Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1171c547-ddc2-479f-91b8-52cc9e170312.roa
File:                     1171c547-ddc2-479f-91b8-52cc9e170312.roa (raw, json)
Hash identifier:          i+3nvFUQEApxMACtNh8xITwqIL3916yDnusGeaUGf5o=
Subject key identifier:   26:87:3F:72:4D:23:94:54:35:4A:15:70:97:E0:BF:D7:9F:30:05:9D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       66B7473D9A1457C3142138422282D4E01F80E134
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1171c547-ddc2-479f-91b8-52cc9e170312.roa
Signing time:             Mon 04 Sep 2023 00:00:00 +0000
ROA not before:           Mon 04 Sep 2023 00:00:00 +0000
ROA not after:            Mon 09 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        46.51.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Sep 2023 14:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b7:47:3d:9a:14:57:c3:14:21:38:42:22:82:d4:e0:1f:80:e1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep  4 00:00:00 2023 GMT
            Not After : Oct  9 23:59:59 2023 GMT
        Subject: serialNumber=d4682b98c612490d25f567099ee98f9e72165fa6313fc926dd1f351f3a0cb2df, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:ae:c2:e2:75:b7:ea:5e:c2:40:ca:3d:4d:
                    e5:9c:f6:77:8c:6b:7a:77:94:8d:bb:4c:bc:a4:d8:
                    ba:57:a6:69:bc:d8:21:f5:3d:ce:94:ec:f5:09:d0:
                    65:40:85:44:5d:27:fa:0f:f7:83:3d:52:80:15:67:
                    0c:0a:f9:23:99:62:8f:ac:aa:97:16:2e:87:05:21:
                    f6:b4:81:6e:e8:65:01:c4:c9:ed:eb:45:9c:86:ed:
                    df:4e:81:c2:36:d0:13:87:c4:df:30:d6:3e:61:10:
                    fb:db:74:62:f5:42:25:1c:13:5c:9f:5a:07:98:ea:
                    6a:66:8b:7c:88:f6:22:1d:c2:cd:81:b4:4b:c0:f9:
                    f5:70:fb:29:7e:a6:52:0a:e3:b7:ed:38:cf:d6:2f:
                    6c:74:1d:36:03:96:ec:d5:58:2b:73:88:47:35:a3:
                    62:6c:e1:f5:7d:8a:e7:a4:ab:89:50:c3:83:81:02:
                    dc:30:d3:dc:2d:7c:51:4d:a9:c6:30:d6:36:53:bb:
                    f6:43:ac:16:ed:60:cc:73:6a:df:2e:5b:ec:37:a1:
                    21:84:8d:18:8a:50:97:75:d2:f7:aa:10:63:21:03:
                    ca:fc:96:9f:3f:77:92:2b:aa:69:2a:20:6f:5d:0a:
                    27:b0:71:a5:06:79:a0:f0:d0:75:41:1a:bc:83:fb:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:87:3F:72:4D:23:94:54:35:4A:15:70:97:E0:BF:D7:9F:30:05:9D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1171c547-ddc2-479f-91b8-52cc9e170312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.51.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:99:15:d3:ce:9b:ed:35:3c:e7:5c:a3:dd:af:6b:b1:7f:
         b3:b3:a6:2e:97:41:37:f5:2c:a8:29:7a:cb:ea:aa:db:7a:fa:
         a0:50:e3:6a:f4:0e:c3:75:5d:43:a3:f5:e1:b3:a9:43:9d:81:
         f4:20:ed:f9:c4:e6:e6:83:0d:24:f0:02:99:5a:23:0f:3f:e8:
         5c:dd:1f:15:4f:6d:8a:3c:91:fc:b7:a3:dc:c5:5c:e9:8f:43:
         5c:d7:7a:74:95:46:1b:7c:15:12:ec:96:2d:e9:95:9a:fc:b1:
         25:7a:11:94:2c:09:df:35:b4:f2:84:e9:22:27:06:9f:28:8c:
         25:3f:8b:73:45:ce:48:3d:15:47:d9:c7:d4:b6:9d:1d:e9:5c:
         47:07:77:7d:44:bb:02:a8:04:5c:23:15:65:c7:05:ea:a6:e6:
         00:28:5b:b8:58:fe:05:93:51:67:30:1d:9d:bc:96:c2:e1:ad:
         ad:c6:73:7b:17:3a:d6:c7:8e:53:46:7c:0c:73:1d:0e:f9:53:
         37:d9:13:ee:28:ee:e4:9a:f1:6f:c6:1c:46:2e:95:4b:4e:fb:
         47:74:c4:bb:1d:9b:6f:b2:f6:2c:50:0e:7a:a3:0e:dc:0f:1f:
         a7:43:53:a3:7c:86:83:65:a7:ef:7e:2f:e0:c7:fe:50:b5:db:
         fd:a8:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----