Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/905bb587-bceb-45a9-857c-944564030c20.roa
File:                     905bb587-bceb-45a9-857c-944564030c20.roa (raw, json)
Hash identifier:          70Z1Djfnhfe3AZpcTkPUmEsOM7urcKQkJ6skZhXLw3A=
Subject key identifier:   20:59:B5:B8:B8:7E:9B:D1:C8:6B:DF:2D:A2:1D:BB:97:66:88:8C:55
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3168CF30498AB9294D58CAF6B58F4B17BCB6F730
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/905bb587-bceb-45a9-857c-944564030c20.roa
Signing time:             Sat 09 Sep 2023 00:00:00 +0000
ROA not before:           Sat 09 Sep 2023 00:00:00 +0000
ROA not after:            Sat 14 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Sep 2023 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:68:cf:30:49:8a:b9:29:4d:58:ca:f6:b5:8f:4b:17:bc:b6:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep  9 00:00:00 2023 GMT
            Not After : Oct 14 23:59:59 2023 GMT
        Subject: serialNumber=e5c15009b28b9e8f70ced55c2d9476fe9cb6914a8785948646c5e887b19deff2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:a4:34:f5:56:5d:b9:b2:6e:9d:af:8e:c3:
                    93:37:5d:30:e0:46:7a:c3:10:34:de:4a:e8:f1:ba:
                    c3:68:6e:a6:48:a3:e5:c9:64:b1:1a:eb:1c:e9:d1:
                    ea:e9:a5:50:b3:6f:1a:30:fa:c5:4c:8b:b7:76:cc:
                    82:06:b3:fc:cf:14:21:6b:8b:90:0d:44:38:23:1b:
                    a3:e7:0b:19:88:43:00:fc:03:39:10:7a:b6:ac:39:
                    d3:41:f5:11:da:b8:4a:f4:71:20:cc:79:0d:cd:ec:
                    d0:5f:dd:30:11:61:64:e1:f3:79:fc:5a:a0:43:1d:
                    fe:6c:10:e4:a5:82:0b:dc:5f:23:be:76:a5:7a:cf:
                    4e:80:29:22:19:2f:6a:f8:c5:18:1e:72:9b:a2:f8:
                    4a:69:42:69:c2:55:fc:82:29:42:b9:02:bb:7f:c5:
                    fe:37:05:fc:50:9a:6c:6e:12:23:38:21:9a:08:db:
                    3f:ff:7d:5d:07:4b:9f:c9:37:01:33:90:fc:12:9e:
                    41:66:14:b4:b3:26:f6:d0:d9:63:f9:6e:86:36:6f:
                    86:2e:c8:16:e2:34:25:31:5b:9d:38:2f:80:78:22:
                    53:49:84:b1:9e:f1:b1:55:20:45:a6:76:28:ba:c5:
                    16:84:d2:8f:25:18:8c:fb:25:f3:c9:d9:ba:96:e8:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:59:B5:B8:B8:7E:9B:D1:C8:6B:DF:2D:A2:1D:BB:97:66:88:8C:55
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/905bb587-bceb-45a9-857c-944564030c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:76:0d:23:56:e0:81:8f:d8:0d:bd:d3:3a:6c:de:d0:78:cd:
         e0:a7:7c:ed:30:4e:aa:b9:bb:ae:71:79:4e:a8:b9:b5:45:b1:
         c6:cc:24:9d:c2:f6:89:4f:db:05:49:84:c4:96:7f:84:cc:be:
         d8:5c:5f:08:99:1a:9d:88:86:9a:c3:25:57:b6:60:9a:91:c7:
         bc:f6:db:8f:0d:23:fb:93:59:53:17:84:fe:7d:84:66:9c:8c:
         bf:5c:04:88:75:72:c0:51:da:11:a6:ce:27:0b:5c:73:1a:ba:
         53:d1:86:0a:d4:1b:2a:83:42:86:f7:01:55:d4:13:18:cf:c3:
         08:29:d5:19:6d:45:3e:3d:64:f2:c8:d0:24:61:e8:71:21:21:
         a3:17:71:aa:f7:1e:40:1d:a8:fd:70:39:0b:cd:16:c6:42:62:
         c7:40:7c:3b:78:1d:db:e6:3e:9c:b0:80:9c:f8:1c:5d:f5:d1:
         c9:04:a2:00:2a:4d:df:bb:16:02:76:80:b2:71:57:4c:f6:a3:
         d8:f3:e3:44:bb:7f:8e:17:13:3d:0a:36:4b:7d:79:07:f7:84:
         16:e8:dd:47:73:66:eb:36:38:7f:fd:8b:ef:21:cd:22:20:bb:
         cd:f0:f7:1e:71:90:31:cd:c9:88:a8:c9:75:8b:b7:88:0c:97:
         a2:67:14:d8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUMWjPMEmKuSlNWMr2tY9LF7y29zAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yMzA5MDkwMDAwMDBaFw0yMzEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQGU1YzE1MDA5YjI4YjllOGY3MGNlZDU1YzJkOTQ3NmZlOWNiNjkxNGE4Nzg1
OTQ4NjQ2YzVlODg3YjE5ZGVmZjIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMCUpDT1Vl25sm6dr47DkzddMOBGesMQNN5K6PG6w2hupkij5clksRrrHOnR
6umlULNvGjD6xUyLt3bMggaz/M8UIWuLkA1EOCMbo+cLGYhDAPwDORB6tqw500H1
Edq4SvRxIMx5Dc3s0F/dMBFhZOHzefxaoEMd/mwQ5KWCC9xfI752pXrPToApIhkv
avjFGB5ym6L4SmlCacJV/IIpQrkCu3/F/jcF/FCabG4SIzghmgjbP/99XQdLn8k3
ATOQ/BKeQWYUtLMm9tDZY/luhjZvhi7IFuI0JTFbnTgvgHgiU0mEsZ7xsVUgRaZ2
KLrFFoTSjyUYjPsl88nZupboiWECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQgWbW4
uH6b0chr3y2iHbuXZoiMVTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTA1YmI1ODctYmNlYi00NWE5LTg1N2MtOTQ0NTY0MDMwYzIwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DUg
MA0GCSqGSIb3DQEBCwUAA4IBAQCMdg0jVuCBj9gNvdM6bN7QeM3gp3ztME6qubuu
cXlOqLm1RbHGzCSdwvaJT9sFSYTEln+EzL7YXF8ImRqdiIaawyVXtmCakce89tuP
DSP7k1lTF4T+fYRmnIy/XASIdXLAUdoRps4nC1xzGrpT0YYK1Bsqg0KG9wFV1BMY
z8MIKdUZbUU+PWTyyNAkYehxISGjF3Gq9x5AHaj9cDkLzRbGQmLHQHw7eB3b5j6c
sICc+Bxd9dHJBKIAKk3fuxYCdoCycVdM9qPY8+NEu3+OFxM9CjZLfXkH94QW6N1H
c2brNjh//YvvIc0iILvN8PcecZAxzcmIqMl1i7eIDJeiZxTY
-----END CERTIFICATE-----