Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
File:                     03a11d7d-6d37-488c-8fe1-258c484d1682.roa (raw, json)
Hash identifier:          qrskv5vG5NWOGBIG9x2bldi88Q7P3Yg0iGrd3zft8hI=
Subject key identifier:   4E:0F:F6:5B:BB:49:02:9A:32:17:41:87:F8:54:E4:00:BE:03:6E:7E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       750EDC37ECF065B33E1B0C78A796DA2FCBE6227E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d050:b000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0e:dc:37:ec:f0:65:b3:3e:1b:0c:78:a7:96:da:2f:cb:e6:22:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=e4a8e63833c1e76d4821d22a91858db8d69011868ae9fa2203da35810ca68078, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:4c:d5:23:0d:de:8d:4b:9a:69:b2:c0:b4:
                    ff:a7:e5:91:60:b9:54:23:e4:6d:37:5e:68:5b:9a:
                    ae:d4:70:47:06:d1:b2:93:f6:53:1e:62:d0:fd:73:
                    35:f4:8d:ae:8a:43:be:a0:fd:76:0b:f6:dc:23:c5:
                    43:fb:68:95:e4:88:52:2a:30:94:6f:7e:24:89:b3:
                    ff:53:cd:20:7b:b7:c4:fd:4b:02:9e:ae:61:74:c1:
                    04:35:71:10:52:b3:ea:32:e9:82:a7:df:3e:36:a3:
                    c3:fb:6e:7a:5b:46:38:58:83:17:28:7c:8f:6f:3d:
                    c5:c4:f9:d4:ea:9e:96:6c:d4:41:7c:b9:a6:ae:8e:
                    d8:ce:86:25:9f:1e:5c:3a:8b:8d:6f:3d:b1:35:74:
                    d0:f8:d4:67:ab:56:20:ce:b8:5e:62:db:5b:7c:8d:
                    82:41:8e:6c:3e:35:7a:9a:94:12:23:cf:da:e1:91:
                    ca:ed:b0:90:3c:84:72:f1:90:64:14:f1:82:3c:b0:
                    09:92:89:10:7a:7b:80:44:a1:24:58:d1:ff:d8:47:
                    e1:52:9d:59:51:21:0c:e7:53:68:36:f1:a0:47:69:
                    89:2e:ff:5a:bf:d8:1f:56:e0:c9:cd:72:fe:75:a0:
                    84:dd:4f:b2:ba:a0:83:6e:55:bc:0f:e0:0e:e5:88:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0F:F6:5B:BB:49:02:9A:32:17:41:87:F8:54:E4:00:BE:03:6E:7E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d050:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:c6:1d:26:19:d3:e5:bd:45:dd:55:59:fd:e5:fc:2a:af:12:
         69:84:8a:3a:98:82:9e:d5:53:f2:6b:27:2c:df:53:3f:aa:a4:
         ca:8d:ff:26:6c:74:09:11:a6:f1:fd:fa:33:a8:70:04:c8:02:
         b2:f0:21:d7:30:1e:7c:a1:a1:c7:8b:c0:00:55:d7:b4:7d:01:
         19:7e:47:1f:7c:c5:42:3e:47:b0:2b:b4:4d:c0:aa:14:91:1f:
         bd:32:5b:72:20:24:f1:f8:3b:f0:fd:a0:0f:1d:8a:e8:11:25:
         b5:96:21:2a:1a:77:e1:d7:4e:3c:6b:6a:69:5d:32:ef:db:4f:
         7f:a6:2d:26:14:f9:17:a8:94:72:d3:68:5f:e6:a4:4f:f3:02:
         6d:57:20:22:ef:62:94:be:09:e3:71:6d:c0:7a:b6:a0:7e:ab:
         9b:d3:47:8e:22:a6:0b:89:56:7c:14:93:d7:fc:09:e8:13:52:
         46:55:3f:ed:9c:87:ec:2e:14:01:b0:72:68:19:a2:b7:f0:1f:
         29:bc:d9:a7:23:3d:c6:8d:75:2b:65:54:e8:9b:fe:ec:3b:c0:
         9c:80:06:76:96:7d:38:88:42:80:98:cb:44:fe:ea:bf:ac:b5:
         83:09:0b:b8:17:df:7e:21:64:19:70:e7:94:b7:b3:c2:16:12:
         63:d4:00:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----