Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50cbc96a-9eb8-46a5-b36e-537b4a81d081.roa
File:                     50cbc96a-9eb8-46a5-b36e-537b4a81d081.roa (raw, json)
Hash identifier:          tgwlR7u5Q6rTVn18qT4LbyrSreXEJVxt26NIu3dPOiY=
Subject key identifier:   6B:20:E4:A0:84:2E:4C:DB:94:57:F4:9B:79:BA:43:C7:8D:25:E3:9F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4E41F2B602B0145110ECA659D1212738DEDFBE60
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50cbc96a-9eb8-46a5-b36e-537b4a81d081.roa
Signing time:             Mon 11 Sep 2023 00:00:00 +0000
ROA not before:           Mon 11 Sep 2023 00:00:00 +0000
ROA not after:            Mon 16 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d030:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Sep 2023 14:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:41:f2:b6:02:b0:14:51:10:ec:a6:59:d1:21:27:38:de:df:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 11 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2023 GMT
        Subject: serialNumber=7ca968ab46a569a4d9af73977fbadbf86699677c3fc7687e5596e4af84f70bb7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5f:d4:33:03:42:56:a6:88:38:dd:30:05:3d:
                    d4:66:97:f4:fa:44:72:e5:c3:52:f4:1d:22:60:cb:
                    b9:b1:92:9f:b8:f6:23:c7:99:f7:bf:2b:ae:c8:fd:
                    21:7a:9e:0d:29:c4:73:b2:9b:12:65:68:bb:f6:80:
                    85:dd:f4:b0:39:96:df:a7:48:4d:71:b1:00:37:82:
                    67:fd:99:eb:de:02:81:33:4f:8a:05:8d:c7:c8:ee:
                    ee:bc:ea:5b:ae:74:8b:c7:bf:43:d3:ff:4b:76:41:
                    99:32:01:be:20:53:e6:50:6b:db:0d:63:bc:49:81:
                    ff:21:a3:5f:f1:0f:a5:5d:83:87:29:1b:c1:39:ae:
                    c7:7e:48:ba:f1:45:32:b2:16:df:a2:bc:e8:ce:9e:
                    05:06:36:e7:13:9e:6e:76:84:ab:92:ab:8b:f3:eb:
                    03:ce:1e:40:50:01:78:36:a2:7a:86:b8:5f:b2:f6:
                    79:d7:25:92:11:40:58:d2:a4:8a:ab:46:2b:fc:9e:
                    d5:42:bc:6d:38:07:60:7d:db:fa:54:37:e1:f8:42:
                    b9:79:e3:e3:2b:4b:ef:f5:5c:cb:4d:04:17:77:9e:
                    1f:cc:4a:84:d7:92:74:d7:ab:9d:0a:67:93:94:5a:
                    91:72:d1:72:6c:12:43:53:5a:20:00:0f:58:54:fb:
                    17:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:20:E4:A0:84:2E:4C:DB:94:57:F4:9B:79:BA:43:C7:8D:25:E3:9F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50cbc96a-9eb8-46a5-b36e-537b4a81d081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d030:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:03:d9:24:78:45:77:91:32:e8:46:48:2f:8b:34:1a:13:
         f9:ef:2f:fb:00:f0:9e:1c:bb:c6:21:c9:cb:8a:31:88:af:44:
         e8:17:94:c1:a5:6e:66:57:19:b7:a3:52:1d:6a:00:ce:22:20:
         7e:0d:50:cf:d7:2c:fa:32:fe:b9:82:94:71:a3:8e:5e:31:08:
         20:fa:7a:be:6e:29:dd:a8:61:b8:4b:23:bc:c6:b7:be:7a:49:
         42:7d:e0:17:7b:01:c4:ba:45:eb:df:07:0f:ed:b8:b7:4e:73:
         57:8d:74:41:c6:a1:f2:04:f6:d4:63:ef:ab:8d:73:bb:3e:13:
         d7:fa:04:ee:09:0e:21:a0:7b:a5:9e:21:cb:97:2e:ce:35:81:
         89:c1:8f:52:59:b5:10:1b:fc:c7:d5:97:2c:5e:b2:f5:75:f4:
         a4:83:51:c9:99:e2:c0:2f:54:ef:7a:ae:34:d5:07:08:c2:09:
         6e:18:fe:4d:17:f2:57:b6:42:21:6c:e2:e7:c8:71:0a:f4:26:
         04:be:f4:ff:42:ad:fd:38:1f:0f:ef:34:15:b8:ed:a3:c3:70:
         b3:c0:dd:42:67:15:02:dd:98:59:fc:52:d0:a5:18:9a:23:a8:
         e7:31:42:87:a0:4e:a9:fc:eb:c3:47:78:28:57:e7:3c:00:32:
         6d:3c:4d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----