e:ab:09:f5:
         45:99:b9:48:50:38:41:33:97:c3:9d:d3:36:bb:1a:24:e7:4d:
         56:e6:c2:0c:3f:22:2f:91:0b:e3:fc:c7:96:88:9d:b6:7b:8c:
         6e:8b:43:91:e5:16:4d:bc:62:d1:40:e1:2e:a2:27:0c:9f:76:
         9c:a2:12:21:d8:c0:78:0e:05:0c:9f:77:3d:ca:e7:17:86:f2:
         f7:d9:e3:fc:e6:43:78:d3:b9:a7:c0:71:4f:79:34:aa:ba:79:
         5d:e3:9d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----