Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d2f56cc-e642-4b06-b4f1-65761e5c3cbd.roa
File:                     2d2f56cc-e642-4b06-b4f1-65761e5c3cbd.roa (raw, json)
Hash identifier:          fT6zlzgao3yEKj5vs+EjfYl61Re2MPtbcr8KxgPHNeE=
Subject key identifier:   56:DB:C1:78:6E:12:FE:3C:DA:F9:1E:46:B5:99:7D:31:60:FC:B8:B5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       07B6B37ECD1001227437E094AC288841A9B0FD00
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d2f56cc-e642-4b06-b4f1-65761e5c3cbd.roa
Signing time:             Mon 11 Sep 2023 00:00:00 +0000
ROA not before:           Mon 11 Sep 2023 00:00:00 +0000
ROA not after:            Mon 16 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Sep 2023 14:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b6:b3:7e:cd:10:01:22:74:37:e0:94:ac:28:88:41:a9:b0:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 11 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2023 GMT
        Subject: serialNumber=267146eba420e123ce17c8e22c0a067d31d36549dcc5c786a1d1f865cf2849be, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:79:8e:87:b2:33:18:2b:e8:06:b6:f0:a4:
                    e1:56:94:60:b3:d0:4d:e2:8f:52:31:2e:7d:b2:09:
                    7e:bb:e1:c4:0b:51:b6:4d:f2:45:84:c6:c7:de:6e:
                    bf:0e:45:32:94:45:0e:ed:b9:92:a9:4b:3b:e6:ae:
                    38:1f:cb:30:d1:f3:aa:8c:c8:84:52:bf:16:0a:08:
                    40:e5:5c:4a:ff:b8:c3:f4:ce:55:66:53:76:76:74:
                    5b:7f:35:c4:4c:4f:45:cd:00:ba:d3:52:3a:f2:76:
                    02:6e:e6:4c:5f:df:22:3f:cb:88:50:ff:3d:5a:34:
                    f6:d5:cc:3b:7f:82:80:e7:65:0e:70:e9:df:d4:d2:
                    27:e3:21:d6:8a:4d:aa:ad:e7:10:23:0b:b0:b1:1e:
                    8f:4a:41:8a:00:09:e0:4e:d2:6c:4d:62:cf:77:40:
                    ac:59:96:a6:1e:a8:e1:78:3b:ff:c2:fa:fb:e1:ed:
                    4b:ce:fc:76:ef:18:6f:5c:96:9d:39:c4:3e:af:8f:
                    2b:54:af:40:4a:c9:b5:19:d7:46:3b:c1:a8:06:31:
                    e6:74:89:c7:46:7d:ae:82:fc:d3:57:cd:f0:2d:5e:
                    1b:9d:22:ea:3d:1a:7d:54:63:33:1c:6d:57:3c:5a:
                    a8:9a:31:0b:73:d4:9b:8f:10:40:ee:38:45:e8:c2:
                    2b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DB:C1:78:6E:12:FE:3C:DA:F9:1E:46:B5:99:7D:31:60:FC:B8:B5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d2f56cc-e642-4b06-b4f1-65761e5c3cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:81:cb:03:14:54:29:e3:46:3a:58:9f:ab:97:13:03:18:48:
         ad:cd:8e:ff:c8:99:12:74:8a:3b:a8:57:56:bc:6b:77:d4:e5:
         37:2e:c8:12:a6:dc:c7:af:31:ec:8f:11:3c:66:6c:6f:6f:d9:
         c1:f3:44:bc:4f:7b:dd:8f:d8:32:3e:14:d0:87:df:cf:40:27:
         f1:de:31:ea:fa:97:aa:f1:df:c0:63:ad:05:fc:e3:cc:4f:c6:
         f5:d2:47:c1:18:22:c0:b7:3a:7e:70:38:6d:f7:7a:2b:19:40:
         37:e2:78:ef:61:55:fe:bf:1c:cf:08:c6:ce:98:f5:2a:93:d0:
         d3:b3:43:29:95:2a:a0:0c:ac:c0:0a:79:ac:75:f3:79:75:ec:
         5e:5f:96:72:e6:f0:f7:c2:97:9f:ad:a7:c4:b5:ee:6b:90:03:
         5f:64:ce:24:b2:e8:46:29:1b:87:e0:1b:c6:3e:55:3a:54:60:
         08:bb:c9:b1:8d:47:25:eb:67:e7:e2:53:91:e0:c8:55:86:53:
         da:6d:07:f0:93:3c:aa:f1:41:40:45:e4:32:0e:1f:02:f0:c3:
         bb:24:77:24:1e:39:e3:ad:fc:d7:4f:c1:88:0e:33:fd:b9:c7:
         4e:28:09:ab:6a:38:46:f9:c0:8f:b2:81:54:a9:3c:3a:22:23:
         55:ff:af:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 16:32:02 2023 by rpki-client on console-fra.rpki-client.org