Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/190e1645-8146-4d32-be0a-feed324f8efa.roa
File:                     190e1645-8146-4d32-be0a-feed324f8efa.roa (raw, json)
Hash identifier:          rf3bSaTS1aK++psrtJOAcN+C4SivQzPLmsDGVmIrTYU=
Subject key identifier:   5A:0E:04:CB:0E:94:DE:D1:5B:0E:5D:1A:2B:97:88:60:9B:24:C4:9F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6DE5F0C12B6B6BFA7E858595EF79E85A1E8D49D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/190e1645-8146-4d32-be0a-feed324f8efa.roa
Signing time:             Tue 21 Oct 2025 13:20:09 +0000
ROA not before:           Tue 21 Oct 2025 13:20:09 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d034:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e5:f0:c1:2b:6b:6b:fa:7e:85:85:95:ef:79:e8:5a:1e:8d:49:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 21 13:20:09 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=94280d944a70eb74a8539d42e815fb10bab28386fda60f6db22aa092a92a0cbc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:5e:5a:68:07:a5:80:87:aa:db:00:9b:98:
                    51:8b:64:81:93:01:b0:6c:1e:b0:d0:be:99:9f:72:
                    08:fa:e0:d2:c6:8c:12:3f:aa:3f:7f:15:97:6b:64:
                    0e:32:9e:76:04:1f:b5:67:ed:2a:7e:ec:c5:c0:bd:
                    92:6c:b3:e5:24:12:30:d8:ba:38:37:76:59:57:15:
                    53:dd:fb:fa:e5:18:12:47:bc:62:45:4b:64:1e:2a:
                    1e:21:c0:7e:8f:83:a7:c3:39:d3:79:9b:e3:c7:2d:
                    90:34:56:e5:10:45:9d:d7:ed:92:1c:77:76:f1:71:
                    fc:4e:20:17:e6:38:29:ad:32:5c:80:6c:94:f5:8e:
                    2c:1a:43:cf:42:0d:d9:3c:6a:12:fd:7a:89:f9:38:
                    18:ca:73:77:df:d8:5c:89:1b:5c:b6:7d:6d:93:5b:
                    64:84:46:ec:61:c8:7c:ae:1c:dd:6d:67:a5:05:3f:
                    92:b4:b3:5c:c4:35:df:c4:b4:ec:5e:e6:2e:fd:cd:
                    e5:5f:69:cb:81:d2:cb:cf:db:49:d5:30:c1:d7:3a:
                    63:15:a0:37:11:f8:30:e5:41:89:9d:f0:f4:d0:b5:
                    9a:0a:00:98:57:75:f6:aa:ca:aa:5b:2d:a8:31:ba:
                    c6:49:35:ca:0e:1a:d8:8d:3c:b9:b8:03:6e:f3:05:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0E:04:CB:0E:94:DE:D1:5B:0E:5D:1A:2B:97:88:60:9B:24:C4:9F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/190e1645-8146-4d32-be0a-feed324f8efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d034:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:9f:a0:cc:93:de:b0:a8:08:03:c7:b6:27:cd:21:21:1e:6d:
         52:9b:8f:a9:dc:35:e1:06:8b:2b:3e:75:c2:67:b8:6f:b8:34:
         24:1a:ff:c2:03:78:2a:36:00:16:4c:de:58:1c:ad:2a:dc:c4:
         cf:1a:0a:8e:97:49:e0:43:7f:04:00:3d:36:c1:f2:64:b6:77:
         d9:b7:35:9f:71:99:b5:75:a2:79:45:44:80:ad:62:94:7f:eb:
         b0:da:f5:16:ad:d8:6e:b5:26:c7:04:95:5b:16:fe:3c:51:b7:
         0e:5b:8f:9d:6d:18:66:79:81:6e:17:28:7f:71:8d:2b:46:97:
         7c:ab:5f:87:dd:c7:7a:9d:25:e4:9c:42:dc:9a:e5:81:5b:df:
         75:3a:b6:bd:99:93:0f:28:58:a3:ee:9c:b4:3e:0f:f6:cc:56:
         b7:1f:77:6b:c9:6c:eb:ba:ea:d1:5b:0d:e8:fb:a5:66:d5:35:
         7e:61:12:ec:03:53:66:c4:f9:01:2c:9a:8a:fb:29:d5:fc:05:
         60:8a:52:38:45:01:1f:a3:00:11:8e:ca:f9:2a:08:45:ed:f7:
         c0:44:67:15:25:ac:0f:0e:bb:87:e7:24:28:2b:fd:ec:f3:0c:
         f2:12:76:cf:d0:83:22:a4:88:0c:83:20:4a:1f:7c:28:f2:d1:
         f8:c6:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----