Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
File:                     61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa (raw, json)
Hash identifier:          mty/hNoNPByzVxOtsTyhE8zncWPhKVdejLl6kVS24Jk=
Subject key identifier:   B2:E8:16:CD:9C:4D:AD:B3:C7:86:5C:E4:F1:05:00:C6:57:6F:96:87
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       33278020FD65383237DA2E1F315B1917796B3877
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
Signing time:             Tue 19 Nov 2024 00:00:00 +0000
ROA not before:           Tue 19 Nov 2024 00:00:00 +0000
ROA not after:            Tue 24 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075:a000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:27:80:20:fd:65:38:32:37:da:2e:1f:31:5b:19:17:79:6b:38:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Nov 19 00:00:00 2024 GMT
            Not After : Dec 24 23:59:59 2024 GMT
        Subject: serialNumber=519a36ba2d890644dc680a9534805ba7d9fb5b3747ee91ed0d7440553ab196ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:50:9b:94:71:06:e1:f2:0f:21:32:aa:ed:
                    46:be:49:6e:e0:34:e2:df:f3:08:86:c9:4c:f5:6b:
                    5a:2b:36:dd:e3:63:4a:bf:a5:df:f4:cf:55:00:2b:
                    f1:08:12:6c:91:5d:f7:8b:7e:ab:33:86:66:f9:08:
                    66:78:0a:c3:c9:41:a0:a5:a4:cc:8b:49:4f:75:b8:
                    50:85:ad:55:e3:10:56:37:50:89:b2:d2:e2:56:c5:
                    4d:73:6a:4a:27:49:e6:a9:b0:9e:56:13:73:e4:c3:
                    74:9f:e4:9d:26:77:96:c5:59:78:f4:61:0c:c1:61:
                    86:d7:4c:96:76:9b:55:86:f0:e4:e1:64:46:35:10:
                    d2:6b:0c:c7:54:aa:2c:e4:ef:84:6d:30:d5:ef:14:
                    94:b8:d0:21:cd:4e:7e:b3:0c:cb:18:a4:05:55:f0:
                    95:66:d9:0e:56:38:fa:48:83:39:40:19:da:ff:08:
                    8b:39:70:86:0c:61:ca:bd:64:d2:1d:e3:11:5f:97:
                    10:70:99:21:d7:ab:93:19:85:14:02:d2:c1:ac:5a:
                    87:54:19:86:2a:84:32:e5:30:5a:c0:b5:95:4d:b5:
                    90:dd:a5:0a:b9:cd:dd:90:14:58:0a:48:7e:c9:92:
                    45:80:de:c2:a0:27:75:31:95:3a:86:7f:7e:24:2d:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E8:16:CD:9C:4D:AD:B3:C7:86:5C:E4:F1:05:00:C6:57:6F:96:87
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:6f:7c:42:48:4a:a7:de:0a:f6:0a:9a:5f:ac:a6:31:d0:3b:
         ee:01:09:a2:cf:fe:ab:9d:c3:97:43:97:3d:e0:1e:34:34:34:
         30:e0:ad:14:0d:41:99:a5:5a:b3:94:80:b7:c1:e5:e0:af:9b:
         85:d0:b1:15:d1:6f:c3:31:ad:05:46:6b:26:5e:ce:81:46:fb:
         10:f5:3a:df:04:62:89:d6:9c:cf:f6:34:ba:66:e4:3c:44:69:
         91:e2:2d:c0:98:eb:6c:fe:83:64:a5:a2:89:c2:8c:9b:03:b6:
         fa:b5:5e:c7:75:bf:73:07:a5:3b:c4:9b:d2:24:0a:58:5b:26:
         41:cf:d8:d6:31:7d:eb:a8:b7:66:61:9f:ef:f4:2a:31:21:a1:
         3f:49:46:13:46:cc:1b:40:7d:ad:e8:bb:45:3f:19:72:89:1b:
         fa:bb:8e:62:2a:1c:10:2c:b5:e8:b3:f4:1f:13:40:75:c1:22:
         b3:94:2d:60:15:40:87:c3:9b:99:1d:0f:1c:37:a3:df:ab:f6:
         82:44:58:6d:9a:c7:cb:74:d6:18:fc:db:d7:b1:50:2e:2b:cd:
         d8:c4:60:12:46:ba:ad:6d:36:32:fc:10:10:39:09:c5:c9:a7:
         99:58:3d:b8:0b:c1:2a:33:79:ae:42:b9:cc:e0:a9:43:df:18:
         bf:68:76:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----