Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9612fc10-b58f-40ba-931d-e2082c30f2e9.roa
File:                     9612fc10-b58f-40ba-931d-e2082c30f2e9.roa (raw, json)
Hash identifier:          4m/ILi37aXUTFg7eLO2R3HjWY3jmGc864FBb7x2V6BM=
Subject key identifier:   C4:01:A0:AF:89:D3:92:F0:BD:1E:5A:F3:0B:4E:F1:A5:DC:D6:7E:54
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2CF9E2461A98D29E1D4277AC79BC3CE882F23763
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9612fc10-b58f-40ba-931d-e2082c30f2e9.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d040:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f9:e2:46:1a:98:d2:9e:1d:42:77:ac:79:bc:3c:e8:82:f2:37:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=f0405fecaaa4586e10bcc06e8f6936a1c7138c4a86d1be1c4f11e4f88de38d16, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:5d:5d:71:99:48:a9:7a:df:71:16:3b:20:
                    90:1e:97:e9:09:2a:f3:00:27:70:fa:b5:f5:90:22:
                    80:be:87:2a:1a:01:f3:44:68:28:1c:32:ab:8e:1a:
                    ad:f3:29:9f:78:c8:a3:6d:9e:44:52:6d:22:bb:b0:
                    6b:63:f5:b9:d0:e4:56:6d:ac:5a:fd:cf:9f:97:be:
                    84:9f:f0:e7:62:ea:31:84:49:e0:10:65:b8:d0:d9:
                    fe:b9:97:14:f4:3f:19:c7:98:0f:2d:15:c1:64:e7:
                    f4:c0:8c:83:90:4f:e7:ec:71:51:36:d6:cd:a3:fe:
                    8a:4b:e5:28:61:14:3e:8d:8f:de:f3:24:ce:a9:b1:
                    14:f9:95:1b:4e:9a:40:f2:60:a1:3a:7e:35:8e:ec:
                    44:a5:4c:7f:53:60:a2:07:47:d8:0e:20:be:e3:57:
                    ca:60:00:f2:d8:0d:ce:78:3d:02:98:a0:71:c3:aa:
                    ac:c4:80:8a:fe:dd:bd:51:a7:07:42:91:9c:75:08:
                    c3:be:09:3b:8a:e6:c9:d2:e9:3b:f5:75:16:0d:81:
                    02:0b:0c:b0:8e:ac:07:76:64:d0:10:73:f4:20:3a:
                    3e:73:f8:20:e4:88:fd:77:75:c9:2a:3a:20:74:84:
                    f4:24:3f:bf:ed:b8:d1:b3:a9:0c:16:6e:8d:ca:38:
                    8f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:01:A0:AF:89:D3:92:F0:BD:1E:5A:F3:0B:4E:F1:A5:DC:D6:7E:54
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9612fc10-b58f-40ba-931d-e2082c30f2e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d040:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:6a:e9:f0:74:23:40:75:d6:07:cf:69:24:3e:c8:13:87:4d:
         8e:1c:3f:58:05:84:49:04:46:20:c2:f8:0d:02:f0:29:4d:18:
         51:d0:89:1a:b3:1d:ae:3d:51:46:57:b1:5e:18:4f:bf:22:cf:
         ed:d6:9a:98:71:66:6b:43:bd:00:a5:20:7d:5f:a4:7a:d7:1d:
         ff:56:72:32:35:db:d4:e1:1f:67:76:c6:c4:7e:19:73:68:60:
         d8:cd:74:a8:ec:ed:ac:83:87:de:36:53:f9:fc:ca:33:2a:86:
         6d:0c:e0:31:75:da:22:f1:6b:a4:96:53:f8:c2:1d:c8:1c:fb:
         38:38:9f:d2:d1:61:39:4d:a0:0d:a2:f0:df:c9:e6:08:ec:2f:
         d3:5f:e0:c4:e2:33:b2:16:79:67:df:d8:b7:2f:57:ea:88:a1:
         50:cb:53:15:40:19:78:92:e8:e0:92:44:de:b2:62:07:1e:6b:
         77:f9:97:4c:5a:9d:fe:b8:5d:2a:df:4e:44:c7:b3:f3:1a:9c:
         90:77:91:79:6e:83:64:f4:c6:36:17:7c:d5:94:da:71:b7:b5:
         09:c3:c2:e5:13:40:8e:12:c8:d0:42:70:c2:a3:b4:0a:8c:0f:
         78:a8:c3:79:6f:bc:9c:67:16:ac:fd:e8:8b:62:1b:f4:96:86:
         c2:d5:03:d8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULPniRhqY0p4dQnesebw86ILyN2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEwMjgwMDAwMDBaFw0yNDEyMDIyMzU5NTlaMHoxSTBHBgNV
BAUTQGYwNDA1ZmVjYWFhNDU4NmUxMGJjYzA2ZThmNjkzNmExYzcxMzhjNGE4NmQx
YmUxYzRmMTFlNGY4OGRlMzhkMTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK+LXV1xmUipet9xFjsgkB6X6Qkq8wAncPq19ZAigL6HKhoB80RoKBwyq44a
rfMpn3jIo22eRFJtIruwa2P1udDkVm2sWv3Pn5e+hJ/w52LqMYRJ4BBluNDZ/rmX
FPQ/GceYDy0VwWTn9MCMg5BP5+xxUTbWzaP+ikvlKGEUPo2P3vMkzqmxFPmVG06a
QPJgoTp+NY7sRKVMf1NgogdH2A4gvuNXymAA8tgNzng9ApigccOqrMSAiv7dvVGn
B0KRnHUIw74JO4rmydLpO/V1Fg2BAgsMsI6sB3Zk0BBz9CA6PnP4IOSI/Xd1ySo6
IHSE9CQ/v+240bOpDBZujco4j78CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTEAaCv
idOS8L0eWvMLTvGl3NZ+VDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTYxMmZjMTAtYjU4Zi00MGJhLTkzMWQtZTIwODJjMzBmMmU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0EAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAfaunwdCNAddYHz2kkPsgTh02OHD9YBYRJBEYg
wvgNAvApTRhR0Ikasx2uPVFGV7FeGE+/Is/t1pqYcWZrQ70ApSB9X6R61x3/VnIy
NdvU4R9ndsbEfhlzaGDYzXSo7O2sg4feNlP5/MozKoZtDOAxddoi8WukllP4wh3I
HPs4OJ/S0WE5TaANovDfyeYI7C/TX+DE4jOyFnln39i3L1fqiKFQy1MVQBl4kujg
kkTesmIHHmt3+ZdMWp3+uF0q305Ex7PzGpyQd5F5boNk9MY2F3zVlNpxt7UJw8Ll
E0COEsjQQnDCo7QKjA94qMN5b7ycZxas/eiLYhv0lobC1QPY
-----END CERTIFICATE-----