Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50253a85-74b2-4a74-ab18-15a98f3496b2.roa
File:                     50253a85-74b2-4a74-ab18-15a98f3496b2.roa (raw, json)
Hash identifier:          bLfXbbn15dicdzzDm0pAcSIwVK/hyPnHfrTdhxJLT8s=
Subject key identifier:   C5:A4:29:E5:99:4F:13:1D:4F:98:BA:75:7B:57:23:BA:77:F9:D8:1D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0ACA2A407E34828676525A17E0C9D83D8C3CE284
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50253a85-74b2-4a74-ab18-15a98f3496b2.roa
Signing time:             Fri 26 Apr 2024 00:00:00 +0000
ROA not before:           Fri 26 Apr 2024 00:00:00 +0000
ROA not after:            Fri 31 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075:8000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ca:2a:40:7e:34:82:86:76:52:5a:17:e0:c9:d8:3d:8c:3c:e2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Apr 26 00:00:00 2024 GMT
            Not After : May 31 23:59:59 2024 GMT
        Subject: serialNumber=0280accd1b4e75900166b8265bd6a71853c20c2cfaf959517471d9ee52ee12fe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:b7:cd:c7:05:c5:48:b4:22:c8:4a:d0:a2:
                    77:f3:cf:66:54:e9:f9:15:c4:7a:88:8e:70:33:c7:
                    fb:43:75:da:ed:35:0b:04:7e:5c:e5:1d:d1:d3:6a:
                    5e:ff:80:2d:9d:98:c6:a1:49:79:73:ae:c3:69:73:
                    a5:4d:e1:d0:0c:ee:44:72:39:fe:a1:01:df:21:86:
                    50:97:e4:58:85:c0:3b:00:85:fe:7a:12:ef:dd:24:
                    ac:79:99:51:a4:39:00:fe:57:cb:76:4c:0a:65:ac:
                    87:e0:9d:06:3b:14:51:aa:93:c3:fb:a0:34:a4:87:
                    ef:23:a5:ba:33:a1:ef:49:cf:77:1a:48:75:c6:1a:
                    27:9d:e5:76:19:20:6e:85:dd:79:92:86:23:b9:3c:
                    c0:9c:cc:b2:e9:5e:26:26:92:a7:b7:57:2b:be:93:
                    b6:f5:2c:b8:f8:a1:f1:04:66:49:a8:df:2d:73:e0:
                    31:fa:c3:b9:04:77:5a:5d:b0:73:f7:f0:05:dc:d6:
                    a0:c3:c4:40:29:5f:34:e5:42:26:66:d2:c9:86:d3:
                    e6:81:68:da:26:46:80:01:d6:96:c6:d5:98:44:fc:
                    f3:2d:7c:ad:ed:87:93:3a:af:ba:1b:1b:0e:e4:36:
                    32:d9:23:85:8d:38:87:1a:b7:69:52:e9:82:16:1e:
                    ae:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A4:29:E5:99:4F:13:1D:4F:98:BA:75:7B:57:23:BA:77:F9:D8:1D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50253a85-74b2-4a74-ab18-15a98f3496b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:4e:db:a0:33:87:a6:96:c9:07:85:5f:49:11:84:b8:74:8d:
         15:29:5f:9c:b0:34:d9:b8:30:1a:78:1f:39:44:a9:86:bf:7e:
         97:bf:8a:d2:41:ba:e2:1d:8c:ec:ed:14:9e:d7:7d:b6:ab:a2:
         c1:83:11:fd:52:d5:ab:c4:9c:50:e8:66:90:38:44:96:3f:c2:
         32:aa:87:d6:05:3c:62:f7:f8:d9:26:4b:66:62:bb:be:93:2e:
         bb:45:5d:01:c3:ef:93:00:47:58:38:0f:0e:93:8d:9d:d1:2f:
         44:8a:61:b4:1a:f6:16:c2:b5:e6:ed:7a:24:94:62:06:da:b2:
         1c:14:28:18:17:c3:98:59:16:6d:84:fa:67:75:02:00:4e:ff:
         ca:85:ec:eb:db:b9:b5:1e:cd:37:91:da:16:bf:c1:04:63:c4:
         6d:70:8d:b8:9c:9d:23:00:9f:cf:e1:40:8f:96:b7:04:32:f4:
         78:8c:5f:ef:5f:9e:40:aa:79:e6:2e:95:54:a5:9c:6b:1d:85:
         51:92:d9:62:f2:a1:dd:4a:8a:be:36:0b:b7:22:9e:f8:8a:93:
         89:da:cf:e5:75:4e:01:91:86:6c:df:37:7f:17:84:5c:e8:52:
         df:c6:5f:30:48:98:a7:ed:d3:09:41:25:14:e2:40:98:59:8c:
         70:b2:78:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----