Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/66ec7005-da32-4331-af29-ce60900e5f1f.roa
File:                     66ec7005-da32-4331-af29-ce60900e5f1f.roa (raw, json)
Hash identifier:          iMYF8CAZ7eHkJ145kTjS23Z3yR8w/dveiYRld5t7zvg=
Subject key identifier:   52:FF:DB:FB:DF:05:69:BC:80:71:12:6E:7C:92:AA:88:E7:B8:EC:FF
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2CA1ECA8FDA581AFA1A4946A9F9F411349A04685
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/66ec7005-da32-4331-af29-ce60900e5f1f.roa
Signing time:             Mon 11 Sep 2023 00:00:00 +0000
ROA not before:           Mon 11 Sep 2023 00:00:00 +0000
ROA not after:            Mon 16 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d079:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Sep 2023 14:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a1:ec:a8:fd:a5:81:af:a1:a4:94:6a:9f:9f:41:13:49:a0:46:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 11 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2023 GMT
        Subject: serialNumber=d9b4789b356d8065c516bf227e05dcc1ace7188a0f2f3cc27f12bd98f2d26a9f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4e:fe:13:1f:1d:27:8f:6d:e0:3e:c9:3f:dc:
                    b7:0c:e7:f6:1d:07:d6:cf:fd:6f:7d:44:3c:77:f8:
                    42:de:1c:ad:96:19:83:09:41:21:e2:36:a0:58:40:
                    9f:3d:69:d2:d6:42:b1:63:b8:ae:df:0f:ec:46:89:
                    ee:03:8f:de:a9:db:3c:0c:8b:17:2b:9e:eb:49:9b:
                    49:42:c8:3f:cd:3c:8c:c9:ed:d2:09:5b:63:ac:b7:
                    f7:a6:d4:65:18:6c:57:37:e7:4e:d4:f6:0a:4d:b0:
                    a9:45:d4:77:d9:36:10:3e:ac:94:93:bf:f0:68:c0:
                    c1:33:bb:98:f6:ec:81:da:58:ac:9a:ef:34:da:fb:
                    50:12:ea:fb:23:14:c5:b6:c3:1a:59:19:ce:17:7c:
                    25:43:b4:4d:a9:10:80:ee:f8:a6:4f:3e:dc:d9:4b:
                    66:99:df:06:d3:b3:fb:8c:6e:aa:02:f0:6f:97:1c:
                    cd:a5:68:5f:15:35:1d:ca:54:cd:ac:e0:f8:cd:e4:
                    79:3e:7f:2c:28:3b:5b:12:10:2c:0e:27:34:e8:f4:
                    e8:d4:02:bd:9c:b3:d6:b3:2c:d0:3f:b1:8c:f1:fb:
                    a5:f4:65:3b:5a:e2:bc:8c:86:3d:0b:3b:4d:1a:a3:
                    3c:51:94:69:a9:84:80:f0:73:3b:b3:5a:53:44:69:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FF:DB:FB:DF:05:69:BC:80:71:12:6E:7C:92:AA:88:E7:B8:EC:FF
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/66ec7005-da32-4331-af29-ce60900e5f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d079:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:80:34:b1:2d:40:20:71:18:fe:31:3b:a7:0d:2f:e6:14:
         9d:77:79:2f:d3:b9:39:34:7b:77:b2:d7:95:b3:c9:84:0e:dd:
         12:e5:5d:90:e4:93:50:24:2e:2c:07:1c:68:79:fc:15:81:5b:
         6f:21:e2:a3:f8:99:8b:35:c6:8d:e2:3d:a6:d9:e9:40:d7:8d:
         a8:44:0c:59:07:cb:5d:60:b3:23:10:cb:69:f4:a4:f2:a9:5b:
         43:cf:b4:e6:35:24:04:c2:1d:6d:e8:58:61:7c:c8:a0:d0:86:
         30:64:2e:9a:ea:ec:5d:0b:f7:e9:c9:9a:1a:8a:66:5e:cc:db:
         48:6b:21:f6:9a:c5:40:8e:e9:5c:23:ab:a6:c0:7e:fb:22:c0:
         1f:8e:17:1a:0e:ae:96:e4:17:2d:cb:a6:28:b2:83:4e:2a:30:
         9d:b1:5e:91:4f:3a:60:f3:83:d3:e8:f0:37:f0:ef:88:67:89:
         04:10:07:90:60:2e:91:35:c0:08:ec:6b:ff:e2:31:0a:88:6a:
         ca:42:37:d3:59:e8:23:65:09:91:c9:0f:f8:fe:78:d8:72:c7:
         9e:e6:61:b9:b3:71:43:0b:fa:8a:85:8e:c5:46:a1:4b:24:e0:
         cd:5c:c4:37:a1:6d:2f:a2:8b:0c:b1:9a:df:27:b2:8a:8f:17:
         79:64:08:92
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULKHsqP2lga+hpJRqn59BE0mgRoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yMzA5MTEwMDAwMDBaFw0yMzEwMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ5YjQ3ODliMzU2ZDgwNjVjNTE2YmYyMjdlMDVkY2MxYWNlNzE4OGEwZjJm
M2NjMjdmMTJiZDk4ZjJkMjZhOWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM9O/hMfHSePbeA+yT/ctwzn9h0H1s/9b31EPHf4Qt4crZYZgwlBIeI2oFhA
nz1p0tZCsWO4rt8P7EaJ7gOP3qnbPAyLFyue60mbSULIP808jMnt0glbY6y396bU
ZRhsVzfnTtT2Ck2wqUXUd9k2ED6slJO/8GjAwTO7mPbsgdpYrJrvNNr7UBLq+yMU
xbbDGlkZzhd8JUO0TakQgO74pk8+3NlLZpnfBtOz+4xuqgLwb5cczaVoXxU1HcpU
zazg+M3keT5/LCg7WxIQLA4nNOj06NQCvZyz1rMs0D+xjPH7pfRlO1rivIyGPQs7
TRqjPFGUaamEgPBzO7NaU0RprV0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRS/9v7
3wVpvIBxEm58kqqI57js/zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjZlYzcwMDUtZGEzMi00MzMxLWFmMjktY2U2MDkwMGU1ZjFmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HlA
MA0GCSqGSIb3DQEBCwUAA4IBAQAvAoA0sS1AIHEY/jE7pw0v5hSdd3kv07k5NHt3
steVs8mEDt0S5V2Q5JNQJC4sBxxoefwVgVtvIeKj+JmLNcaN4j2m2elA142oRAxZ
B8tdYLMjEMtp9KTyqVtDz7TmNSQEwh1t6FhhfMig0IYwZC6a6uxdC/fpyZoaimZe
zNtIayH2msVAjulcI6umwH77IsAfjhcaDq6W5Bcty6YosoNOKjCdsV6RTzpg84PT
6PA38O+IZ4kEEAeQYC6RNcAI7Gv/4jEKiGrKQjfTWegjZQmRyQ/4/njYcsee5mG5
s3FDC/qKhY7FRqFLJODNXMQ3oW0voosMsZrfJ7KKjxd5ZAiS
-----END CERTIFICATE-----