Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
File:                     6fa185be-42e8-4c62-ba43-464d0598c2ee.roa (raw, json)
Hash identifier:          uaRMtSYdRuw9kjq0EkWg4gyTmi6HscNU/sJxP9/N8B0=
Subject key identifier:   7D:51:56:8B:08:F0:EB:9B:16:D6:86:49:0A:76:4C:F5:86:CA:A2:83
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       064445365F173C7126F4C266A6A643A2B209C4F7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
Signing time:             Mon 21 Jul 2025 16:50:09 +0000
ROA not before:           Mon 21 Jul 2025 16:50:09 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:b080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:44:45:36:5f:17:3c:71:26:f4:c2:66:a6:a6:43:a2:b2:09:c4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 21 16:50:09 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=41e3834d022ceb297d30e3d8597c56bf4d411ac781c7133dbbfd9368246b27f1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:00:cd:ca:c0:7f:60:11:5f:49:4e:ca:27:
                    5e:bc:a1:45:76:5e:3c:f3:29:a0:00:04:c2:cf:37:
                    1c:d4:ac:6a:b0:20:1d:60:0c:7c:9f:8e:88:e0:90:
                    b2:34:b1:f0:06:37:95:3b:04:d1:48:ce:a6:f1:b4:
                    73:95:c8:cc:35:58:fc:62:41:27:2c:cd:fc:82:4e:
                    cd:e7:91:cb:6d:4b:0e:a9:c0:ff:fc:1f:ef:8e:e4:
                    04:b4:8f:10:3d:fc:da:cb:b8:c5:ad:9c:14:69:cc:
                    9f:11:4f:79:53:f8:0f:a0:b7:95:21:71:df:32:41:
                    38:dc:f0:e9:0e:71:72:7e:36:df:86:44:ce:4c:84:
                    a7:e3:40:4a:ae:5b:b2:d4:08:e1:9f:5d:e6:19:96:
                    93:fb:a9:b7:c1:0c:61:7c:95:62:ae:ff:d8:0f:08:
                    cb:d5:4d:56:1f:56:2c:23:be:71:73:3e:2b:04:69:
                    84:13:fc:51:53:f8:29:74:97:e3:91:ce:49:41:28:
                    aa:94:f6:34:b9:34:72:cf:fa:cb:e1:aa:0b:42:5e:
                    00:22:ac:44:b5:7a:50:4f:2a:c7:95:d7:c3:ca:c5:
                    da:66:47:c1:38:36:c5:89:82:6a:63:05:43:f8:97:
                    2c:52:22:72:d9:9d:87:92:dc:0b:d5:19:43:ec:a5:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:51:56:8B:08:F0:EB:9B:16:D6:86:49:0A:76:4C:F5:86:CA:A2:83
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:b080::/46

    Signature Algorithm: sha256WithRSAEncryption
         a3:f9:87:28:31:bb:d2:69:c1:26:46:a7:4d:56:52:1a:07:2c:
         18:2d:58:56:b8:01:44:59:49:1f:f3:37:d3:86:d7:e0:f5:63:
         dc:3e:07:4e:2e:13:f2:56:a4:92:5a:55:e7:03:21:1c:ab:7e:
         9c:8a:f7:d5:9b:a6:ff:ee:38:36:8f:f0:71:4c:e8:af:46:a0:
         f9:79:b4:eb:b0:3c:2c:9d:5d:4d:0f:b7:97:cc:7a:19:ad:63:
         25:ef:22:5e:77:1d:14:a2:1d:02:f6:49:07:f0:51:f9:69:ad:
         e4:7c:ee:9d:8d:15:a7:a7:6f:c0:f4:0a:8f:a8:7f:24:ed:57:
         ee:ca:fd:ef:3d:cc:ae:f0:a6:b4:96:0e:3f:c1:f4:13:47:06:
         9e:13:2f:c0:92:4a:41:39:69:14:c0:0f:f7:b9:15:d8:c8:fd:
         af:f4:ec:03:ed:3e:a0:4a:e8:76:6a:50:32:0d:5b:82:aa:ea:
         b5:e7:43:8f:b8:20:24:28:6b:b6:f2:60:19:b2:ba:e7:4d:f8:
         c9:f9:65:71:44:4a:4b:d4:0a:e2:a1:56:13:35:c5:49:7c:63:
         3a:16:60:c3:4f:1a:3e:af:d9:ad:06:1d:49:00:45:4c:14:41:
         ac:85:61:84:78:87:64:ce:24:75:a1:a8:0b:48:39:43:59:a2:
         06:e7:16:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----