Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a8b61821-4c64-448c-91eb-241e2326e11e.roa
File:                     a8b61821-4c64-448c-91eb-241e2326e11e.roa (raw, json)
Hash identifier:          p6XZC1FJ4ZsK8Bbnj88yCxJwN9Gulggw7Z5t0oaQXCw=
Subject key identifier:   F3:2D:FD:C6:58:5D:23:82:10:F4:BB:F0:1E:80:D7:9B:F3:F5:B5:4D
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       04B1DE2FD76451F44A8367874666C1FACB1C51C8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a8b61821-4c64-448c-91eb-241e2326e11e.roa
Signing time:             Fri 26 Apr 2024 00:00:00 +0000
ROA not before:           Fri 26 Apr 2024 00:00:00 +0000
ROA not after:            Fri 31 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2a01:578:1400::/38 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b1:de:2f:d7:64:51:f4:4a:83:67:87:46:66:c1:fa:cb:1c:51:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Apr 26 00:00:00 2024 GMT
            Not After : May 31 23:59:59 2024 GMT
        Subject: serialNumber=f14fc4748a12d75e6cdbc062eb5a2da3c90636926bee5aa994fb3bf2e6024c10, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:7b:59:3a:c6:d2:6a:ea:c3:2e:a1:ac:ee:
                    89:7b:25:e8:eb:f3:e0:00:73:8e:3b:9d:fa:9b:70:
                    d1:9b:2b:9b:e7:23:81:dc:ad:52:11:a7:1b:ba:4a:
                    73:8d:b9:aa:f8:f7:cf:e6:78:0d:d8:56:aa:ab:a0:
                    84:0e:91:8d:75:1f:bb:0a:48:1e:a7:bd:09:b6:91:
                    c1:89:ba:98:75:0e:33:4e:a7:59:41:cd:d4:7b:08:
                    9b:e3:a1:5e:c5:e9:a3:12:47:78:6b:cb:08:ed:c3:
                    f3:51:58:7a:a5:f9:43:f9:1a:13:eb:18:01:6f:4a:
                    89:6f:eb:3f:5d:ea:05:f5:16:07:69:cd:a2:14:06:
                    26:71:21:2a:ab:52:6c:50:29:bf:6e:1c:73:69:ad:
                    8c:ae:5e:c4:40:68:3b:e2:bc:7f:c5:51:2e:e4:0a:
                    f5:aa:5a:7f:0a:a4:e8:af:26:ed:42:ec:a4:56:fb:
                    af:47:02:d2:9f:1e:1a:92:5d:18:d2:e2:9f:bf:ba:
                    28:3b:fa:b1:f2:20:3a:b0:c4:03:b2:4b:a7:d0:28:
                    d1:b1:79:f2:e8:e1:12:40:89:30:18:d9:a0:ef:68:
                    8a:e1:95:dd:e3:69:6d:5c:df:23:ab:3f:e6:a7:36:
                    ba:00:d0:27:e3:fc:24:ef:b6:c5:ea:0c:f5:76:d3:
                    c4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2D:FD:C6:58:5D:23:82:10:F4:BB:F0:1E:80:D7:9B:F3:F5:B5:4D
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a8b61821-4c64-448c-91eb-241e2326e11e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:578:1400::/38

    Signature Algorithm: sha256WithRSAEncryption
         32:27:c7:4d:4e:bc:1f:d8:92:aa:4e:9d:cc:4f:2f:e3:27:56:
         35:72:13:e8:58:88:dc:6a:e5:43:cb:e4:b8:3f:d5:b9:ce:30:
         81:ae:43:f9:a8:d5:29:d1:1e:23:2d:5f:23:51:f9:ce:c7:d6:
         8c:da:93:fe:6a:01:ff:f3:1b:7c:ad:4a:6b:de:d9:40:a0:cc:
         37:42:ea:7e:cb:49:aa:f2:75:62:ba:51:b8:a8:9e:9a:84:81:
         13:8a:ec:97:0c:8c:ac:8e:b4:6b:8f:33:b1:c2:8e:87:99:6c:
         f3:0c:ad:59:14:08:d2:62:c5:b4:53:74:9f:24:1c:0a:87:ab:
         5a:89:0f:8e:ca:53:3b:f2:b4:97:48:65:b0:6b:09:50:9a:53:
         43:83:77:d2:04:b0:fc:45:d8:94:a4:17:8c:05:97:a8:f3:08:
         1d:8f:2e:4c:25:68:70:33:51:96:e8:b1:1a:5b:16:e1:ba:c3:
         aa:4c:48:26:c2:b2:76:50:b6:44:ae:98:ab:9d:a3:fd:4e:54:
         05:3b:33:e5:a1:fc:b4:00:96:7b:4a:74:7a:35:d9:3a:26:ea:
         a9:99:70:36:e5:e8:a4:ac:dd:f9:3f:85:e6:1b:b8:43:08:7a:
         3c:34:4d:1f:05:f0:9a:c3:a9:bc:1a:44:25:6e:76:7e:62:19:
         92:c4:5a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----