Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa
File:                     25b2b0c2-5313-4108-9379-3a551ea46c87.roa (raw, json)
Hash identifier:          ERTKT0PBa61qq3ezos+UFN4ZkhvNfwM/cBze9YmxxNU=
Subject key identifier:   C3:26:AE:89:88:E0:54:0A:0A:AC:0C:AD:F7:12:5C:49:51:E5:A4:2A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       322B42F71C1B14494DB284BA4594EC13C1DAB054
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa
Signing time:             Fri 25 Jul 2025 16:50:40 +0000
ROA not before:           Fri 25 Jul 2025 16:50:40 +0000
ROA not after:            Fri 29 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d059:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2b:42:f7:1c:1b:14:49:4d:b2:84:ba:45:94:ec:13:c1:da:b0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 25 16:50:40 2025 GMT
            Not After : Aug 29 23:59:59 2025 GMT
        Subject: serialNumber=ff03d099747f7f13b9a55417efe0f52db630b8cec64890871a109ba0e5f4cb24, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:cf:9e:f5:65:27:39:e3:ed:0c:07:da:03:
                    f8:94:9e:a2:e5:f7:1b:9d:35:3a:b8:4b:1a:56:61:
                    8a:4c:17:eb:86:ae:cf:d9:87:af:ab:c9:f0:10:1b:
                    a8:9c:e8:ac:56:28:d9:cc:06:85:28:f2:ec:12:41:
                    2a:fb:8c:b8:c7:50:20:f4:8c:ec:a5:4d:7e:fa:2a:
                    4a:e5:86:a2:ee:b0:17:88:ae:04:50:ca:6b:bd:0d:
                    a5:e8:61:c7:4c:e2:a7:60:b7:c2:5f:29:2f:88:0c:
                    3b:a2:18:f9:8a:cf:52:e4:0e:5f:2d:b9:05:e1:37:
                    66:6b:8b:15:db:ef:2a:c4:3b:17:d9:56:4b:43:97:
                    83:0d:1a:c0:0f:88:7f:1c:f0:ce:84:f8:dc:a7:e4:
                    14:7d:c2:42:53:3e:59:fa:0a:e4:c0:01:25:c8:8c:
                    64:eb:b1:a6:e5:77:b0:9a:08:3d:02:a2:5a:d7:25:
                    18:1a:fc:3e:76:22:de:7c:25:15:dd:f4:52:7f:58:
                    74:68:c8:8d:47:d6:aa:d3:3d:1c:1d:68:6b:1d:26:
                    c4:8a:28:dc:20:f4:3b:88:1e:fc:80:af:1e:5d:f2:
                    75:18:2b:3c:76:9d:64:78:43:59:0c:2a:30:73:1d:
                    e7:80:63:83:dc:a0:25:de:f7:ac:32:76:c9:29:c4:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:26:AE:89:88:E0:54:0A:0A:AC:0C:AD:F7:12:5C:49:51:E5:A4:2A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:08:79:b4:73:e0:84:b8:d7:00:b7:13:55:7c:9a:24:08:f9:
         74:bb:5a:5a:af:31:cb:4b:88:de:d0:ff:98:9b:c2:b5:22:27:
         a2:ab:3e:50:b4:05:12:11:ba:b6:b0:ea:bc:fa:a1:5b:f3:cb:
         ee:7a:50:46:60:bd:59:e0:3b:26:e4:2a:4f:e5:ec:23:39:78:
         96:5b:cf:fa:9d:22:85:53:98:00:85:03:b7:25:3b:bc:a4:b5:
         4c:19:34:c7:d8:70:79:23:a0:a8:fa:8c:27:8e:0f:8a:ba:0f:
         e3:e6:6f:a9:6a:a4:86:ec:d9:7f:82:10:72:fa:74:c6:11:b7:
         cf:2e:f7:fc:d2:a5:a0:02:1d:65:ad:91:f9:f5:3a:5c:f8:b6:
         61:6e:ef:24:ea:4a:84:a0:01:23:25:71:37:6a:c1:6c:7a:2d:
         30:bd:6b:59:25:c1:1c:77:01:4a:a0:fd:3e:52:5c:5b:9c:39:
         f7:e2:fc:90:23:8f:a3:79:f1:5c:9e:82:0e:3e:7d:35:7f:2a:
         11:95:db:eb:9e:d9:cb:55:9b:eb:b1:a2:53:b0:5b:7f:45:3e:
         6a:c0:c7:59:ce:cc:b4:d8:5b:3b:29:24:98:16:f4:b7:62:ef:
         ba:f6:62:5e:7c:64:3c:fb:42:ad:1a:42:7a:32:13:80:8d:13:
         ec:57:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----