Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73cde438-0645-4a6f-883e-f9a7517dde97.roa
File:                     73cde438-0645-4a6f-883e-f9a7517dde97.roa (raw, json)
Hash identifier:          OfXW/MAo0uFF5rGI3DkE6erX/g+cOOODLuLywbZEmrc=
Subject key identifier:   8E:8C:0B:A8:06:F9:CB:60:6B:B9:00:40:46:C8:CD:E0:BD:97:B2:77
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       39E1C70B8CE4B446F8F14060C7065FCBDD90C0C1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73cde438-0645-4a6f-883e-f9a7517dde97.roa
Signing time:             Sat 09 Sep 2023 00:00:00 +0000
ROA not before:           Sat 09 Sep 2023 00:00:00 +0000
ROA not after:            Sat 14 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:c000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Sep 2023 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e1:c7:0b:8c:e4:b4:46:f8:f1:40:60:c7:06:5f:cb:dd:90:c0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep  9 00:00:00 2023 GMT
            Not After : Oct 14 23:59:59 2023 GMT
        Subject: serialNumber=ee61deb892a20d5734c509cda6bf62f2a6a6b36f7fc72ec4bd1f4220a8afc50d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:4a:26:85:e4:1f:20:ca:78:d3:bb:93:22:
                    c0:e5:1e:01:db:7b:19:92:12:f7:54:08:e4:58:0e:
                    55:a0:de:93:33:29:1f:ad:74:f2:02:b8:54:2c:23:
                    23:9f:a8:85:60:1d:3f:e7:cd:7c:fd:c0:8a:e5:ca:
                    e2:a8:78:d6:cb:cb:01:87:2a:fb:e6:fc:82:6d:37:
                    a4:7a:ae:47:79:f2:b2:7f:2c:06:6a:d3:f8:d9:97:
                    3b:8b:d4:88:50:99:e2:55:ed:26:64:c4:a7:16:df:
                    77:8a:2c:7f:cd:0a:2f:65:cc:8c:08:6c:08:ac:c3:
                    27:a7:bc:90:3e:92:53:32:b0:4a:ad:f3:ba:ed:b4:
                    bd:de:de:a8:c8:74:47:ac:54:a3:e8:a9:85:cc:a9:
                    e1:be:9e:4a:6a:9a:f5:75:ea:5c:e1:8b:b8:a4:4e:
                    f8:6f:37:4a:32:c4:f9:f3:6f:06:41:f3:5d:2e:27:
                    e1:d0:a2:32:9f:f9:05:0c:d7:57:b0:ac:62:4c:24:
                    74:76:f3:72:f1:3a:c2:73:cd:47:40:1e:9f:e0:11:
                    d9:d2:53:da:1a:98:70:31:ec:21:9d:76:22:df:9a:
                    2c:f2:b9:10:09:dd:48:ec:e7:e6:21:01:30:ef:5b:
                    9c:fd:06:88:3d:7d:5a:c6:59:e1:0f:b1:f3:8f:60:
                    11:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8C:0B:A8:06:F9:CB:60:6B:B9:00:40:46:C8:CD:E0:BD:97:B2:77
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73cde438-0645-4a6f-883e-f9a7517dde97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:85:44:1a:2d:35:fe:66:66:98:2f:24:d2:39:a7:e8:76:
         6d:e8:11:00:2e:9c:02:60:f9:9c:cd:c4:ee:84:a2:1c:36:1f:
         e6:f5:97:4f:38:54:ba:6f:6a:33:df:eb:d9:f1:78:11:4a:5e:
         52:1f:ff:ce:92:8c:b7:dc:28:97:1e:7c:9e:43:e6:c7:32:86:
         5f:bb:2e:df:ac:8c:2f:49:83:15:1b:fd:0a:28:77:25:7d:a2:
         f5:bf:b7:38:d5:66:e2:f1:85:3b:26:bd:55:0e:3b:2f:15:c8:
         82:f9:bb:e4:2b:9b:88:23:b1:17:ac:b4:45:2d:a7:79:9b:e0:
         e4:c8:61:a6:4a:fb:33:3d:a5:f2:fe:7c:4a:c9:a9:70:f1:45:
         ae:7f:f6:98:52:28:c2:e7:49:45:35:30:ae:01:59:f7:24:eb:
         36:97:f8:d0:c7:7e:4a:3c:2b:7e:5e:f2:e4:7f:21:dc:dc:fa:
         fa:1e:d3:52:9e:06:8d:d4:db:31:27:cf:04:44:e3:cb:4a:0e:
         6b:ac:50:26:1b:31:5c:82:3c:00:6d:80:94:5c:53:3e:02:13:
         22:7d:2f:39:ff:c2:41:d5:12:34:ea:d8:37:35:5b:04:37:6b:
         94:7b:7f:45:28:96:bb:77:a8:e7:e2:98:14:06:2e:04:83:e2:
         1c:97:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----