Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8afa1c3e-762a-4db1-b600-92897f76c67e.roa
File:                     8afa1c3e-762a-4db1-b600-92897f76c67e.roa (raw, json)
Hash identifier:          iQbAQIZyQ+cSoXr8bRkWSePpZjfHl9GBWciiyZZ7tMk=
Subject key identifier:   EE:32:69:9F:44:89:7E:D2:E4:03:97:91:42:FB:05:15:42:91:14:87
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5BECE78FF2970EB984F836E27BE8CF128E1E37E5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8afa1c3e-762a-4db1-b600-92897f76c67e.roa
Signing time:             Tue 19 Nov 2024 00:00:00 +0000
ROA not before:           Tue 19 Nov 2024 00:00:00 +0000
ROA not after:            Tue 24 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07c:9000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ec:e7:8f:f2:97:0e:b9:84:f8:36:e2:7b:e8:cf:12:8e:1e:37:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Nov 19 00:00:00 2024 GMT
            Not After : Dec 24 23:59:59 2024 GMT
        Subject: serialNumber=227651ecd3fe0d74e7c0bc9980dbe6df140ea05a1a3970231d73afc1c84c5182, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:1a:dd:d7:63:26:e9:27:f7:93:34:d2:61:
                    92:1b:40:84:ef:72:56:bd:b3:9e:ce:bd:8e:7e:cd:
                    c6:ad:6b:d5:ea:58:8e:42:e7:ae:28:fc:29:89:e5:
                    f2:c5:b2:a4:d5:c1:49:1d:e7:33:9d:0d:a4:dd:44:
                    d5:1c:64:6c:b7:b0:aa:2a:ff:53:1c:0e:ac:bc:f4:
                    a8:c8:1c:47:03:19:96:d6:4b:86:b0:d6:b4:12:d0:
                    8e:d0:7a:51:07:52:51:e9:c5:57:9a:03:a0:9a:4d:
                    48:cf:af:3e:4f:62:03:73:6b:3c:40:02:fe:59:95:
                    cf:c4:a0:68:7e:df:06:0f:51:8b:49:d5:87:e1:48:
                    f5:67:47:4d:b2:d9:3a:12:f0:67:97:51:7b:14:3c:
                    4c:30:37:82:9d:f9:3c:f4:eb:38:d8:b1:c0:0a:db:
                    90:e3:49:af:a3:cf:af:b1:e6:53:0b:19:be:7b:b7:
                    0d:ea:ba:73:9f:be:fa:d5:3f:3b:d1:c6:86:ab:86:
                    82:6f:c6:3f:b2:92:ea:eb:1b:38:ae:83:90:d9:08:
                    3b:2c:88:ff:f2:4c:c3:b4:e4:e8:ff:f8:84:58:d3:
                    4b:99:af:6b:0d:04:98:0b:62:bb:c4:68:9d:73:ae:
                    52:ad:ca:ec:6b:f1:a3:fd:69:36:ea:45:97:5b:bb:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:32:69:9F:44:89:7E:D2:E4:03:97:91:42:FB:05:15:42:91:14:87
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8afa1c3e-762a-4db1-b600-92897f76c67e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07c:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:a2:24:e1:8d:0b:b2:7f:c4:62:01:fa:0d:a5:8e:89:0e:9f:
         7d:f3:83:9e:0b:74:ab:55:40:1f:c3:5e:31:c5:bb:f5:6a:7d:
         6e:8b:aa:d2:10:30:02:cb:21:aa:25:b1:37:89:f4:df:29:f2:
         1c:d7:e2:1c:8a:3b:81:c2:d3:ce:d7:6b:12:93:18:22:ee:b9:
         67:2d:ff:10:29:de:8d:3f:2d:cf:2c:8c:b0:28:c9:b2:a6:b2:
         f3:b9:2a:d0:03:80:50:5d:5e:76:5f:08:b0:0e:9e:45:cc:77:
         60:20:33:46:be:9d:40:04:ed:3d:13:cf:7c:94:1d:9e:ff:16:
         09:81:e0:ff:59:99:e1:62:bf:ed:ac:fe:a5:61:24:64:c0:40:
         60:eb:dc:04:50:8a:56:2d:91:17:20:bf:ff:57:e8:ad:4f:32:
         16:94:31:52:43:f5:74:d7:e1:c7:a7:05:d2:ba:61:2b:8a:6d:
         37:7b:35:15:67:2f:2e:01:28:00:da:9e:b9:43:a2:2f:25:d7:
         cf:1e:80:59:c1:db:f3:ce:86:aa:b3:a8:52:3e:84:c8:c0:68:
         17:33:79:da:20:14:51:22:d4:f6:c5:96:81:b3:75:69:c6:10:
         bb:58:8a:61:a0:76:de:49:4c:39:46:50:7e:00:8e:4b:95:d8:
         6c:64:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----