Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b0e282b-3b78-4530-8323-91f35bf9b20b.roa
File:                     9b0e282b-3b78-4530-8323-91f35bf9b20b.roa (raw, json)
Hash identifier:          dufVxSIqB/SILYmhTFUiA3xe9n9f1sDlmXTkMkTObCA=
Subject key identifier:   BB:3D:3B:5D:22:82:1B:6C:93:13:7B:C9:D6:54:F2:1D:A7:F4:BE:C7
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4467D78857D9121FF997088609E2E1111E18E8DC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b0e282b-3b78-4530-8323-91f35bf9b20b.roa
Signing time:             Mon 11 Sep 2023 00:00:00 +0000
ROA not before:           Mon 11 Sep 2023 00:00:00 +0000
ROA not after:            Mon 16 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d077:6000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Sep 2023 14:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:67:d7:88:57:d9:12:1f:f9:97:08:86:09:e2:e1:11:1e:18:e8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 11 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2023 GMT
        Subject: serialNumber=0c3da2bcc20d9a2f6f7810f84b695f1c971beaf96077c20d7c04482c89b9771b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:65:f4:d0:95:3e:ec:cc:d3:e8:dd:85:c3:
                    3b:67:17:e7:20:11:6c:a9:30:8d:51:1e:63:28:cf:
                    8e:51:cf:98:44:8d:8a:c0:c9:3c:12:da:6a:81:8f:
                    0d:95:52:8c:67:88:bd:29:7d:f1:70:2f:8f:a6:83:
                    20:ce:36:92:e5:2e:12:4d:4d:1d:1d:08:aa:45:ad:
                    3f:7c:5a:06:c1:c7:e2:82:a4:b4:a3:94:96:fe:87:
                    dd:da:af:a7:42:87:29:f5:8b:89:84:83:64:0a:ff:
                    67:60:e6:d2:66:54:23:55:db:bd:62:93:7c:62:7d:
                    f1:9f:31:5b:fa:f0:7b:43:8d:83:26:26:af:fd:43:
                    a0:31:72:9d:ec:ca:b2:6d:0c:a1:02:38:10:65:7b:
                    70:33:55:bb:58:cb:4e:8f:aa:31:72:17:3e:28:b3:
                    d0:40:30:98:2f:18:cf:32:d5:1d:c1:34:29:a2:ff:
                    c4:90:e0:d3:9b:ae:0b:02:cd:28:fa:6d:aa:96:74:
                    06:94:fd:74:4c:08:0c:1d:17:6b:6c:40:ca:c8:32:
                    5d:4c:30:cd:cc:a2:d7:76:54:87:d7:49:4d:47:6b:
                    32:2c:64:08:29:5e:2a:b7:b8:3e:6d:4f:70:85:65:
                    2c:ca:ba:b7:64:33:12:fa:e3:97:f7:c7:37:ab:3e:
                    6d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3D:3B:5D:22:82:1B:6C:93:13:7B:C9:D6:54:F2:1D:A7:F4:BE:C7
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b0e282b-3b78-4530-8323-91f35bf9b20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d077:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:28:89:7b:02:93:96:bc:16:57:cd:94:bf:65:ac:27:11:ba:
         29:50:e6:62:ea:67:b1:01:ac:5d:8b:c5:48:29:0b:81:54:0f:
         ed:7c:7b:83:ea:df:3e:3c:cc:0d:de:89:2e:7f:48:d6:4c:6b:
         73:c7:2e:a2:fd:36:ad:a2:f1:90:4d:a6:f7:c4:e3:f6:e2:ca:
         5e:dc:92:6b:5a:a7:50:67:ff:2b:e7:c7:56:37:fb:e6:92:40:
         69:d5:ce:be:bb:b8:5b:ea:c8:c7:6e:5d:7a:a5:81:0f:1a:2b:
         36:83:e7:29:d0:16:9b:b5:be:c6:82:2b:cc:50:31:1a:ea:c1:
         42:03:f8:40:0c:e2:f1:d6:a2:b5:77:33:94:4a:99:34:cd:95:
         ad:68:a1:3f:72:f8:9d:a8:5f:24:c4:27:98:ca:f7:64:9b:13:
         03:03:95:73:0e:a9:1e:4d:84:9f:57:3a:8a:e1:45:8f:0f:b6:
         85:4a:07:0b:a6:0c:c6:d4:a5:8c:b5:bf:b4:7a:0e:9c:8e:8d:
         fe:a7:c9:69:83:da:57:8f:26:31:6c:c8:68:3a:12:27:0e:85:
         0b:b8:36:51:84:d3:79:94:9a:7c:08:20:97:45:26:e0:cd:e1:
         33:8a:5b:4a:30:ee:1a:09:ca:d4:de:7d:83:14:2e:a9:7a:6e:
         a5:a8:5c:8b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIURGfXiFfZEh/5lwiGCeLhER4Y6NwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yMzA5MTEwMDAwMDBaFw0yMzEwMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDBjM2RhMmJjYzIwZDlhMmY2Zjc4MTBmODRiNjk1ZjFjOTcxYmVhZjk2MDc3
YzIwZDdjMDQ0ODJjODliOTc3MWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKJoZfTQlT7szNPo3YXDO2cX5yARbKkwjVEeYyjPjlHPmESNisDJPBLaaoGP
DZVSjGeIvSl98XAvj6aDIM42kuUuEk1NHR0IqkWtP3xaBsHH4oKktKOUlv6H3dqv
p0KHKfWLiYSDZAr/Z2Dm0mZUI1XbvWKTfGJ98Z8xW/rwe0ONgyYmr/1DoDFynezK
sm0MoQI4EGV7cDNVu1jLTo+qMXIXPiiz0EAwmC8YzzLVHcE0KaL/xJDg05uuCwLN
KPptqpZ0BpT9dEwIDB0Xa2xAysgyXUwwzcyi13ZUh9dJTUdrMixkCCleKre4Pm1P
cIVlLMq6t2QzEvrjl/fHN6s+ba0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS7PTtd
IoIbbJMTe8nWVPIdp/S+xzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWIwZTI4MmItM2I3OC00NTMwLTgzMjMtOTFmMzViZjliMjBiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Hdg
MA0GCSqGSIb3DQEBCwUAA4IBAQB8KIl7ApOWvBZXzZS/ZawnEbopUOZi6mexAaxd
i8VIKQuBVA/tfHuD6t8+PMwN3okuf0jWTGtzxy6i/TatovGQTab3xOP24spe3JJr
WqdQZ/8r58dWN/vmkkBp1c6+u7hb6sjHbl16pYEPGis2g+cp0Babtb7GgivMUDEa
6sFCA/hADOLx1qK1dzOUSpk0zZWtaKE/cvidqF8kxCeYyvdkmxMDA5VzDqkeTYSf
VzqK4UWPD7aFSgcLpgzG1KWMtb+0eg6cjo3+p8lpg9pXjyYxbMhoOhInDoULuDZR
hNN5lJp8CCCXRSbgzeEziltKMO4aCcrU3n2DFC6pem6lqFyL
-----END CERTIFICATE-----