Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2e4c2934-9e54-49b6-bb41-7c76b504d78c.roa
File:                     2e4c2934-9e54-49b6-bb41-7c76b504d78c.roa (raw, json)
Hash identifier:          bbsDTi8pNrBxfBFH7PNHN9DCz8dDMssie5iV6qavB78=
Subject key identifier:   01:6A:C6:F0:70:2C:C2:91:25:7D:BA:65:A5:53:C0:50:A9:15:30:E9
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       7917EF81EDEEA362B708EF7CE817620583518897
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2e4c2934-9e54-49b6-bb41-7c76b504d78c.roa
Signing time:             Fri 08 Sep 2023 00:00:00 +0000
ROA not before:           Fri 08 Sep 2023 00:00:00 +0000
ROA not after:            Fri 13 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a01:578:1080::/41 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Sep 2023 08:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:17:ef:81:ed:ee:a3:62:b7:08:ef:7c:e8:17:62:05:83:51:88:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Sep  8 00:00:00 2023 GMT
            Not After : Oct 13 23:59:59 2023 GMT
        Subject: serialNumber=eb5efbde933180335a769f89f61b3e159d8584b2ebabe257266962054b7278aa, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:a4:8b:c3:dd:7f:83:13:c0:eb:df:8e:91:
                    e7:d6:0e:df:7e:b6:4b:63:40:dd:fb:a8:67:9c:44:
                    06:c5:ee:f9:3f:74:7d:87:7a:56:8f:9f:ca:31:f4:
                    3f:a0:6c:94:49:a6:04:b3:83:4e:75:57:73:d6:df:
                    72:75:18:a2:0e:a1:fe:82:b3:af:b4:0e:bb:1d:2a:
                    10:a7:af:d8:ac:40:2a:aa:5d:e0:a8:08:bc:27:25:
                    bc:22:01:d8:ee:1f:71:66:c2:27:d8:e9:c3:71:15:
                    ed:26:25:38:af:73:86:88:b1:46:3e:53:8a:ec:6f:
                    de:e4:90:2e:89:76:b9:6d:4d:98:b5:cc:4b:99:6a:
                    df:22:67:b4:28:87:fc:d1:d1:cb:a2:05:10:18:83:
                    09:54:9a:b7:81:91:75:32:23:60:d8:fe:25:cc:bb:
                    e4:db:21:f3:ef:06:d0:3c:6a:47:d4:c2:25:ca:3a:
                    58:79:2a:8e:37:de:f6:b5:fc:98:11:75:46:90:0c:
                    12:01:c9:ee:06:c0:92:f5:35:a1:c3:df:82:f6:59:
                    b8:6a:ae:1f:aa:ce:af:94:26:ce:9c:f5:18:f3:fb:
                    9e:ab:f3:30:7e:75:4c:00:28:a2:0a:1e:b4:ef:98:
                    6c:1c:7d:e5:40:cc:75:58:4d:6d:58:1a:ec:64:6d:
                    62:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6A:C6:F0:70:2C:C2:91:25:7D:BA:65:A5:53:C0:50:A9:15:30:E9
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2e4c2934-9e54-49b6-bb41-7c76b504d78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:578:1080::/41

    Signature Algorithm: sha256WithRSAEncryption
         51:60:97:1f:8d:ce:05:d3:25:0d:7b:f4:15:da:0d:d9:1a:49:
         2d:4d:b1:db:5a:75:55:c5:aa:b0:e0:2d:5b:d2:14:00:1b:c5:
         2b:6c:a6:7a:ae:23:9c:b1:0e:69:4d:0c:30:71:f8:cb:9a:0c:
         29:b2:48:4a:74:b8:38:b9:53:b9:c3:ad:df:46:72:ba:6d:cd:
         d5:d4:11:42:00:ac:42:96:ef:b2:66:0b:15:b2:39:55:0c:8a:
         07:68:7b:58:b6:98:ad:bf:24:46:fa:8b:d9:0e:60:86:fc:6d:
         86:9e:cb:04:3b:97:3d:64:72:85:2a:7e:7d:84:c0:ea:54:3a:
         ce:49:84:c8:22:6b:12:b1:c5:44:e6:5f:08:81:52:44:9d:86:
         20:ce:a2:38:81:47:0a:9c:d9:ce:a6:35:4a:1c:72:5b:4e:71:
         c7:ae:38:cd:1f:6b:c9:31:e5:32:d8:c5:13:2c:5f:28:a1:e4:
         93:73:85:ff:b5:06:13:0f:74:39:2f:a9:ec:f2:08:bf:8f:6c:
         84:32:bd:e0:7b:6d:5c:8b:0b:aa:c2:6c:16:08:e9:e4:dd:ac:
         a9:8a:ac:e8:45:14:be:f6:54:83:9b:9b:4a:b6:b3:4f:47:57:
         59:f9:56:3b:a7:7d:91:55:36:e2:ba:a2:35:0c:90:1a:ea:91:
         ed:d1:36:ae
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUeRfvge3uo2K3CO986BdiBYNRiJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yMzA5MDgwMDAwMDBaFw0yMzEwMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGViNWVmYmRlOTMzMTgwMzM1YTc2OWY4OWY2MWIzZTE1OWQ4NTg0YjJlYmFi
ZTI1NzI2Njk2MjA1NGI3Mjc4YWExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALEfpIvD3X+DE8Dr346R59YO3362S2NA3fuoZ5xEBsXu+T90fYd6Vo+fyjH0
P6BslEmmBLODTnVXc9bfcnUYog6h/oKzr7QOux0qEKev2KxAKqpd4KgIvCclvCIB
2O4fcWbCJ9jpw3EV7SYlOK9zhoixRj5Tiuxv3uSQLol2uW1NmLXMS5lq3yJntCiH
/NHRy6IFEBiDCVSat4GRdTIjYNj+Jcy75Nsh8+8G0DxqR9TCJco6WHkqjjfe9rX8
mBF1RpAMEgHJ7gbAkvU1ocPfgvZZuGquH6rOr5Qmzpz1GPP7nqvzMH51TAAoogoe
tO+YbBx95UDMdVhNbVga7GRtYokCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQBasbw
cCzCkSV9umWlU8BQqRUw6TAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MmU0YzI5MzQtOWU1NC00OWI2LWJiNDEtN2M3NmI1MDRkNzhjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHByoBBXgQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAUWCXH43OBdMlDXv0FdoN2RpJLU2x21p1VcWq
sOAtW9IUABvFK2ymeq4jnLEOaU0MMHH4y5oMKbJISnS4OLlTucOt30Zyum3N1dQR
QgCsQpbvsmYLFbI5VQyKB2h7WLaYrb8kRvqL2Q5ghvxthp7LBDuXPWRyhSp+fYTA
6lQ6zkmEyCJrErHFROZfCIFSRJ2GIM6iOIFHCpzZzqY1ShxyW05xx644zR9ryTHl
MtjFEyxfKKHkk3OF/7UGEw90OS+p7PIIv49shDK94HttXIsLqsJsFgjp5N2sqYqs
6EUUvvZUg5ubSrazT0dXWflWO6d9kVU24rqiNQyQGuqR7dE2rg==
-----END CERTIFICATE-----