Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
File:                     4581b00e-602d-4a4b-b191-1af16885c541.roa (raw, json)
Hash identifier:          +3qflb+BFAND/gFPU68votw0sD+Ie4SmE3hGDaYjUx4=
Subject key identifier:   7E:36:21:CF:98:D7:8A:5E:50:68:87:94:A5:AA:49:D9:23:94:98:B8
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       22888ED3F4BCD25DDEBC375DC0A72F28155FA867
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
Signing time:             Mon 21 Jul 2025 16:51:35 +0000
ROA not before:           Mon 21 Jul 2025 16:51:35 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:88:8e:d3:f4:bc:d2:5d:de:bc:37:5d:c0:a7:2f:28:15:5f:a8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 16:51:35 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=513c81f5a97389444fc4cda6fa8687a234767ca33d0df4ca886916eee8d6cc49, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:64:7c:7c:da:3c:07:f9:c0:f7:98:f6:2a:
                    61:a6:f3:41:d4:8d:79:9c:8a:55:87:d1:b7:3c:d1:
                    a2:b5:99:a1:3d:fd:33:a2:e2:40:67:6c:be:ee:75:
                    27:ed:17:c0:27:5f:92:36:7d:25:8c:0f:67:d6:c1:
                    60:f3:d4:24:79:84:15:de:2a:d4:8e:9b:98:79:b3:
                    0d:b5:3c:a8:cd:e5:ff:0e:36:ea:09:ac:83:eb:9a:
                    36:33:20:68:0b:f5:40:18:7f:6c:10:d0:09:a0:7f:
                    19:b4:29:b5:32:34:b6:1e:19:70:db:aa:aa:fe:e0:
                    d4:8c:6b:71:16:fa:f6:bd:40:1a:69:26:89:69:3c:
                    b6:bf:86:a5:be:99:0c:f1:a9:35:9d:ca:a7:64:05:
                    78:3e:93:7b:03:60:11:48:b7:43:6a:09:7f:fd:30:
                    a7:ff:b6:36:0d:e4:8f:7e:50:ae:c0:e9:c0:1f:89:
                    52:3a:c4:f3:9e:e7:7e:af:1c:ec:69:38:f6:06:59:
                    81:6c:a8:5a:78:e4:24:c0:3f:63:91:cb:e6:18:39:
                    49:1e:85:06:3f:3d:9e:e3:b6:28:ef:5f:2c:5f:b9:
                    48:08:27:87:7e:27:f5:0c:cb:0a:87:ac:0f:a3:55:
                    ab:49:62:1b:0f:c9:fa:9d:ac:93:fd:7d:e5:ad:51:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:36:21:CF:98:D7:8A:5E:50:68:87:94:A5:AA:49:D9:23:94:98:B8
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:2e:2c:e0:bc:bd:e6:b7:19:28:8f:12:08:e5:7a:18:d6:74:
         81:2a:93:2f:e9:e1:50:a6:27:99:0f:9d:de:d3:79:7d:96:d9:
         58:e6:fe:67:37:8f:59:4e:55:1c:3e:b0:5a:fe:97:35:5f:1c:
         1f:3b:4c:68:c2:f2:cd:84:82:c3:0c:d2:e9:4b:cb:b1:8d:23:
         f8:54:dd:cb:ba:93:af:f3:3a:5c:fc:27:64:2e:6c:61:82:09:
         17:1f:49:bc:d7:54:ec:c3:2a:1a:4d:a2:0a:2c:7e:75:cb:f4:
         5a:41:d9:66:4f:e4:bb:f1:f2:eb:82:18:dc:1e:d4:49:6e:6c:
         54:06:83:54:15:ec:e4:72:9b:46:cd:2f:09:a8:8e:d4:77:d1:
         50:cb:54:54:3e:82:91:4c:a5:6f:6e:1c:c7:d4:e1:44:7d:3e:
         23:fa:a1:ba:26:7a:b7:4a:ea:51:2c:a4:9e:c1:ee:74:00:aa:
         eb:ba:25:1e:66:b5:57:55:61:09:b0:f4:94:d6:54:60:92:d1:
         43:14:c2:9a:99:ae:d5:67:fd:75:17:87:b3:1a:c0:96:50:40:
         b5:69:43:9c:db:3d:8b:c1:76:21:b5:d7:d0:7d:17:90:0a:1f:
         27:d0:73:c3:38:96:e9:85:91:f1:14:29:07:7c:37:63:24:b3:
         60:b8:6a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----