Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa
File:                     7cde339d-568f-4b5b-98d4-9eca268d8a43.roa (raw, json)
Hash identifier:          M3i4JpfYGYrxhu3hU991dMBqLw9KEmTQBoUrrMoQYC4=
Subject key identifier:   74:54:11:2F:8C:BC:6D:CE:37:13:E1:6F:8B:3A:1A:14:70:63:36:09
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       028A8C36EE8FB178DA984F7C9DF51E135C224C4E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa
Signing time:             Fri 25 Jul 2025 16:50:11 +0000
ROA not before:           Fri 25 Jul 2025 16:50:11 +0000
ROA not after:            Fri 29 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d074:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8a:8c:36:ee:8f:b1:78:da:98:4f:7c:9d:f5:1e:13:5c:22:4c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 25 16:50:11 2025 GMT
            Not After : Aug 29 23:59:59 2025 GMT
        Subject: serialNumber=74a682e6c674ade326d7dde318428aa8531f19a7e22935c9fdfc5cac8faa2af7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:e0:50:6b:af:7d:ae:db:9b:1f:40:2e:05:
                    99:b4:7b:a1:e9:51:05:fe:2b:86:7d:6e:e0:8c:f9:
                    b2:a5:e8:6d:9a:1c:37:97:ff:d1:97:00:21:9d:41:
                    8e:40:17:c4:b2:07:34:73:9d:72:24:ba:43:0e:68:
                    26:af:5c:0d:73:07:3c:46:a1:bc:ca:26:e4:6b:76:
                    b4:55:d6:a7:d9:62:98:05:c9:82:e2:45:17:e4:88:
                    d2:59:ca:de:b1:2f:0e:c3:8c:e9:5e:3d:58:b1:46:
                    05:16:47:71:1d:17:0b:0c:14:dd:19:e4:fa:25:76:
                    ad:ce:09:e9:71:12:ba:cf:58:67:ad:07:03:db:e0:
                    19:52:70:a6:91:24:0d:0b:b4:83:03:16:32:63:68:
                    a1:3e:49:7e:1e:d6:39:ff:1b:c4:64:33:cc:bf:4d:
                    fc:e5:0e:5e:92:88:3d:48:b3:e3:2d:a3:f2:62:42:
                    f4:e7:4b:f6:0b:cb:cc:71:5c:b1:a2:60:ce:68:3d:
                    72:0a:1e:fa:c3:c6:4b:98:04:f9:87:28:00:23:4c:
                    26:e9:b3:cd:e3:c3:3b:98:07:c5:7e:d4:f1:d9:e8:
                    ae:0c:cc:32:9a:73:e8:d7:1e:4a:fc:f5:94:94:3b:
                    6c:6d:92:39:c1:7c:16:56:01:aa:92:7f:08:a1:3f:
                    b9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:54:11:2F:8C:BC:6D:CE:37:13:E1:6F:8B:3A:1A:14:70:63:36:09
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:2c:3a:d0:d7:53:12:00:a8:a4:dc:68:e7:b2:41:53:6d:9c:
         2e:35:f8:33:83:9d:38:e4:a0:58:aa:57:c9:6d:ea:e5:07:f1:
         b5:6c:e8:34:f2:ef:7d:22:89:06:73:c1:47:4c:02:fa:85:7c:
         e2:30:57:7c:9d:45:68:20:f4:5f:f6:1e:ff:39:6a:e0:ab:a0:
         47:6b:c2:8d:a3:de:bf:54:0d:d5:d2:28:f0:a5:50:e3:b4:d0:
         69:43:cb:3b:d8:8b:82:8b:80:77:6f:94:e9:6d:2e:e3:6b:0a:
         0e:44:38:f1:45:0a:62:35:d7:56:34:5a:fd:64:f7:cd:1f:06:
         7a:ba:41:f9:fa:ad:d9:a6:0b:ab:e6:94:13:3b:a6:e3:bb:c5:
         7b:a7:56:6c:8b:b4:61:fc:e7:39:73:80:41:7a:1e:d0:36:48:
         a3:93:ac:bc:17:5e:fa:14:c1:ed:b4:85:56:87:e3:85:cf:c3:
         43:c1:06:85:b9:10:54:9b:97:5b:c7:05:64:ca:2a:c0:e3:24:
         3c:5e:2f:90:2f:ea:87:9a:3d:8f:53:8c:5e:eb:a2:93:80:78:
         22:01:54:de:f0:a4:e9:04:8a:66:38:a4:d0:95:a1:34:31:a4:
         90:f1:82:6c:ff:f2:b7:e6:18:aa:82:4a:d6:21:de:6d:3c:10:
         c1:a6:dd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----