Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f410204-155a-436a-a343-5a74a7999df6.roa
File:                     7f410204-155a-436a-a343-5a74a7999df6.roa (raw, json)
Hash identifier:          nbI7JQJoWUmN9Tk9Iujn+PTUneU20g+kNgY+/equgA0=
Subject key identifier:   4C:21:83:C0:B4:8C:9B:C1:13:8C:8B:FA:45:3B:55:3D:CD:57:80:28
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       210F5E5CD7C375115836EA11B43CF944E5D4FEEA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f410204-155a-436a-a343-5a74a7999df6.roa
Signing time:             Fri 08 Mar 2024 00:00:00 +0000
ROA not before:           Fri 08 Mar 2024 00:00:00 +0000
ROA not after:            Fri 12 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d070:6000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Mar 2024 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0f:5e:5c:d7:c3:75:11:58:36:ea:11:b4:3c:f9:44:e5:d4:fe:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar  8 00:00:00 2024 GMT
            Not After : Apr 12 23:59:59 2024 GMT
        Subject: serialNumber=23e9b8b47e81a230d2836896fbf239f89d1e331ab3bdde607f61b875d7e4fd52, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:25:53:d3:c3:86:20:43:9d:c1:79:88:b8:
                    66:16:66:14:a9:99:23:a1:dd:91:e4:ff:16:6d:83:
                    55:23:1e:35:7d:3f:a9:18:37:8e:23:bb:ca:d0:8e:
                    91:fd:96:7c:05:f3:4e:1b:33:d8:b9:ca:e8:dd:8e:
                    e7:3f:4a:5d:84:6c:1b:0f:d2:28:fd:03:5f:b7:b8:
                    1f:ba:60:e8:d3:d6:91:09:17:2f:8d:61:e3:a1:cc:
                    c7:55:9c:a5:94:fb:ea:39:d5:10:56:18:6f:df:dd:
                    94:8d:90:b3:57:31:55:75:40:23:b7:d7:e5:71:2f:
                    12:ee:d2:c1:74:ac:f2:2c:c8:d5:9c:c5:a8:ce:23:
                    ed:15:61:76:18:8e:03:e0:2d:97:76:e4:d7:9c:19:
                    96:26:fd:b2:1b:e9:c0:91:72:05:d4:f8:da:b0:5d:
                    77:39:b6:71:4e:d4:7e:64:a8:9e:ed:a4:e7:0d:4e:
                    b2:14:7f:90:5b:f6:d7:9b:0c:d6:d1:94:ae:ce:3e:
                    3f:86:a6:26:53:1b:ae:1b:c2:7d:95:dd:64:f0:16:
                    8e:c8:dc:f1:61:e5:8e:3a:8f:e2:65:a3:7e:7b:3b:
                    d4:a9:52:72:76:a2:dd:06:43:17:a4:fe:9f:bd:4f:
                    96:2d:48:5b:2a:f6:fe:86:0d:ab:54:92:ec:f1:7b:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:21:83:C0:B4:8C:9B:C1:13:8C:8B:FA:45:3B:55:3D:CD:57:80:28
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f410204-155a-436a-a343-5a74a7999df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d070:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:12:cc:00:da:f0:37:0a:5b:68:36:94:76:6f:53:77:03:11:
         b1:20:28:24:b3:2b:71:5e:ba:03:a3:16:44:38:45:af:2c:11:
         af:b4:5a:ac:46:bf:f7:63:f8:6f:c1:e2:95:06:26:9b:8e:0d:
         f9:a9:61:d4:4d:51:f9:52:a9:8c:8e:48:37:83:bd:b3:b8:45:
         d5:10:f3:af:e3:20:bf:8b:45:b6:1e:09:c8:ba:7f:f9:53:1d:
         7b:14:0c:d5:8c:6d:0c:be:7f:27:f8:14:2d:bf:91:7b:04:3c:
         9a:3b:b2:8a:26:49:30:af:aa:11:14:95:32:e7:92:7c:98:f3:
         00:0c:dd:97:e8:22:8e:fd:d7:0a:e2:61:8f:7e:96:60:2d:a1:
         fa:05:76:d1:64:9e:c1:c2:d9:c8:22:1b:c5:0d:b8:42:14:d7:
         0b:49:85:3a:eb:74:04:d5:57:6b:8b:2b:69:3c:3b:6c:62:c4:
         f6:c6:6f:e3:d9:37:d7:3e:da:39:f8:82:17:a2:b4:be:09:a0:
         dd:f8:a0:44:9b:2a:a1:c1:0a:50:76:5c:a7:c7:76:8a:5b:f7:
         06:67:53:0a:0e:81:65:24:62:c8:b1:9d:be:26:28:e9:ca:bf:
         69:3d:19:9c:02:4b:81:1f:d6:f5:eb:d3:af:46:ec:29:cd:5b:
         6a:31:56:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:43 2024 by rpki-client on console-ams.rpki-client.org