Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a96d9971-6d4e-47a3-9408-d633699b643b.roa
File:                     a96d9971-6d4e-47a3-9408-d633699b643b.roa (raw, json)
Hash identifier:          tt1pEoR1QMm7WqoOlDxD28LIjSWYY0jV2bM1Av/isXQ=
Subject key identifier:   B1:16:AA:99:95:6B:81:7A:E2:D3:F4:C2:01:77:CF:1C:DA:7C:07:FF
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       076F3D1A9C42119DE8824CA54C4B7BBC953C4BFA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a96d9971-6d4e-47a3-9408-d633699b643b.roa
Signing time:             Tue 20 May 2025 19:50:13 +0000
ROA not before:           Tue 20 May 2025 19:50:13 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07e:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:6f:3d:1a:9c:42:11:9d:e8:82:4c:a5:4c:4b:7b:bc:95:3c:4b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 20 19:50:13 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=c9711f11bd6b51d2635b5af18e806cea49d4688153d6abe5c1f4170b8754c46b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:db:b7:b8:78:ed:fc:4b:aa:16:e0:a4:80:
                    97:6f:c7:1b:9e:65:6e:0a:66:94:a2:55:d7:a9:9c:
                    ed:60:ef:7d:fb:c0:17:03:db:36:7a:05:c0:ec:07:
                    3b:da:c6:1b:c5:f4:f5:6d:b9:d7:3e:a5:fb:37:43:
                    e1:d6:e7:b4:2b:a4:ec:9d:ed:2e:13:2f:93:6a:63:
                    7c:c6:28:fc:ea:b9:9f:62:7d:8d:98:8f:d2:c6:bb:
                    5f:26:0f:fc:59:78:48:4d:16:e5:ec:fe:dd:01:9c:
                    3c:1c:68:a3:82:ef:ca:6f:db:78:02:d9:92:cf:4c:
                    bb:0b:97:93:46:5a:89:65:d4:b5:4d:e4:7d:b1:de:
                    b6:c8:d1:24:bb:fb:4b:ad:08:9b:dd:1a:a6:39:b1:
                    97:75:f2:1f:24:ae:07:ec:49:0c:af:b1:6f:db:a2:
                    31:8f:eb:e7:e4:82:d4:b0:02:3f:e1:c7:51:0c:86:
                    3c:28:29:3d:7f:85:3b:f7:da:cf:72:91:34:db:b2:
                    31:b2:c3:32:f4:e7:4c:14:65:9f:23:99:7f:83:35:
                    2a:a9:f8:73:9b:de:07:9d:41:16:71:97:4e:ba:df:
                    e7:32:a2:8e:45:9e:25:e2:32:6f:17:83:2c:5b:a2:
                    98:f7:d1:74:e3:d6:8f:7f:85:46:6b:7a:4b:95:c4:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:16:AA:99:95:6B:81:7A:E2:D3:F4:C2:01:77:CF:1C:DA:7C:07:FF
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a96d9971-6d4e-47a3-9408-d633699b643b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07e:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:b6:62:38:87:32:6e:98:41:d1:4a:99:cc:ba:55:55:c6:33:
         e6:ae:aa:bb:67:dd:cb:43:53:1f:3b:f0:df:7d:b5:cd:eb:cc:
         52:ad:31:89:81:a0:e1:74:6b:f9:17:b9:51:d7:19:40:a2:3f:
         50:dc:59:76:6e:e8:0c:02:e5:fb:8b:5f:e5:66:a1:ea:16:47:
         04:b5:08:39:95:75:d4:b8:22:25:54:34:5c:80:d2:95:98:7b:
         34:24:83:ff:7e:74:ab:50:ec:02:26:4b:ce:41:db:d2:aa:8a:
         5e:c5:04:59:ba:04:85:54:c9:8d:10:52:8b:9a:e2:d0:36:75:
         60:bc:45:93:a2:e8:f0:e1:78:76:12:05:b7:b2:15:e5:34:2c:
         90:92:36:a2:28:bc:0f:d6:81:fb:d0:00:bb:3b:23:ce:72:93:
         4b:6f:c6:e2:0b:95:ec:ee:8a:fc:82:a0:35:a1:1f:0d:57:d4:
         0c:e4:59:68:2a:18:60:8e:ac:44:0d:67:32:c1:33:d9:68:6b:
         fa:7e:8e:87:d6:3d:33:b8:96:52:77:4c:d3:e6:b6:f7:fd:eb:
         53:1f:26:29:6d:7e:57:89:58:38:c2:3b:22:7d:39:21:00:58:
         32:14:f2:81:c8:a5:32:df:23:a8:38:75:b5:13:eb:c5:4c:02:
         b1:85:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----