Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0329f72c-bcfc-450d-9501-0716fe320aff.roa
File:                     0329f72c-bcfc-450d-9501-0716fe320aff.roa (raw, json)
Hash identifier:          tvwI+uR5YZTmShBGwc5zDO7hxnUonBPwvWQAPFNj9ws=
Subject key identifier:   12:49:88:03:8F:1B:0F:A4:2F:DF:2A:87:73:C8:4F:AD:41:BF:B7:81
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6AF06631D1364639CA18E28A190A85F3B90FEF1B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0329f72c-bcfc-450d-9501-0716fe320aff.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:c000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f0:66:31:d1:36:46:39:ca:18:e2:8a:19:0a:85:f3:b9:0f:ef:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=a755d17f5ee75712574847721be50a1b8e0acf1cf1f2aa4f28e54bfc293e2e01, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:93:62:a2:f4:1d:06:43:2f:02:ba:e3:2f:
                    e1:a7:5e:6c:bf:61:42:b1:64:35:69:dd:9d:f5:b7:
                    2b:85:bb:4a:2f:c0:b4:f4:be:90:a0:39:4c:43:d2:
                    95:4b:8f:83:ec:b7:5d:e5:73:e2:f2:62:fc:4f:3f:
                    0a:b7:8b:e8:e8:71:8c:13:4d:63:a4:09:5a:08:7c:
                    73:39:c5:e0:12:94:5e:60:86:11:44:3d:99:21:17:
                    ba:36:c3:eb:fb:50:74:2c:3f:d9:25:c2:75:d4:f7:
                    ff:c2:c3:4f:98:61:3a:63:5f:94:d6:15:73:f6:a2:
                    d9:a9:21:07:01:6a:19:b9:e7:7b:88:3d:c2:80:0a:
                    8c:b2:f1:01:03:ad:a0:64:f0:6e:0b:d5:e3:a3:75:
                    23:54:17:e9:fe:29:a2:de:02:77:a0:c9:97:8d:e0:
                    77:02:36:31:ef:f3:a8:5b:07:14:4a:eb:5f:55:c8:
                    3d:72:48:6d:a4:28:9e:d7:07:89:ab:60:f4:b8:ef:
                    22:33:fc:6e:f7:6a:78:d2:d2:81:07:ea:07:c8:75:
                    d0:ad:29:fc:bd:2d:fd:64:e3:f8:3b:ac:b3:88:2c:
                    d2:8d:34:d3:f8:42:58:7a:ee:44:6f:7d:1e:95:55:
                    17:49:d1:e0:60:1c:27:c5:38:bc:23:89:e0:90:73:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:49:88:03:8F:1B:0F:A4:2F:DF:2A:87:73:C8:4F:AD:41:BF:B7:81
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0329f72c-bcfc-450d-9501-0716fe320aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:99:9b:bc:2b:dc:ec:d6:6c:57:8c:96:88:f9:33:eb:d6:4b:
         26:11:7b:30:e5:6c:b9:a4:9b:e6:a7:fd:bb:46:aa:95:19:6c:
         4d:35:38:ef:d7:a9:2e:fb:11:3d:1b:b1:74:27:2e:66:c3:80:
         39:4d:23:52:26:40:3e:e4:a7:a7:99:af:7c:6d:61:8f:d4:41:
         9f:e7:c9:4b:1b:cf:2c:c4:07:24:49:d9:8e:01:c8:87:5b:83:
         57:a2:7c:a8:38:8f:ff:d4:27:db:b1:f7:5b:c3:88:cd:85:5c:
         f0:70:3a:4b:b8:06:39:3d:60:05:fe:e7:97:41:b3:08:6a:3d:
         f3:ca:04:70:a6:08:b2:bd:92:a6:7e:83:f5:26:89:fd:a4:17:
         00:4a:82:11:e6:2d:43:7b:b7:2b:81:ec:67:17:6b:77:ed:62:
         24:36:83:cf:62:95:43:52:69:de:6f:ab:17:b4:08:07:4a:a4:
         cc:64:5b:21:79:4a:f3:6f:8f:47:8f:25:1c:63:0c:9c:ba:bf:
         06:04:b0:75:f8:4e:6c:08:c1:8d:5f:e3:b3:44:bf:b3:61:38:
         f8:18:ed:7f:10:b1:48:fb:84:b4:3f:67:ee:59:b7:2a:76:d2:
         eb:bf:00:60:de:09:ed:a3:aa:94:ea:6a:af:9f:a0:0e:15:39:
         b8:f2:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----