Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f8d2db0-3420-4eb0-a3d5-3804ce1948cf.roa
File:                     0f8d2db0-3420-4eb0-a3d5-3804ce1948cf.roa (raw, json)
Hash identifier:          zWzLQrEZ/P4c1yDzIN1T461duhfon++aguBwCe/xF4Q=
Subject key identifier:   50:4E:E4:19:13:3E:89:8E:40:AA:09:2A:CA:A1:97:19:6E:86:B0:30
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       23F5FBFBB36776EA5647E19762126336CD09FF1B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f8d2db0-3420-4eb0-a3d5-3804ce1948cf.roa
Signing time:             Mon 11 Sep 2023 00:00:00 +0000
ROA not before:           Mon 11 Sep 2023 00:00:00 +0000
ROA not after:            Mon 16 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:6000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Sep 2023 14:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f5:fb:fb:b3:67:76:ea:56:47:e1:97:62:12:63:36:cd:09:ff:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 11 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2023 GMT
        Subject: serialNumber=61aff67a6ba154cf714c3aa8579ac2c9d09e45bd424ac41ff548e21e55af5af9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:e8:84:f2:1d:8b:c6:11:49:4a:06:23:fd:
                    24:0c:c7:1f:be:ce:9f:e2:ec:db:72:b1:31:66:e9:
                    23:53:ee:21:0a:af:5d:4d:3d:14:66:8e:a2:a9:78:
                    11:87:1a:61:a3:89:87:ac:4b:1c:2f:1e:42:42:e0:
                    e4:ff:a8:78:c3:ba:6f:31:43:18:b5:03:44:23:4e:
                    3a:94:90:ba:0e:99:bc:79:b1:70:f3:45:3c:ff:9b:
                    f3:58:65:b1:e4:71:10:08:f0:55:6a:33:46:06:56:
                    96:2b:5b:d1:91:5f:7d:77:90:85:d7:32:87:7d:a9:
                    09:2e:08:44:5a:37:71:33:5c:8e:7c:04:2d:7c:49:
                    97:a7:7c:ea:93:1d:c4:c1:3d:9d:77:3d:7c:d2:50:
                    c6:87:a5:f1:c5:b5:e4:bf:ef:e2:f0:48:fe:b6:68:
                    aa:9c:e4:31:84:db:37:87:ba:23:e5:89:d4:07:71:
                    67:b7:0b:26:a6:5d:e1:5d:48:00:78:1c:8d:48:bb:
                    70:ee:0e:20:c2:98:23:b9:3a:2a:59:75:c9:98:7b:
                    1d:89:e7:39:05:a9:53:a9:d1:1f:80:5b:37:74:41:
                    42:2e:66:17:9f:af:f3:d2:5d:5f:66:7c:a8:b8:9d:
                    b1:b5:ce:c3:9f:68:73:92:b8:57:e4:3f:81:71:b6:
                    7e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4E:E4:19:13:3E:89:8E:40:AA:09:2A:CA:A1:97:19:6E:86:B0:30
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f8d2db0-3420-4eb0-a3d5-3804ce1948cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:ba:18:f4:af:a4:5d:b8:bb:31:e4:84:34:db:4b:f6:66:4c:
         cc:8c:4b:8b:2b:8a:33:fe:2b:12:6e:b8:bc:e2:53:29:2f:43:
         c9:66:cb:f6:59:8b:30:a1:91:0e:a5:b6:29:19:1a:bd:10:dd:
         88:99:23:8e:a3:1b:ec:d8:2e:1b:38:29:8d:da:e9:06:09:59:
         21:67:9a:7c:ce:2f:7b:a7:36:6c:52:ca:57:e3:99:8f:ed:d7:
         31:eb:c0:f2:55:6c:c7:31:ba:10:4a:ec:d0:e0:d9:92:f2:51:
         0b:f5:28:f6:2f:1f:75:9c:89:c8:ea:c3:13:7f:8e:87:07:91:
         f2:f5:0d:6f:ac:a5:d6:bf:1c:e1:e9:2c:1e:6c:9e:03:9d:73:
         5e:87:de:87:b4:b4:4c:85:94:9f:7e:0b:1e:ab:22:d6:7c:70:
         dc:47:ea:bd:52:84:47:18:06:30:d7:3a:79:dc:b6:a3:35:20:
         1e:54:4b:82:03:7b:01:72:56:16:d1:d9:71:67:cc:02:9f:91:
         6e:2e:91:f4:ad:aa:25:9c:c7:00:25:41:c6:fe:7f:82:fb:39:
         38:e2:b3:9b:c3:6a:c6:77:09:d7:10:d1:07:f2:a1:d9:ea:c4:
         04:f0:2a:80:3a:b7:91:df:f2:c7:f3:5e:7c:26:e8:01:5d:7a:
         ae:63:d3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----