Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa
File:                     15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa (raw, json)
Hash identifier:          bCkbOmxhcbADhR9S5Nk9WHV7as05JPT6qwLSJhH8uhE=
Subject key identifier:   1F:95:6C:59:59:79:EF:C5:6D:0F:13:F1:72:23:7B:5A:E8:17:5A:43
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4E39D661DCA5F7852C53D7D507C9B0C76F290AB4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa
Signing time:             Tue 20 May 2025 18:51:17 +0000
ROA not before:           Tue 20 May 2025 18:51:17 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:40c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:39:d6:61:dc:a5:f7:85:2c:53:d7:d5:07:c9:b0:c7:6f:29:0a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 20 18:51:17 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=9d1230b042e69e3944483c17fa5ec0111c8479b943e6e6b8ab72c3450068bfdc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:22:1e:b2:e9:50:07:bd:e2:9b:87:47:a8:60:
                    4d:ec:5a:ac:92:e5:65:20:f6:95:1a:f4:24:a9:ce:
                    71:e0:1e:3e:76:40:0d:38:c4:1a:db:d7:1d:60:a0:
                    ff:55:b2:57:21:ef:c4:ce:12:07:d7:8f:02:63:eb:
                    98:22:4d:18:10:06:d2:a3:1a:1d:67:84:42:1d:a4:
                    27:2b:ba:4b:2e:bf:b4:b3:25:bb:77:4e:77:9b:3d:
                    39:43:3c:fe:e3:aa:f6:42:0b:79:d9:3e:8b:bc:e8:
                    3a:98:32:b5:69:4b:3a:2e:2a:f7:ac:b8:b1:3a:97:
                    65:1e:f8:80:98:b0:b3:91:2a:b8:6a:ed:58:5a:72:
                    a5:55:82:9a:b1:30:a5:8f:3d:e7:51:87:cd:cc:94:
                    4f:5f:87:ab:8b:de:59:3b:03:40:3d:14:d7:c1:7a:
                    2b:c1:b5:3f:7b:cd:55:d8:74:af:de:d5:3e:51:76:
                    e3:42:ac:48:e3:06:19:e0:96:fb:72:b5:ea:5d:08:
                    d2:81:b0:81:d6:44:79:f2:e9:fa:6a:46:a7:f6:ba:
                    b5:a3:be:0e:07:e6:5f:c3:d2:f6:70:58:2a:69:dd:
                    63:62:d3:3e:2b:c7:aa:26:f8:7a:bd:91:45:43:1c:
                    12:8b:60:1e:09:d3:aa:c4:d4:8f:86:35:0c:40:9b:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:95:6C:59:59:79:EF:C5:6D:0F:13:F1:72:23:7B:5A:E8:17:5A:43
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:c1:5f:97:91:e0:d1:c7:6f:80:e7:84:9c:d1:c3:c7:4c:30:
         7d:98:1c:56:90:8e:33:76:e2:36:a5:76:93:4f:00:05:ba:76:
         f4:58:c7:48:cd:5c:45:ca:15:14:fe:44:a5:fb:fb:39:ed:ea:
         a6:8f:76:aa:03:24:c4:10:43:94:70:8e:bd:2c:20:86:69:ff:
         89:b8:ec:62:95:e4:37:a8:0a:fc:ec:7d:a3:97:1c:ca:da:83:
         f9:79:c1:ff:2f:71:26:a3:44:ff:88:36:21:33:ea:15:36:a9:
         3a:2f:88:1d:4b:fd:12:31:01:88:54:7d:5f:94:86:8d:de:25:
         dd:18:fe:c3:d2:c2:3f:fd:d9:12:1f:26:43:c1:ce:3e:8c:b1:
         8e:cd:4d:38:72:bd:0f:ee:61:bd:e7:d3:d2:f3:12:73:1c:1a:
         c7:bd:fd:09:1e:ac:0b:5e:3d:f7:ff:81:af:c8:c5:54:48:be:
         f8:67:6d:72:21:6a:e6:1e:29:f2:9b:48:35:fd:4b:20:72:48:
         3d:43:c4:ca:89:e3:a7:91:ee:4d:de:6b:c7:77:7e:c2:31:8a:
         80:e6:81:1c:c8:c4:ae:d7:77:6f:27:77:4e:36:ee:dd:20:ae:
         db:66:8d:56:ec:39:dd:82:68:2e:13:5d:ea:3c:a0:0f:7d:22:
         f1:34:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----