Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b5e6f71-4060-48b0-9837-ac3b3d259906.roa
File:                     1b5e6f71-4060-48b0-9837-ac3b3d259906.roa (raw, json)
Hash identifier:          CeQ7iGW2MNQHToYnhJjQh6m80rcF8/kl+61qd0L1bY8=
Subject key identifier:   CA:19:64:87:C0:59:70:57:37:01:CA:8E:7F:A5:75:7B:EA:A9:81:02
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       76587EF837A2FA5E1D726C4A7FA65CDF17683C47
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b5e6f71-4060-48b0-9837-ac3b3d259906.roa
Signing time:             Tue 02 Apr 2024 00:00:00 +0000
ROA not before:           Tue 02 Apr 2024 00:00:00 +0000
ROA not after:            Tue 07 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Apr 2024 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:58:7e:f8:37:a2:fa:5e:1d:72:6c:4a:7f:a6:5c:df:17:68:3c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Apr  2 00:00:00 2024 GMT
            Not After : May  7 23:59:59 2024 GMT
        Subject: serialNumber=0ffdf45f8105b361534a3c9da8895baae4e0074f20b45b420d6b1c969fe7cfb8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:01:fb:a6:e2:85:ae:83:07:15:bc:8e:7e:
                    d0:b2:90:f4:0a:30:47:92:31:74:34:e6:b0:50:3e:
                    4d:36:b8:ed:90:36:87:8d:4c:20:bb:db:67:f7:dd:
                    c1:26:8b:d9:79:e7:52:ae:08:f4:11:ba:84:24:48:
                    53:ff:a3:79:07:57:97:aa:95:f7:b3:0f:ff:87:e9:
                    ca:b3:8c:c1:59:a6:fc:40:95:aa:8e:46:a7:c4:b7:
                    6f:11:23:a7:c1:80:a7:9b:83:94:c0:c8:36:3e:df:
                    f9:86:59:83:40:94:06:6d:8a:01:86:a2:5e:42:5f:
                    a1:ec:c1:bb:ec:cd:38:97:44:f8:a3:5d:18:4d:ea:
                    76:6a:d0:63:43:7f:07:e5:be:4c:29:1f:36:c5:d0:
                    04:1f:88:29:b8:21:a2:3c:fc:84:a5:b9:59:50:99:
                    4b:5e:f5:4e:df:76:04:ea:31:58:0a:10:47:a6:0f:
                    c9:e1:df:6d:93:d2:58:aa:b9:ac:5b:c7:2a:a8:ba:
                    10:67:40:5d:40:14:be:9f:f5:5a:52:ae:6d:27:a0:
                    f5:3c:3f:25:2b:3d:78:1a:7e:67:c4:c1:7b:0c:15:
                    5d:1c:26:01:a3:43:d8:64:1d:f0:88:38:5b:1b:08:
                    b3:3e:87:a1:7b:2b:a1:b5:30:a1:2e:a5:bd:84:15:
                    8c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:19:64:87:C0:59:70:57:37:01:CA:8E:7F:A5:75:7B:EA:A9:81:02
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b5e6f71-4060-48b0-9837-ac3b3d259906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:bb:89:53:54:10:d2:14:72:c4:42:cf:2c:d7:7a:e1:8b:3c:
         78:28:a9:fc:5d:ef:34:79:7b:b5:39:29:2a:fb:bc:70:85:76:
         6b:59:fb:cb:25:be:3c:7b:e9:19:1e:44:30:09:1e:9e:b6:2b:
         3e:af:c0:43:97:2a:88:4a:8e:4f:89:b5:d8:f4:20:2b:01:1a:
         0f:fb:38:b0:f7:26:01:5b:d2:ef:18:c0:4f:da:0e:63:86:fc:
         91:53:b2:18:b9:56:1b:10:f2:f5:5b:a4:5f:4f:34:79:73:83:
         a1:14:a3:a1:95:1d:1e:78:2a:56:7c:c1:3b:56:b7:8b:f6:cd:
         d0:86:76:90:a2:06:d2:56:d1:18:18:42:b1:0f:ff:6e:90:43:
         54:3a:16:45:ef:b3:47:8f:11:5e:03:98:3d:b2:96:14:b6:d3:
         cc:4f:a6:e9:5a:16:3c:44:1a:ed:4f:0b:3b:bc:83:4d:a6:6d:
         ef:cb:ff:3d:7a:35:c5:5c:4e:ba:e1:fd:57:e2:45:43:82:de:
         57:66:a0:ed:16:d1:57:f9:8c:86:38:d5:1f:6d:59:51:e0:7a:
         7c:ad:8a:17:65:38:d7:69:7f:92:ab:ca:7c:e6:dc:3d:67:39:
         f2:da:0c:7d:72:d8:7c:a1:b7:80:a0:e7:1f:2a:bb:60:bd:91:
         52:80:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----