Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6f7eb0e6-fbf6-4872-8a70-838cbba40e6f.roa
File:                     6f7eb0e6-fbf6-4872-8a70-838cbba40e6f.roa (raw, json)
Hash identifier:          RJDQ51IGha3ACOa8FRrKgC/R1rRcF6SKBzqmMb2Klj4=
Subject key identifier:   27:63:3F:66:53:3E:67:98:D1:2B:B3:01:FB:E6:36:7C:4F:82:76:B7
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       44F6FEABF1ECE27B0D4C14EC9EFBB7A89BD7CC9A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6f7eb0e6-fbf6-4872-8a70-838cbba40e6f.roa
Signing time:             Fri 08 Sep 2023 00:00:00 +0000
ROA not before:           Fri 08 Sep 2023 00:00:00 +0000
ROA not after:            Fri 13 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a01:578:1010::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Sep 2023 08:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f6:fe:ab:f1:ec:e2:7b:0d:4c:14:ec:9e:fb:b7:a8:9b:d7:cc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Sep  8 00:00:00 2023 GMT
            Not After : Oct 13 23:59:59 2023 GMT
        Subject: serialNumber=bbf360aba825de299457cea11638654e7cdc6ca0eb433db6d5f0070b03866c03, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:94:85:cf:5a:e0:56:5a:64:9c:83:15:8c:
                    72:d2:03:a0:71:9f:f7:27:0f:35:99:d9:5c:14:e2:
                    2f:2e:8e:cf:ea:43:a3:c9:3d:c5:9f:b9:18:3b:0b:
                    84:93:80:05:e1:22:47:78:ed:51:fa:a6:c1:92:f4:
                    cb:82:39:5d:98:ba:47:b4:24:ee:a8:d4:44:ad:db:
                    6b:ec:ca:9b:75:5b:5e:e5:81:1d:f9:c0:32:77:13:
                    b7:30:48:44:b9:ec:ee:49:32:b5:d2:05:a5:eb:f1:
                    ed:45:01:c0:70:ca:46:b1:7c:01:bb:90:c6:b4:f1:
                    9e:58:83:62:3a:30:6a:2e:9f:b4:26:92:42:bf:7f:
                    72:64:42:44:f6:5f:2d:91:6c:34:12:a9:ba:02:fa:
                    84:73:0a:7c:57:f4:58:45:9d:54:ef:3a:5f:46:9d:
                    06:1a:9a:3f:f7:58:c3:a9:15:98:1c:34:7b:4d:f9:
                    bd:46:7e:cc:4c:5e:56:aa:92:6c:62:3c:23:ed:e4:
                    01:e2:63:c0:a3:1d:3c:58:f6:74:80:3f:76:56:9b:
                    c2:ff:39:35:c9:82:fe:d2:db:c9:bb:68:46:15:b8:
                    84:23:1b:4a:44:47:16:95:6b:88:48:1e:3e:11:d7:
                    06:2d:62:83:bd:ef:98:41:fd:e0:ce:19:cd:92:f4:
                    b8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:63:3F:66:53:3E:67:98:D1:2B:B3:01:FB:E6:36:7C:4F:82:76:B7
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6f7eb0e6-fbf6-4872-8a70-838cbba40e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:578:1010::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:8c:fd:74:1f:80:da:20:58:ae:f9:4f:67:ca:86:0e:ba:46:
         0c:36:02:78:f3:02:b3:b7:d9:53:48:e5:0c:1c:13:ef:b9:10:
         63:ad:6f:4b:df:e9:81:27:af:d4:fc:0f:d3:af:77:35:ba:ed:
         d8:42:3b:f7:b7:da:53:95:6f:1f:2a:b2:c6:e5:1e:e9:9f:22:
         76:2d:04:9b:8a:bc:ab:88:37:62:d9:0c:0a:ed:f1:6f:1f:cd:
         53:4b:2a:4c:55:e5:46:ca:04:2b:ee:8a:31:f8:e3:99:d4:f6:
         ba:57:36:2d:85:c4:2f:1d:c6:8e:8f:f8:3c:7a:9d:a9:f0:0a:
         bc:c9:35:d9:62:8f:9a:d3:47:72:42:64:b1:f0:1d:94:d4:bb:
         0d:c5:56:d9:3a:32:f7:f6:3f:a3:77:af:52:51:f4:a9:66:e1:
         88:16:f3:91:29:a7:5c:43:fb:6c:a3:6a:59:26:76:1b:52:f5:
         54:78:67:0b:63:54:75:40:cb:c2:82:ed:72:ad:9d:2f:94:58:
         21:21:c4:c6:92:47:94:3f:31:d2:85:37:0e:5e:51:3d:7a:2a:
         01:2a:fe:04:45:49:fc:a9:de:5f:51:14:6e:78:e1:68:e9:8d:
         e3:11:e2:2d:7e:42:d7:2d:1b:01:fd:d6:2c:a7:65:05:fc:e4:
         e2:1c:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----