Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/408e49db-4fbf-4903-9de9-a7d373730676.roa
File:                     408e49db-4fbf-4903-9de9-a7d373730676.roa (raw, json)
Hash identifier:          0zbBkikZBtQ7jeFuZw7K3ot8OUNp9B8K+Jajl12QnIw=
Subject key identifier:   AD:C5:EA:31:30:85:E9:F3:34:16:C6:CF:6D:91:9B:E5:3C:A8:A3:C8
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7B5C7CCC7E17A0DC08814F510FEA2AA1E7EB6AFB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/408e49db-4fbf-4903-9de9-a7d373730676.roa
Signing time:             Tue 20 May 2025 19:30:25 +0000
ROA not before:           Tue 20 May 2025 19:30:25 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d077:90c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5c:7c:cc:7e:17:a0:dc:08:81:4f:51:0f:ea:2a:a1:e7:eb:6a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 20 19:30:25 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=9f195369ba269d7d3b10670d8f6c4573a218881573065ed04264f0d626f70189, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b5:d9:b2:c2:a8:41:43:94:eb:62:21:c0:fd:
                    fe:ce:40:6c:b4:3d:e8:5f:9f:aa:4a:98:d8:24:d9:
                    bd:f0:7c:39:a8:64:75:fc:67:60:e2:10:b0:40:38:
                    8b:87:4b:78:2a:35:1e:3b:f2:79:b1:dc:ac:f6:a8:
                    e8:53:29:73:24:93:66:59:ef:d3:0f:f8:77:ed:01:
                    d1:e8:79:29:9f:51:aa:6a:d9:16:f1:70:15:a3:0e:
                    0a:28:7a:26:05:f5:c9:1b:a7:58:57:20:e3:ae:18:
                    3f:7e:dd:e0:73:d3:9f:fc:63:9c:f6:b3:0e:ce:20:
                    ca:6b:65:ea:6b:7c:4d:2c:80:7d:b2:2f:90:06:52:
                    6e:7f:d0:c2:f6:be:31:2f:c0:33:d0:ba:fc:40:6f:
                    26:5e:5c:2c:51:21:ba:78:b4:8c:f8:0d:fb:5c:aa:
                    6d:05:21:4d:e9:43:54:36:02:c3:f0:4b:8a:46:82:
                    c0:16:c5:b8:74:2f:3a:2c:9d:4b:cc:4d:3f:75:a4:
                    0f:7e:5f:21:b4:b1:2b:2f:b0:da:1e:30:aa:d5:40:
                    13:5c:f4:b7:bb:c9:5a:95:15:ae:89:4a:9a:bd:c1:
                    65:e1:57:d8:89:0f:51:c3:85:52:cf:4e:0a:f7:3d:
                    07:17:63:c8:6a:6b:dc:7a:48:15:6a:ee:88:1c:bc:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C5:EA:31:30:85:E9:F3:34:16:C6:CF:6D:91:9B:E5:3C:A8:A3:C8
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/408e49db-4fbf-4903-9de9-a7d373730676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d077:90c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         bd:f1:2f:19:67:db:bb:20:ca:e1:a2:e1:3f:bb:e1:31:7a:1e:
         83:7e:a4:f7:44:0e:8a:b2:a7:80:6c:1f:55:38:ed:5a:33:96:
         f4:99:e4:79:4e:3b:f7:78:5e:fb:2e:e4:9d:4a:2d:41:87:93:
         d3:c9:97:9c:32:64:a3:9c:42:ab:58:9c:1a:5a:24:dc:ff:76:
         62:bc:7a:58:68:9f:7e:3a:d9:4a:8d:1e:89:be:0c:a0:d4:ba:
         ef:5c:3e:89:62:8a:58:13:fe:40:17:b8:96:51:8b:17:d9:31:
         3e:1f:d8:e9:bd:9b:66:5f:17:69:29:3c:20:e1:eb:96:98:8b:
         94:04:6b:6f:f7:3c:f2:94:13:19:df:c8:20:00:d0:f1:41:3a:
         a7:ce:ed:4d:d4:e7:ee:d9:6f:14:33:83:3f:37:14:c1:9e:3f:
         70:14:2a:dd:87:ef:aa:97:79:c2:5d:f3:f2:ca:77:d4:3b:13:
         e0:d4:b3:f6:c8:e7:ed:77:cb:da:c1:b3:24:91:db:51:cf:3d:
         0e:4f:3b:f1:0b:e7:f9:1e:47:48:53:39:68:d6:99:67:88:ec:
         07:86:e6:6b:57:d5:0b:5f:6f:e5:86:be:4f:85:4d:0f:56:21:
         70:3b:88:ce:14:a2:09:37:f9:8e:22:07:cc:90:b8:fc:53:86:
         32:3b:18:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----