Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/822a5092-b328-41ee-aa0b-069e1f3b6354.roa
File:                     822a5092-b328-41ee-aa0b-069e1f3b6354.roa (raw, json)
Hash identifier:          XKife2MFP31OvOAcNK44xLVngO2faWTqOPkMArPglp0=
Subject key identifier:   C0:B0:E7:F3:AF:DD:E6:19:90:93:6B:8A:75:F0:6F:87:45:61:59:B9
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       23C90BDE83980A9FF3D3E2F25EE0EBD36931FC2D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/822a5092-b328-41ee-aa0b-069e1f3b6354.roa
Signing time:             Mon 11 Sep 2023 00:00:00 +0000
ROA not before:           Mon 11 Sep 2023 00:00:00 +0000
ROA not after:            Mon 16 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d070:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Sep 2023 14:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c9:0b:de:83:98:0a:9f:f3:d3:e2:f2:5e:e0:eb:d3:69:31:fc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 11 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2023 GMT
        Subject: serialNumber=4d050c439092e883631ecf80bbefb06fedf165cb99f96fb52b656838568163d9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:27:43:61:34:6b:a0:28:07:40:ce:65:5e:
                    88:ba:6d:fb:ef:90:32:61:cd:7b:6e:9d:28:77:d8:
                    c9:bb:fe:d5:ab:f8:7a:d5:e0:b6:ae:f2:d4:33:21:
                    6a:83:09:e6:33:09:b9:db:e1:d2:60:7f:3f:73:56:
                    11:a3:39:1e:e4:3c:c2:f4:e2:a5:e0:01:30:da:e9:
                    2f:24:4c:4b:d2:bd:eb:73:c3:94:4b:f9:58:e5:3b:
                    71:aa:0f:00:e4:f8:1e:80:24:32:89:e1:9d:31:fa:
                    a4:67:ec:11:fc:be:96:57:e5:ce:6b:20:65:16:80:
                    34:10:e0:7c:4c:a5:3d:65:d4:91:5c:a9:f0:69:ca:
                    17:7a:1f:11:e2:4e:d6:d3:70:ca:07:25:27:8c:e3:
                    d9:3c:5f:d6:59:39:56:83:26:4c:7a:ab:cd:ba:5a:
                    23:fa:c0:19:9d:25:4f:2d:15:cb:f9:64:24:95:36:
                    cc:5b:63:1f:2a:65:97:61:71:2d:04:48:21:3c:56:
                    e8:be:70:09:63:32:8f:e1:99:c7:56:8c:71:61:f5:
                    7e:fe:62:d6:47:de:7e:ef:99:42:fa:33:d1:0b:d7:
                    9f:1f:d6:ae:4a:56:10:14:e2:08:58:b7:33:67:c3:
                    34:72:fc:c4:51:44:b7:42:59:03:98:47:97:93:f3:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B0:E7:F3:AF:DD:E6:19:90:93:6B:8A:75:F0:6F:87:45:61:59:B9
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/822a5092-b328-41ee-aa0b-069e1f3b6354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d070:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:3b:fc:4e:36:f9:f9:16:d0:1e:af:da:67:e3:f1:16:d2:ef:
         1d:1a:74:78:90:3f:44:49:27:c2:74:73:5d:72:4a:7b:3d:05:
         84:d1:3a:86:af:0b:d9:75:ae:be:4c:a1:6f:33:92:f4:d0:98:
         68:00:03:6d:14:39:f3:fa:a6:7c:48:52:aa:69:6b:38:19:78:
         2a:44:a8:b2:0d:b8:bf:c2:94:26:78:a8:e2:a9:ad:28:af:7b:
         09:2c:61:51:da:87:75:9a:f1:46:94:b2:1c:ee:10:a6:ce:26:
         50:a2:d2:19:05:8e:3a:27:35:10:8f:0a:19:9e:4a:4a:01:40:
         ce:e5:a0:02:b0:cd:67:5f:56:c5:6a:66:ca:4c:5c:59:0d:45:
         52:e8:96:40:12:0c:b8:81:45:92:18:c2:39:73:42:3a:8e:49:
         67:ab:7f:dd:03:11:20:77:bb:4c:8f:f6:5d:29:f6:b7:ad:8e:
         3d:ca:c1:92:65:63:f9:5e:ff:c6:00:1c:0a:e8:3e:04:4c:ff:
         f8:70:d0:a0:10:28:88:73:b1:c6:57:83:2f:cd:2e:66:69:19:
         ee:bd:d8:16:ca:84:4b:3e:dd:ed:2c:0f:76:87:66:f4:ed:e2:
         c3:bc:73:9c:1c:99:57:01:58:59:34:c7:49:bf:f4:f2:67:7a:
         dd:42:be:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----