Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0129a519-09b3-42f6-b662-39b10215c10e.roa
File:                     0129a519-09b3-42f6-b662-39b10215c10e.roa (raw, json)
Hash identifier:          AsKMr3mKEuBzNUuPOyHFLzgt2p1fDmar0Q+tkAEQrM4=
Subject key identifier:   9E:60:B3:CF:FD:CA:3D:03:96:54:67:07:B9:85:4B:67:2C:93:AE:EE
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       11B2EFD7868145AC4D4C6CB3168641FC71071F70
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0129a519-09b3-42f6-b662-39b10215c10e.roa
Signing time:             Tue 05 Mar 2024 00:00:00 +0000
ROA not before:           Tue 05 Mar 2024 00:00:00 +0000
ROA not after:            Tue 09 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d015::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Mar 2024 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b2:ef:d7:86:81:45:ac:4d:4c:6c:b3:16:86:41:fc:71:07:1f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar  5 00:00:00 2024 GMT
            Not After : Apr  9 23:59:59 2024 GMT
        Subject: serialNumber=0b995c895b8ae5a62ac4b0f9f84a3f5b0751481fe23ccac79ac50612d5a9c51a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:75:c2:0f:c1:4c:6a:bb:19:64:0e:4f:35:
                    1d:51:1b:ea:18:05:3a:5c:3f:89:7e:a3:1e:1c:2a:
                    6a:84:6b:ba:d8:c9:02:9c:30:57:0b:51:cd:8c:e3:
                    6e:fb:a8:8f:80:19:1b:89:e0:31:37:d2:ba:ba:f4:
                    5b:6f:0c:7c:1e:ed:52:2d:92:eb:37:2b:b2:b3:43:
                    05:e7:2f:3a:2e:94:48:d2:bd:2a:67:b2:1d:ff:8e:
                    52:ad:64:21:35:60:17:03:86:30:99:73:69:54:ba:
                    9a:fe:89:d2:05:d1:0a:ce:5b:10:f9:fd:e1:61:5e:
                    62:ed:43:66:b9:c0:89:4b:70:23:e1:a9:ee:a0:1b:
                    5d:39:c9:56:de:4f:9d:67:38:c9:5f:02:76:89:46:
                    86:41:6c:bd:a7:42:56:63:d1:22:1d:fc:0d:c9:fe:
                    4e:a8:de:d8:9e:a4:ec:ab:44:57:74:58:5e:b2:61:
                    f7:7d:79:f8:f1:d5:cf:94:68:a6:56:a8:63:76:8b:
                    d4:2b:fe:2d:90:12:be:e8:ab:1d:4c:4d:ab:12:4d:
                    c2:fc:5b:3e:b4:02:86:e7:ff:2e:ef:22:b1:99:57:
                    24:a3:d4:1d:77:90:54:b6:c1:3f:cb:c4:14:55:43:
                    70:1b:e0:d8:f4:76:3a:18:e5:74:7d:a5:74:7d:fb:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:60:B3:CF:FD:CA:3D:03:96:54:67:07:B9:85:4B:67:2C:93:AE:EE
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0129a519-09b3-42f6-b662-39b10215c10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d015::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:32:eb:7e:4c:60:0b:31:36:cf:9d:9a:98:d8:fb:68:18:c6:
         19:dd:8b:fc:55:2a:dc:3a:16:a1:14:e4:3e:c9:dc:33:e5:fa:
         f8:c7:a1:59:11:fa:69:c7:41:f8:3a:33:5e:2a:71:b6:cc:9f:
         95:49:e5:b3:67:9f:4e:84:7c:f9:29:76:fb:38:d4:a3:16:2c:
         55:90:ac:a7:50:a3:24:68:8b:ea:40:5f:99:2e:74:5b:39:c1:
         a9:db:b8:57:39:41:a0:66:04:72:d8:fb:a5:25:82:91:04:98:
         1e:91:5c:35:f8:59:6c:a3:74:77:ab:d6:e9:22:2b:de:16:22:
         80:44:2d:c3:90:67:f3:89:73:ab:1e:10:c5:31:31:81:56:78:
         31:1e:15:03:e1:1e:66:9a:cb:e5:58:49:fb:47:dd:aa:cf:22:
         f0:3d:f9:fe:fd:0e:d8:c7:99:cb:6f:64:5a:7b:74:a8:d4:32:
         cf:0c:61:d1:4a:01:95:ad:8d:ee:48:39:c9:57:12:8b:aa:64:
         7f:b6:a3:4e:f3:95:32:6d:87:07:d9:8c:26:0a:3a:c7:c4:2b:
         a8:67:92:fd:86:bc:44:05:18:3d:f6:f5:ab:e1:32:b8:8d:da:
         98:a0:06:36:b7:20:8f:97:8f:3d:f8:70:7e:bc:27:2b:cf:3f:
         9d:f8:13:50
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUEbLv14aBRaxNTGyzFoZB/HEHH3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDAzMDUwMDAwMDBaFw0yNDA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDBiOTk1Yzg5NWI4YWU1YTYyYWM0YjBmOWY4NGEzZjViMDc1MTQ4MWZlMjNj
Y2FjNzlhYzUwNjEyZDVhOWM1MWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJXAdcIPwUxquxlkDk81HVEb6hgFOlw/iX6jHhwqaoRrutjJApwwVwtRzYzj
bvuoj4AZG4ngMTfSurr0W28MfB7tUi2S6zcrsrNDBecvOi6USNK9KmeyHf+OUq1k
ITVgFwOGMJlzaVS6mv6J0gXRCs5bEPn94WFeYu1DZrnAiUtwI+Gp7qAbXTnJVt5P
nWc4yV8CdolGhkFsvadCVmPRIh38Dcn+Tqje2J6k7KtEV3RYXrJh9315+PHVz5Ro
plaoY3aL1Cv+LZASvuirHUxNqxJNwvxbPrQChuf/Lu8isZlXJKPUHXeQVLbBP8vE
FFVDcBvg2PR2OhjldH2ldH37SGUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSeYLPP
/co9A5ZUZwe5hUtnLJOu7jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDEyOWE1MTktMDliMy00MmY2LWI2NjItMzliMTAyMTVjMTBlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BUA
MA0GCSqGSIb3DQEBCwUAA4IBAQB7Mut+TGALMTbPnZqY2PtoGMYZ3Yv8VSrcOhah
FOQ+ydwz5fr4x6FZEfppx0H4OjNeKnG2zJ+VSeWzZ59OhHz5KXb7ONSjFixVkKyn
UKMkaIvqQF+ZLnRbOcGp27hXOUGgZgRy2PulJYKRBJgekVw1+Flso3R3q9bpIive
FiKARC3DkGfziXOrHhDFMTGBVngxHhUD4R5mmsvlWEn7R92qzyLwPfn+/Q7Yx5nL
b2Rae3So1DLPDGHRSgGVrY3uSDnJVxKLqmR/tqNO85UybYcH2YwmCjrHxCuoZ5L9
hrxEBRg99vWr4TK4jdqYoAY2tyCPl489+HB+vCcrzz+d+BNQ
-----END CERTIFICATE-----
Generated at Thu Mar 28 01:01:25 2024 by rpki-client on console-fra.rpki-client.org