Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
File:                     87659113-4050-43f4-ade6-cfd7a3483d5c.roa (raw, json)
Hash identifier:          tZu6sB6VsxQ711RDUqgFUG0Ri880Qk9T8bJ3wrSt47g=
Subject key identifier:   50:12:5A:5D:6B:87:93:28:55:EF:B4:6D:54:AE:D7:EC:B7:F8:69:47
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       04AE8CCFF200EBE2EE58BF48DA0000D8F41EBE69
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
Signing time:             Fri 11 Jul 2025 20:20:15 +0000
ROA not before:           Fri 11 Jul 2025 20:20:15 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d078:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ae:8c:cf:f2:00:eb:e2:ee:58:bf:48:da:00:00:d8:f4:1e:be:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 20:20:15 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=04a6f208712388e14b9d790c6c657f95fea760f389bf734f516df120d1990ea3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:d2:6f:7b:17:ae:9a:f1:a8:e6:38:14:fb:
                    5a:6d:5a:cb:40:ca:a2:e6:06:e1:e5:fc:e9:33:41:
                    2d:82:9d:90:e3:57:84:01:b5:f7:a2:af:89:c2:16:
                    18:5d:27:30:20:64:8a:27:58:d8:d9:3d:2f:fd:b3:
                    b2:2e:0f:a4:06:07:df:fa:6b:37:90:d3:5e:94:74:
                    7d:ff:2f:18:bb:f8:89:58:bc:b8:ff:96:d6:2d:95:
                    49:07:23:a6:ee:06:85:c5:80:ab:d1:8c:6f:bd:c9:
                    60:65:5d:45:1c:a6:91:35:eb:b3:78:68:2d:22:e2:
                    b1:d1:6c:d8:a8:c4:8f:f3:a0:74:fe:b8:96:9a:9d:
                    19:a2:79:bf:e3:5a:12:89:7a:88:24:62:54:65:16:
                    53:5e:a0:be:9b:34:a0:9c:4d:23:03:42:5d:13:8e:
                    7f:89:2a:89:68:ff:d1:f7:3f:f9:78:05:b3:15:c2:
                    6f:5a:be:49:34:de:38:b6:bb:a8:5b:f8:e8:3a:ca:
                    fe:72:2b:c6:20:1e:df:6a:6a:aa:0a:8e:b2:a0:5f:
                    9d:ad:37:9f:cb:97:82:84:af:25:f4:1c:5b:98:50:
                    b3:08:96:1f:96:ac:de:04:55:bd:8a:25:51:9c:96:
                    7b:99:7c:1a:81:32:ab:57:20:aa:a4:d0:4c:6d:94:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:12:5A:5D:6B:87:93:28:55:EF:B4:6D:54:AE:D7:EC:B7:F8:69:47
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d078:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:b8:28:89:11:0b:05:42:39:ff:9d:d4:b8:0a:72:68:75:28:
         ae:ed:46:f2:60:09:8b:04:fb:1e:de:58:a5:87:b3:4e:e3:4a:
         14:97:13:80:e8:39:68:78:9f:4b:c9:df:8c:27:df:89:24:82:
         23:a4:d3:e9:f3:f5:7e:7b:e3:90:6c:fc:ee:57:e9:4c:fb:a9:
         5c:11:d3:e4:60:91:33:e1:2e:14:08:2d:d6:ff:bb:87:39:a4:
         ac:12:93:47:6f:9e:65:09:18:db:de:51:cf:7e:b7:b8:03:0d:
         0b:78:4c:b2:64:00:49:1c:8d:9e:26:43:49:26:f6:3b:0b:2f:
         7f:88:83:9c:68:65:f6:c1:47:85:17:7a:44:ba:12:b4:9e:77:
         6d:d6:df:2a:73:fe:c2:74:50:28:8f:6e:16:23:4a:ca:b2:7c:
         29:4b:5a:24:44:c7:8e:b7:74:84:bf:c3:0b:7a:2e:ab:c2:2c:
         10:68:98:00:af:c0:e3:d1:c8:ef:89:8b:ce:73:6a:4b:07:4e:
         43:fd:8c:cb:89:e6:1a:ec:4a:af:16:e8:7e:24:36:75:fd:10:
         d0:e8:e1:e0:31:b6:58:82:35:f5:b8:c0:58:4b:cd:93:76:1a:
         38:98:fc:9b:73:55:e5:73:b9:95:af:91:bc:37:d3:e6:95:e6:
         fa:e6:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----