Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
File:                     85151a34-1ac3-4b9b-801b-33bd153ac88d.roa (raw, json)
Hash identifier:          EYApaWstV0eaHZKJE/mbK6GD1W/IZ0Ku+rHGR+dyYks=
Subject key identifier:   FD:19:17:83:79:A9:E0:BA:BF:3D:09:45:9F:AA:70:02:7E:CA:34:94
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       603BD2FA6281FC3BE9340BD6618050F8B8FE2B01
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
Signing time:             Sat 09 Sep 2023 00:00:00 +0000
ROA not before:           Sat 09 Sep 2023 00:00:00 +0000
ROA not after:            Sat 14 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d050:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Sep 2023 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3b:d2:fa:62:81:fc:3b:e9:34:0b:d6:61:80:50:f8:b8:fe:2b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep  9 00:00:00 2023 GMT
            Not After : Oct 14 23:59:59 2023 GMT
        Subject: serialNumber=4e85b8843ac5d8c053db4316057dfa10e12cec6a5ca45a41b38bbc011b91bd35, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:ec:3f:d7:d7:ef:27:7e:04:03:cf:06:d8:
                    f2:f2:ac:0b:75:eb:6f:9e:9c:82:6a:90:77:3a:a0:
                    f3:89:03:cc:e5:8a:bf:45:54:59:56:c4:20:89:1e:
                    16:c8:3d:81:f0:fe:67:54:e4:a0:33:56:d8:83:ec:
                    d5:73:05:c5:d2:00:a9:a1:5d:97:74:b5:ad:0a:68:
                    14:3b:5f:4e:54:11:1c:be:06:5f:4c:d9:25:cf:12:
                    16:96:8b:2b:10:39:fe:4c:6e:9c:fc:90:1a:f0:26:
                    da:9f:78:9b:ca:d8:a0:27:55:6d:27:26:6a:28:41:
                    0c:b8:37:2c:61:1d:51:7b:53:eb:62:a5:70:bf:b2:
                    55:18:0b:d6:f7:fb:41:99:ae:15:59:16:8e:f7:d2:
                    99:f7:e2:74:72:55:d0:45:e2:07:7b:58:e4:30:d8:
                    3b:85:58:d3:19:b7:1a:fe:28:f9:20:2e:f5:df:2c:
                    a5:0e:60:dd:19:85:bb:ab:2b:c5:65:48:93:64:8a:
                    00:4f:1b:4a:66:02:ce:61:a9:9b:7f:65:c6:63:d0:
                    2f:41:99:ce:57:1d:80:be:2a:c4:c0:44:08:6c:51:
                    1f:f2:af:bf:27:74:ab:b9:4a:c6:6d:8d:ec:11:4a:
                    3e:ee:38:f6:92:4c:7a:ac:92:f7:4b:b1:1f:f3:c0:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:19:17:83:79:A9:E0:BA:BF:3D:09:45:9F:AA:70:02:7E:CA:34:94
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d050:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:d1:e0:07:52:f2:eb:71:31:c9:a5:dc:c7:3a:eb:5d:aa:d5:
         6d:6a:e3:55:9c:06:b9:7f:f5:7e:90:43:f9:4f:21:c5:43:53:
         d5:d8:e8:a6:aa:3c:fd:39:da:4e:8b:3e:c8:3e:7c:93:1f:00:
         9d:d2:1f:d4:23:26:b2:3b:66:d6:c6:71:5a:08:b4:a8:ae:a5:
         28:f7:5d:06:1e:7a:8c:a6:51:97:39:7d:4e:92:53:c3:7c:3f:
         1e:6f:36:a6:9b:9b:f7:d5:3e:fe:e6:77:0c:32:b9:bf:cd:02:
         d2:80:a6:40:f8:c0:c7:17:b8:7f:7d:23:e7:70:77:bf:3d:aa:
         00:c5:dc:d6:8a:ae:38:9f:f0:0f:20:ff:17:40:1b:1a:52:c4:
         33:dc:d0:6f:2e:f0:b6:ec:30:cf:e6:5b:e9:b8:32:06:61:56:
         a1:b6:fd:ef:89:e7:7d:36:3b:5d:c5:b3:7b:4e:f5:2e:f2:4b:
         89:37:f2:89:0b:c5:51:04:b8:7c:4c:f3:9d:11:df:9a:b3:9e:
         c6:4e:13:0a:3b:a9:12:e3:c0:33:e3:3a:3d:61:21:35:02:2c:
         62:c9:ef:cf:ba:4c:e6:e0:8a:73:31:ea:9c:81:09:a4:2c:d8:
         e0:d8:e9:f9:8c:f4:d7:b2:0b:ce:03:f6:39:05:bb:fa:f8:88:
         6f:23:82:b8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUYDvS+mKB/DvpNAvWYYBQ+Lj+KwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yMzA5MDkwMDAwMDBaFw0yMzEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDRlODViODg0M2FjNWQ4YzA1M2RiNDMxNjA1N2RmYTEwZTEyY2VjNmE1Y2E0
NWE0MWIzOGJiYzAxMWI5MWJkMzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM3j7D/X1+8nfgQDzwbY8vKsC3Xrb56cgmqQdzqg84kDzOWKv0VUWVbEIIke
Fsg9gfD+Z1TkoDNW2IPs1XMFxdIAqaFdl3S1rQpoFDtfTlQRHL4GX0zZJc8SFpaL
KxA5/kxunPyQGvAm2p94m8rYoCdVbScmaihBDLg3LGEdUXtT62KlcL+yVRgL1vf7
QZmuFVkWjvfSmffidHJV0EXiB3tY5DDYO4VY0xm3Gv4o+SAu9d8spQ5g3RmFu6sr
xWVIk2SKAE8bSmYCzmGpm39lxmPQL0GZzlcdgL4qxMBECGxRH/Kvvyd0q7lKxm2N
7BFKPu449pJMeqyS90uxH/PA1YkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT9GReD
eangur89CUWfqnACfso0lDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODUxNTFhMzQtMWFjMy00YjliLTgwMWItMzNiZDE1M2FjODhkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBB0eAHUvLrcTHJpdzHOutdqtVtauNVnAa5f/V+
kEP5TyHFQ1PV2Oimqjz9OdpOiz7IPnyTHwCd0h/UIyayO2bWxnFaCLSorqUo910G
HnqMplGXOX1OklPDfD8ebzamm5v31T7+5ncMMrm/zQLSgKZA+MDHF7h/fSPncHe/
PaoAxdzWiq44n/APIP8XQBsaUsQz3NBvLvC27DDP5lvpuDIGYVahtv3vied9Njtd
xbN7TvUu8kuJN/KJC8VRBLh8TPOdEd+as57GThMKO6kS48Az4zo9YSE1Aixiye/P
ukzm4IpzMeqcgQmkLNjg2On5jPTXsgvOA/Y5Bbv6+IhvI4K4
-----END CERTIFICATE-----