Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/821ae9ba-4a52-4ed5-baaa-7ee5c4e9d012.roa
File:                     821ae9ba-4a52-4ed5-baaa-7ee5c4e9d012.roa (raw, json)
Hash identifier:          dxXcurLZ+BrlFZ2S4WVRHqX2B1YL3GL+Y7uQCCbzPjk=
Subject key identifier:   1F:FB:40:59:7F:44:30:0F:5B:88:D3:F3:4F:4F:2C:2A:F5:19:55:81
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       270961D3E798AA5BD3CCB554BAC5F9FA6B000177
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/821ae9ba-4a52-4ed5-baaa-7ee5c4e9d012.roa
Signing time:             Sat 09 Sep 2023 00:00:00 +0000
ROA not before:           Sat 09 Sep 2023 00:00:00 +0000
ROA not after:            Sat 14 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d03a:c000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Sep 2023 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:09:61:d3:e7:98:aa:5b:d3:cc:b5:54:ba:c5:f9:fa:6b:00:01:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep  9 00:00:00 2023 GMT
            Not After : Oct 14 23:59:59 2023 GMT
        Subject: serialNumber=5ebca0a833ba7ca645df36e9ea29e48bc1177b9d610c32188ccfc1666ac7a54c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d5:69:f2:27:26:80:08:61:62:c8:d1:56:97:
                    46:55:50:31:40:06:f1:69:30:98:08:fc:aa:ee:8a:
                    ff:30:fb:dc:8f:14:ff:d6:c6:5e:28:1e:e4:89:5d:
                    8f:ae:8f:23:86:d4:76:ea:00:d0:89:88:ba:51:a7:
                    8c:6d:ec:ac:57:9e:77:89:0f:35:57:30:3b:65:47:
                    be:84:2e:dc:b5:7b:b5:68:bf:01:f5:4e:7b:6e:e9:
                    dd:c6:90:6e:a3:78:2a:bc:d2:f2:68:82:a0:f4:66:
                    a7:3b:5b:a5:79:3a:da:71:c3:36:6e:29:b2:e6:56:
                    86:9b:c1:e2:c2:54:8a:93:00:f7:5b:d8:a8:0b:0a:
                    55:96:77:e3:b2:cc:43:42:3f:a9:b7:32:9d:25:83:
                    b9:c5:57:52:1b:e9:ea:6c:c3:4d:f1:fa:5a:d0:b6:
                    58:f2:53:65:56:b0:7e:59:21:cf:00:8d:5c:ef:fa:
                    a8:15:da:c9:f1:b3:c2:30:62:f9:b1:4b:72:b2:62:
                    b9:4a:57:c2:bc:56:51:09:e8:b8:2f:38:1c:03:c5:
                    b7:ea:dc:00:1a:bf:0f:7e:f4:66:87:2a:9a:c3:6d:
                    9c:7d:f5:e1:bd:4e:2c:5f:a1:e2:2f:10:db:9e:aa:
                    6e:2b:2d:f7:42:0c:55:cb:76:6e:8d:39:78:a5:b6:
                    ea:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FB:40:59:7F:44:30:0F:5B:88:D3:F3:4F:4F:2C:2A:F5:19:55:81
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/821ae9ba-4a52-4ed5-baaa-7ee5c4e9d012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d03a:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:cd:eb:0e:87:de:fc:a5:3a:18:5f:9d:51:ba:44:45:9f:
         29:bd:95:9d:ad:d0:95:fa:97:7d:d0:e1:9c:38:66:1f:33:ce:
         3c:24:1a:31:9e:0d:ef:36:3c:c9:bc:2d:e5:63:39:92:c8:e0:
         a6:48:b6:6f:b4:9f:39:e8:cc:77:3f:61:c1:fd:2d:f3:35:ed:
         5a:a3:7f:ae:02:5f:ea:ee:c7:95:2d:dd:42:18:0f:4d:ec:13:
         7e:49:22:44:6f:9a:2e:45:21:a0:70:a9:12:fa:34:7a:42:27:
         d8:33:59:e8:65:b7:94:b4:f6:dc:29:a0:9d:05:da:f2:8f:cc:
         22:fe:97:e4:66:6f:f9:d0:e7:5f:01:0c:5c:8a:26:4d:80:a9:
         74:9a:d2:f1:49:50:6b:b9:a1:80:42:21:44:31:48:fd:88:0f:
         ea:19:f7:5a:94:4f:f1:bc:d9:af:2c:ab:1f:4f:94:6b:1d:e0:
         7e:14:46:e5:1e:e4:01:6c:0b:03:b0:0b:ef:3b:cd:90:22:48:
         d4:25:93:d2:a6:52:c5:d3:59:ef:61:94:39:a4:11:82:02:76:
         b7:c4:e3:92:73:6a:d1:25:87:ec:df:46:69:d4:13:6f:e4:7f:
         04:43:2b:62:07:42:aa:10:4a:c7:fd:2c:c6:25:a8:d9:f6:ab:
         7d:9c:45:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----