Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83b9f858-170f-4e66-8d4d-515e5f3bfe0f.roa
File:                     83b9f858-170f-4e66-8d4d-515e5f3bfe0f.roa (raw, json)
Hash identifier:          QEJL+Egkd9BQKXVXwISa41mEzZalOUwzCIkkJa3SMMI=
Subject key identifier:   2F:0F:B6:10:58:EB:8A:F8:F6:07:E7:BA:4C:94:A1:A5:E2:12:6D:80
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       139447E485B8104CE818DE7D7E41CB68D00E07E6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83b9f858-170f-4e66-8d4d-515e5f3bfe0f.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d076:a000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:94:47:e4:85:b8:10:4c:e8:18:de:7d:7e:41:cb:68:d0:0e:07:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=b81ec21a382cf736797df60c82b4d41317535552a823e38233ddba20fa06b2ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:b5:11:28:f2:73:9e:ce:b0:fe:0a:af:41:
                    45:6e:b3:67:06:9d:26:f7:78:e5:29:86:4c:a3:df:
                    65:c4:1a:b1:ab:db:e5:39:fb:0c:e8:8e:d4:ff:a7:
                    d2:af:6e:88:2d:1b:ed:ba:bd:5d:06:04:61:27:e1:
                    e0:b6:e1:b4:b3:4b:81:84:36:c6:3b:c0:76:14:91:
                    42:a7:23:f1:5c:cf:7a:cb:2b:f3:d5:85:85:cc:19:
                    56:1a:19:96:e6:4c:8c:a2:75:87:f1:65:09:d9:c6:
                    45:a8:b6:3d:39:b2:14:b1:f6:4b:2b:ce:8e:c5:68:
                    c2:64:5d:d8:38:5d:bf:aa:e5:8b:9e:38:f0:33:49:
                    16:d0:1a:8b:69:b0:5c:aa:2e:70:cd:3b:4d:e7:02:
                    b6:3d:2e:9e:4f:a6:f0:18:d0:22:0e:69:f4:5d:0e:
                    9e:fc:11:d6:2d:3b:85:43:88:31:fd:2e:ee:e7:f3:
                    33:c8:32:bd:79:b1:30:70:80:5b:c9:e2:51:c0:86:
                    13:36:ad:ef:dc:4b:9f:6b:54:12:4d:3e:3e:9d:d9:
                    24:31:48:29:18:b5:c4:7e:c3:13:b6:32:76:73:ac:
                    70:28:89:44:79:0e:47:9a:51:4d:32:29:ad:33:e0:
                    a1:8d:96:f9:1f:26:69:ae:4a:39:8c:2f:f1:88:e6:
                    45:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0F:B6:10:58:EB:8A:F8:F6:07:E7:BA:4C:94:A1:A5:E2:12:6D:80
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83b9f858-170f-4e66-8d4d-515e5f3bfe0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d076:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:1c:c5:84:d6:5f:f5:92:4b:8d:4c:f0:49:d3:07:fe:e2:9e:
         91:b9:d5:dc:96:6b:a1:a7:8f:60:d5:3d:2c:2d:68:8e:4f:6c:
         4d:2c:3f:9c:eb:ce:a4:eb:a9:be:58:16:f5:ef:89:7c:7f:32:
         ed:29:f3:09:c4:e8:09:8f:2a:fa:1e:e4:09:8f:3e:3b:2f:02:
         85:69:10:6d:14:e3:6b:37:13:9d:a9:2b:96:1b:4a:e5:bd:38:
         4e:e5:f6:e4:b4:4c:aa:2b:25:8e:0c:dc:23:33:26:c9:f1:5c:
         88:4e:14:b7:02:00:89:84:f9:1a:a3:51:d1:93:16:37:a7:ad:
         cc:7f:b6:2a:e1:7e:4f:30:bf:83:73:df:73:49:21:d5:b7:92:
         59:b5:3a:07:9c:11:ac:1a:10:4a:87:6a:7e:c5:af:1d:ba:fe:
         f4:86:58:49:27:1c:57:c1:10:25:12:57:16:4f:6f:ad:62:1a:
         b7:c1:a1:11:f5:7b:2b:d9:71:ab:13:a2:ba:d7:c4:bc:28:aa:
         ec:96:76:16:10:87:25:0f:fd:26:89:a7:89:ff:86:41:81:62:
         5e:09:2e:2c:d1:ef:3f:d2:38:32:8f:9e:47:9d:13:ae:49:31:
         12:a3:31:5c:bc:6d:f1:29:0b:e3:81:6b:8d:74:f7:68:0d:c5:
         57:22:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----