Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/798578ff-9d6e-4ed4-9ac2-961304f136d6.roa
File:                     798578ff-9d6e-4ed4-9ac2-961304f136d6.roa (raw, json)
Hash identifier:          YQdovaSiceoaGO5kccP8/u4hZf5rvpTkHZLQ5r421/Y=
Subject key identifier:   04:86:67:90:36:FC:32:D2:4D:FE:32:7B:18:9D:D4:EA:40:7F:50:A1
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7A8221D79DD121B69CC2880B8213DEE22DC0827F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/798578ff-9d6e-4ed4-9ac2-961304f136d6.roa
Signing time:             Fri 29 Mar 2024 00:00:00 +0000
ROA not before:           Fri 29 Mar 2024 00:00:00 +0000
ROA not after:            Fri 03 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:6000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Apr 2024 18:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:82:21:d7:9d:d1:21:b6:9c:c2:88:0b:82:13:de:e2:2d:c0:82:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 29 00:00:00 2024 GMT
            Not After : May  3 23:59:59 2024 GMT
        Subject: serialNumber=a08126c3764f8c717725bef747a23f4f404aff3932db014d6c7abc95ef6a4c85, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:22:94:a7:86:70:11:e5:b1:5f:ec:51:86:
                    ef:ec:df:85:3d:66:6a:c8:25:d0:eb:af:ec:ef:27:
                    72:ef:f6:c2:1d:db:e1:d4:93:62:30:6e:05:86:30:
                    1c:67:8e:d5:ad:ca:ff:3a:d7:13:7f:c4:7a:48:04:
                    0a:6a:cb:36:5f:c5:e7:6e:f3:8c:ea:6e:1d:7a:14:
                    77:a0:64:69:17:7c:c2:b1:1b:38:e1:c1:d8:6d:b6:
                    99:58:bc:bb:ab:34:98:ad:24:f2:e2:96:f2:b1:03:
                    86:0e:2e:82:62:9c:be:30:ed:23:c4:e3:3b:f1:34:
                    a8:a7:a1:c1:89:8c:07:b7:7f:41:21:f8:22:02:ac:
                    48:9c:27:1e:7d:25:3e:19:47:80:7f:c3:18:17:f3:
                    86:00:99:f0:2c:db:d4:d0:75:76:7d:80:76:67:47:
                    3b:46:70:76:45:05:96:35:42:9d:28:15:d9:e9:29:
                    5a:82:aa:19:c8:9c:b3:f5:e6:b8:46:42:c3:5a:cf:
                    e5:54:c8:c2:f6:67:80:8e:e2:f7:fe:bf:c5:c3:4d:
                    73:d1:09:ca:a4:f6:50:a4:67:30:f9:95:7e:42:30:
                    e3:d2:d8:e9:84:7a:67:ad:97:c4:2a:8a:a0:54:ae:
                    12:7b:64:5e:32:93:7a:6d:3f:50:84:7c:02:7a:35:
                    02:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:86:67:90:36:FC:32:D2:4D:FE:32:7B:18:9D:D4:EA:40:7F:50:A1
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/798578ff-9d6e-4ed4-9ac2-961304f136d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:bb:8b:0b:39:3a:38:f2:f8:d9:5b:9e:fa:09:d6:ef:45:9f:
         21:6b:f4:36:6e:64:fc:2f:ef:a4:64:14:6f:b8:d9:70:4a:f1:
         06:ca:6c:76:bf:14:92:81:42:4e:cd:32:b5:c2:18:78:63:a6:
         83:95:ed:a8:03:ce:17:b5:2c:92:30:cb:c7:2a:1e:a2:00:57:
         df:13:97:97:87:e8:c0:67:9c:1c:d8:41:3f:4c:21:1c:b4:6e:
         5f:a3:58:ae:5d:8a:08:e2:f4:60:e1:e4:f3:4c:ad:71:58:08:
         8c:4a:95:b4:27:c1:42:26:96:2e:9b:05:8f:9f:37:4b:48:39:
         71:27:bf:fb:4a:ed:ba:44:64:3e:3d:07:6d:82:e4:8b:8d:5d:
         5f:06:e2:85:a1:6e:51:61:38:09:ec:7c:d8:36:f8:cb:ee:a2:
         46:fc:a9:c4:1b:90:0b:a3:4e:b6:9e:ca:37:81:b6:e7:dc:8e:
         6a:70:f1:7e:55:95:fd:f8:aa:df:f3:81:f8:75:ed:33:a0:ec:
         05:7c:b8:38:27:3c:e3:ad:bf:fb:d9:3f:51:dc:4e:18:75:f7:
         8b:eb:45:5d:29:1e:12:87:bd:1b:f1:f7:0f:2e:fe:d0:e2:6c:
         8e:cc:4b:1c:da:57:29:0e:dc:a7:23:54:ce:bf:e3:52:f9:01:
         39:14:e1:72
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeoIh153RIbacwogLghPe4i3Agn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDAzMjkwMDAwMDBaFw0yNDA1MDMyMzU5NTlaMHoxSTBHBgNV
BAUTQGEwODEyNmMzNzY0ZjhjNzE3NzI1YmVmNzQ3YTIzZjRmNDA0YWZmMzkzMmRi
MDE0ZDZjN2FiYzk1ZWY2YTRjODUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM0iIpSnhnAR5bFf7FGG7+zfhT1masgl0Ouv7O8ncu/2wh3b4dSTYjBuBYYw
HGeO1a3K/zrXE3/EekgECmrLNl/F527zjOpuHXoUd6BkaRd8wrEbOOHB2G22mVi8
u6s0mK0k8uKW8rEDhg4ugmKcvjDtI8TjO/E0qKehwYmMB7d/QSH4IgKsSJwnHn0l
PhlHgH/DGBfzhgCZ8Czb1NB1dn2AdmdHO0ZwdkUFljVCnSgV2ekpWoKqGcics/Xm
uEZCw1rP5VTIwvZngI7i9/6/xcNNc9EJyqT2UKRnMPmVfkIw49LY6YR6Z62XxCqK
oFSuEntkXjKTem0/UIR8Ano1Am8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQEhmeQ
Nvwy0k3+MnsYndTqQH9QoTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Nzk4NTc4ZmYtOWQ2ZS00ZWQ0LTlhYzItOTYxMzA0ZjEzNmQ2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DVg
MA0GCSqGSIb3DQEBCwUAA4IBAQABu4sLOTo48vjZW576CdbvRZ8ha/Q2bmT8L++k
ZBRvuNlwSvEGymx2vxSSgUJOzTK1whh4Y6aDle2oA84XtSySMMvHKh6iAFffE5eX
h+jAZ5wc2EE/TCEctG5fo1iuXYoI4vRg4eTzTK1xWAiMSpW0J8FCJpYumwWPnzdL
SDlxJ7/7Su26RGQ+PQdtguSLjV1fBuKFoW5RYTgJ7HzYNvjL7qJG/KnEG5ALo062
nso3gbbn3I5qcPF+VZX9+Krf84H4de0zoOwFfLg4Jzzjrb/72T9R3E4YdfeL60Vd
KR4Sh70b8fcPLv7Q4myOzEsc2lcpDtynI1TOv+NS+QE5FOFy
-----END CERTIFICATE-----