Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
File:                     c806309a-9e3e-4b0e-aad2-1356d070a437.roa (raw, json)
Hash identifier:          g/jk89mlJcHkOkZXxIKst9qCjPv73fUWYpVvpZw5Tmk=
Subject key identifier:   CB:45:74:57:64:A4:76:BE:0B:EC:94:E3:D1:25:75:B9:7B:CC:4C:5B
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       06E17F5657CE1F93DB643AF013A60BA67D4F9C50
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
Signing time:             Wed 15 Mar 2023 00:00:00 +0000
ROA not before:           Wed 15 Mar 2023 00:00:00 +0000
ROA not after:            Wed 19 Apr 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a01:578:13::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Mar 2023 07:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e1:7f:56:57:ce:1f:93:db:64:3a:f0:13:a6:0b:a6:7d:4f:9c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Mar 15 00:00:00 2023 GMT
            Not After : Apr 19 23:59:59 2023 GMT
        Subject: serialNumber=70a6165efb0af3050392292615ddb6427efdca70e245be748add834f7fdfffa5, CN=c336411a-6651-4f13-8ef9-de681c7c9444, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:8d:b2:8f:94:96:bf:d7:6c:74:5a:73:86:
                    bc:dc:1d:82:25:b0:51:70:09:31:e5:8c:0f:58:2f:
                    50:6e:e1:97:73:39:69:7d:ab:86:f8:87:50:ac:1e:
                    42:18:4b:98:02:51:77:2b:0a:50:52:84:0d:3c:45:
                    a8:3c:13:48:f6:24:1f:42:34:16:63:39:f1:ce:9b:
                    43:cb:f4:d3:35:05:cc:9d:10:03:ea:7b:66:1e:51:
                    34:2b:a4:6f:14:04:e3:5a:c8:2d:dd:b8:ad:36:1f:
                    74:ad:87:16:e0:c2:da:ca:2a:c2:98:a2:b7:b5:39:
                    f3:8d:ac:f4:0f:5e:85:5e:8e:55:3d:64:2b:49:35:
                    7e:3f:f5:a3:06:f6:d5:14:a5:8b:54:e1:52:7f:3b:
                    25:a0:30:86:ce:15:62:16:10:c9:26:96:86:c3:08:
                    cb:14:20:f7:c4:a5:62:66:11:70:cf:3e:ac:99:c7:
                    56:1d:26:e7:f4:d8:9c:c1:d0:cd:63:4a:a0:d4:53:
                    d7:a6:a4:73:94:b0:c3:78:82:8f:73:75:3c:e6:fb:
                    81:90:ff:a5:f3:6c:cf:0a:c0:16:12:06:e0:a7:85:
                    66:0e:7d:93:ba:ce:4d:40:02:5b:4c:ef:c9:a1:47:
                    b6:f7:66:1e:67:ee:5e:1e:62:d1:26:3a:3f:4e:e8:
                    53:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CB:45:74:57:64:A4:76:BE:0B:EC:94:E3:D1:25:75:B9:7B:CC:4C:5B
            X509v3 Authority Key Identifier: 
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:578:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:ee:57:76:b6:74:a1:d4:d3:56:e0:f1:c8:d0:18:c1:ff:98:
         6e:4b:f8:68:6a:b6:9d:cb:4b:c8:68:6f:5f:c7:9a:5c:6c:5f:
         1f:0e:38:c6:48:52:aa:4c:a4:cb:d1:74:d1:1a:c1:05:07:34:
         4b:19:be:2a:fe:b3:d2:97:19:56:37:66:b0:26:14:19:4a:71:
         b0:50:78:1e:9b:5f:bf:2a:6b:10:79:b5:8e:f3:dc:d5:a5:31:
         28:13:13:2a:ca:94:e9:63:db:ff:88:56:0f:86:12:9f:ba:d5:
         21:55:bb:96:8d:ba:66:1e:c5:a8:52:8b:bb:fb:35:20:ec:cf:
         69:30:b0:2f:91:b9:77:2c:7e:44:d8:73:77:b0:6d:73:87:ca:
         bd:d6:8b:6d:f9:f6:92:b9:21:e7:53:0f:39:af:08:83:73:75:
         1a:dd:a2:10:62:29:7f:c8:5d:60:74:5e:26:1a:77:22:84:a1:
         63:5f:bc:fd:fd:f5:64:33:93:af:fc:ec:e3:26:1c:ab:79:da:
         6b:49:91:66:46:71:5d:de:fd:7a:22:50:21:5f:e1:97:ee:0a:
         3f:3e:36:ff:05:2e:90:ec:f5:4f:c3:8e:8e:83:df:b9:db:41:
         ec:71:f8:f5:19:d2:73:d3:47:62:e0:86:19:2e:2e:3e:bc:f0:
         18:83:85:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----