Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa
File:                     b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa (raw, json)
Hash identifier:          uQ/eei3CC+jFqvsPgDSQU/8jHXfv61DJUbvXSS/RrqM=
Subject key identifier:   0A:11:39:4F:75:49:7D:B6:00:26:6C:B8:98:03:2C:C6:E6:DD:0D:6C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       026E927FC881280D4696775C291D465DBF9CD1AF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa
Signing time:             Fri 25 Jul 2025 16:50:04 +0000
ROA not before:           Fri 25 Jul 2025 16:50:04 +0000
ROA not after:            Fri 29 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d059:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6e:92:7f:c8:81:28:0d:46:96:77:5c:29:1d:46:5d:bf:9c:d1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 25 16:50:04 2025 GMT
            Not After : Aug 29 23:59:59 2025 GMT
        Subject: serialNumber=c56272df657980b889f08bbfc28eb687a6c0012742354b60fe8e950c2dd8a2d6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:12:42:b4:da:21:d3:de:43:21:ce:d9:d8:
                    86:54:d2:1d:0e:14:65:0a:53:3e:ae:98:3a:41:4e:
                    3c:53:bc:c1:ce:ec:26:d3:54:68:cc:78:2b:ba:81:
                    01:82:4f:b0:aa:69:6b:26:e6:96:bf:bf:bd:a0:7a:
                    41:13:68:24:e8:d9:fe:da:53:8d:5b:0c:ce:02:5a:
                    77:15:e4:d9:de:86:6f:c8:0b:88:c5:6a:86:b4:4b:
                    48:7c:ba:ff:55:26:87:dc:e3:a6:dc:3a:95:01:20:
                    cf:3b:bf:b4:64:b8:f7:67:f0:f4:6f:62:19:d9:51:
                    8b:7f:e6:d0:56:d7:f8:c4:cd:20:4d:02:ea:49:ae:
                    10:2c:bd:e0:6e:99:9e:59:fe:2c:ce:db:99:46:0c:
                    8d:4a:a5:ab:9d:72:ba:4e:0a:a9:04:f1:12:06:09:
                    7d:d6:a9:b9:a9:70:09:c2:d9:ea:98:13:32:8f:78:
                    59:2d:a5:92:01:4c:3f:d0:9a:3f:30:bb:5a:00:0f:
                    23:2a:b6:e0:a6:47:0b:dd:be:99:fb:36:78:96:ca:
                    77:98:e6:07:a3:08:80:65:39:91:5e:b1:54:12:75:
                    fc:f8:18:74:05:22:10:4c:66:98:d0:21:21:9c:cc:
                    cb:47:75:57:ca:e6:5f:30:57:9a:f0:1b:b3:51:5b:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:11:39:4F:75:49:7D:B6:00:26:6C:B8:98:03:2C:C6:E6:DD:0D:6C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:d1:4e:f3:57:f5:69:14:ec:26:f7:57:df:50:d0:fd:4d:cd:
         02:b4:9a:dc:c4:07:07:b1:88:89:2f:02:d1:ec:53:4a:2c:bc:
         a6:e8:75:11:55:c6:3b:da:b0:2d:37:2d:34:c0:df:1f:65:63:
         c6:5c:82:c2:6e:a9:39:f4:39:04:6b:71:01:7f:2d:d1:93:f5:
         7f:b1:ea:c9:fa:3b:77:9e:35:bb:9c:4a:fd:8b:49:be:69:c6:
         fb:65:60:cc:d6:74:ee:e6:2d:f0:8d:99:23:01:5e:49:66:bd:
         a5:5b:79:e6:e5:10:3b:7e:7a:9f:45:d6:a4:83:4d:50:9b:6c:
         1d:6d:37:18:97:f4:a2:8a:6c:b9:39:9d:2b:96:3e:1e:08:0e:
         e4:cf:9e:33:07:ac:96:5e:27:3f:5a:c6:d0:09:40:2e:bc:73:
         1b:97:ce:08:6c:84:77:da:d1:9d:e3:a4:93:33:b3:2f:3b:13:
         61:d2:0a:02:e1:f6:d8:c6:04:26:51:e1:bb:28:b5:1a:f9:47:
         16:30:88:54:f5:a3:0b:df:fe:6f:f5:da:43:3d:d4:12:c3:a1:
         a3:36:93:5a:d7:9b:72:02:c3:91:82:dd:61:7e:85:21:6f:b2:
         8b:36:9a:d3:81:5d:7d:8e:b8:96:b7:fd:07:11:2b:0b:5d:26:
         f6:db:83:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----