Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/780dce66-c0fd-40f4-9a09-0015d6bf272c.roa
File:                     780dce66-c0fd-40f4-9a09-0015d6bf272c.roa (raw, json)
Hash identifier:          7WVn7gZ0Q5iR6/I8ZuNnFJzwTpR0X+6KIhk9bc0R0Sw=
Subject key identifier:   BC:79:82:FF:48:49:89:80:D4:0E:42:43:F5:27:8A:41:C9:9B:1A:FF
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3F295088F4DDC8DAA115C00ACFEAB72B9AB4595C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/780dce66-c0fd-40f4-9a09-0015d6bf272c.roa
Signing time:             Tue 20 May 2025 19:40:10 +0000
ROA not before:           Tue 20 May 2025 19:40:10 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:90c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:29:50:88:f4:dd:c8:da:a1:15:c0:0a:cf:ea:b7:2b:9a:b4:59:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 20 19:40:10 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=e40eaa0311a60c0b7f1783f9fdc36e61112c80d64bb16061b1ca63a2a2f27c5a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c3:57:2e:3f:3e:e7:5f:81:02:ba:62:a2:ef:
                    90:d3:36:4b:8a:eb:6d:f6:99:ed:36:a2:3d:4b:c1:
                    ab:43:70:73:44:94:0e:0e:80:08:ca:d0:b8:0f:17:
                    e6:15:56:8a:f0:1f:2b:5e:f5:18:ce:b2:e4:3c:9e:
                    58:80:26:dc:6a:8b:fb:47:19:4c:68:6e:e2:66:e4:
                    9d:89:60:8e:d6:dd:8c:90:ad:2b:71:3e:58:0e:0e:
                    6c:ca:b7:7d:39:a9:1e:43:33:41:3a:66:69:82:53:
                    58:93:28:16:9f:d0:7b:64:fb:5e:ce:dc:a4:e8:06:
                    b3:39:dc:61:d9:9f:33:94:3d:61:53:63:74:7a:f9:
                    a4:f7:ff:bf:74:8b:50:5d:89:15:65:78:bb:e1:c8:
                    3f:1c:f9:97:0e:ae:27:34:40:05:32:2d:75:d6:ed:
                    4a:c9:2f:e2:81:d5:e2:2b:db:e6:12:a6:13:b6:98:
                    88:c3:96:66:e1:5d:30:10:fb:e5:38:3f:30:5e:5e:
                    0e:df:07:90:e6:cc:12:6f:b4:0e:fd:bb:cd:04:a0:
                    6b:d2:33:93:36:76:da:ba:36:ba:f4:96:55:11:f3:
                    1b:37:62:7b:8b:68:39:d0:c4:57:8f:34:d2:2c:c8:
                    cd:44:3c:fe:9c:61:69:6f:5b:7d:69:29:6a:d5:c8:
                    e1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:79:82:FF:48:49:89:80:D4:0E:42:43:F5:27:8A:41:C9:9B:1A:FF
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/780dce66-c0fd-40f4-9a09-0015d6bf272c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:90c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         35:ca:76:2c:f3:4b:08:f8:fa:29:e0:55:45:e6:4c:f7:07:c9:
         f2:c5:65:62:6d:5e:0a:20:fd:fb:77:8c:67:55:68:0a:1a:d7:
         b2:41:42:0e:aa:32:8e:f8:60:24:10:c4:a2:c8:6a:64:9e:c6:
         2c:90:b1:ba:8f:16:6a:fe:fb:89:9f:35:3a:87:62:1b:54:be:
         af:41:de:ec:d4:10:74:25:9c:45:b0:de:cb:3e:69:e7:97:df:
         ff:de:9d:d9:4d:1f:5c:f1:5e:9f:78:af:62:ca:5b:af:58:b0:
         5e:e6:3e:a8:85:4e:3d:be:a9:72:6a:55:bd:ea:6b:61:1c:18:
         58:63:ae:71:7a:9e:87:a6:5f:fd:38:7a:8d:a8:c7:4b:24:cb:
         62:7f:5a:b9:aa:ed:dd:eb:d1:8a:76:5e:c4:e0:20:7b:c7:60:
         90:f7:98:97:4c:6f:c0:58:12:1d:4c:0c:b1:10:bc:2a:05:e6:
         d3:2e:a1:6a:b8:59:f5:de:76:b1:24:2c:b7:56:95:cf:ca:89:
         24:4e:d5:9b:11:cd:c2:c6:96:c1:3e:b0:14:38:1a:b2:6e:52:
         8c:90:48:8e:58:f7:1e:db:89:81:7f:70:c8:52:48:76:73:20:
         f9:8e:b4:c2:d1:66:ca:c2:7a:e5:83:48:9d:ef:24:31:27:25:
         38:bb:98:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----