Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5616cf9-78f7-4329-90b1-90a383fd5890.roa
File:                     b5616cf9-78f7-4329-90b1-90a383fd5890.roa (raw, json)
Hash identifier:          R+If9S0Gg4/sKG0ixqSh3ua7IaDZtDheSZQjoN0UwTU=
Subject key identifier:   68:05:73:41:10:8E:B5:A2:28:27:58:F3:D0:9D:FA:E5:41:22:ED:0B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       06CF0C572B084F0E1FE2DAEA2907C9BC5F7B5C8A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5616cf9-78f7-4329-90b1-90a383fd5890.roa
Signing time:             Mon 11 Sep 2023 00:00:00 +0000
ROA not before:           Mon 11 Sep 2023 00:00:00 +0000
ROA not after:            Mon 16 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:e000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Sep 2023 14:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cf:0c:57:2b:08:4f:0e:1f:e2:da:ea:29:07:c9:bc:5f:7b:5c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 11 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2023 GMT
        Subject: serialNumber=3699aca9746281199fb27bd4fdfd3cf0f26314157a31df30d768a264f6472908, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:21:67:8c:c2:02:03:3c:17:d6:d5:69:b0:
                    de:46:b2:45:32:9a:57:d9:3f:73:0b:88:de:8d:a3:
                    5a:1b:b1:d0:ef:19:0d:4e:71:38:7a:ef:8b:97:56:
                    31:08:47:df:40:0e:c6:1d:c5:35:de:27:ed:7d:fb:
                    65:e9:4e:32:1d:47:d6:07:e7:12:01:19:73:94:1c:
                    66:1f:c6:66:8f:c2:71:d0:82:dd:55:7b:2f:71:c4:
                    b8:e0:02:32:3c:9c:78:a3:c8:17:64:da:96:34:f3:
                    2e:3a:4e:e5:4e:db:42:0d:a3:2c:ff:bd:3e:85:c5:
                    24:7a:3a:a4:78:7d:cf:79:60:9b:6c:38:70:00:1a:
                    24:11:6a:24:5b:7a:95:00:98:4f:0c:d5:de:8c:71:
                    3f:4a:9c:1a:eb:bd:dc:49:79:e3:49:6a:be:07:ff:
                    6d:bb:b4:bf:0b:c7:e8:62:3d:f8:fa:69:00:e5:18:
                    9b:26:97:99:c9:d5:ed:30:e1:e2:65:3c:3e:0f:80:
                    5d:dd:1b:b2:48:4e:cc:5d:66:05:2c:52:66:57:58:
                    3d:e2:4b:bb:f5:5f:9e:7a:bb:db:cc:b0:95:c3:ce:
                    a0:41:1f:b3:98:e0:33:42:3e:a2:2f:77:aa:01:03:
                    3c:a5:50:0a:1f:a2:82:d8:59:b6:82:af:f9:ba:80:
                    29:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:05:73:41:10:8E:B5:A2:28:27:58:F3:D0:9D:FA:E5:41:22:ED:0B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5616cf9-78f7-4329-90b1-90a383fd5890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:e8:f7:06:4d:92:be:7b:e5:5f:05:61:43:d8:f2:22:0e:1f:
         17:de:55:14:05:e6:00:70:f4:97:ac:fa:4e:c7:95:b8:4c:28:
         95:13:73:f5:d9:ec:e4:8f:0f:ec:5c:38:95:7c:9e:c7:8f:da:
         7f:ad:6c:ad:19:b6:5c:6d:c7:07:22:b6:11:e9:51:c0:a2:a2:
         aa:2a:fa:99:e5:72:03:f8:e2:77:8d:5a:13:58:44:bf:ce:6f:
         ee:ee:4b:ab:f9:d2:a4:f8:cd:d2:b2:f8:3b:7f:1c:09:36:b4:
         c8:fd:d9:1d:4b:dd:59:2d:54:b6:fc:82:84:cf:47:d2:d3:c9:
         70:03:22:a1:5f:3e:10:ea:b3:0e:8b:11:a4:3b:65:56:83:5b:
         0c:f1:d8:6d:82:3c:2e:62:e4:97:53:75:54:c3:71:96:8a:8b:
         51:76:04:a7:e8:44:68:cf:f5:92:b1:7f:c2:d2:95:c3:d4:35:
         9e:37:fe:94:e8:0d:5e:ee:52:0d:c1:ea:8f:06:11:28:1c:67:
         fe:13:b1:78:8c:56:ac:83:20:3e:7d:36:57:0b:2b:90:32:f3:
         61:b6:25:79:d8:7d:41:38:3c:d3:e3:35:24:43:52:31:c2:21:
         ab:21:d7:88:92:d8:84:ff:5c:f6:df:2a:98:76:f4:d4:d1:fe:
         b3:9f:66:fd
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUBs8MVysITw4f4trqKQfJvF97XIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yMzA5MTEwMDAwMDBaFw0yMzEwMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDM2OTlhY2E5NzQ2MjgxMTk5ZmIyN2JkNGZkZmQzY2YwZjI2MzE0MTU3YTMx
ZGYzMGQ3NjhhMjY0ZjY0NzI5MDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK9RIWeMwgIDPBfW1Wmw3kayRTKaV9k/cwuI3o2jWhux0O8ZDU5xOHrvi5dW
MQhH30AOxh3FNd4n7X37ZelOMh1H1gfnEgEZc5QcZh/GZo/CcdCC3VV7L3HEuOAC
MjyceKPIF2TaljTzLjpO5U7bQg2jLP+9PoXFJHo6pHh9z3lgm2w4cAAaJBFqJFt6
lQCYTwzV3oxxP0qcGuu93El540lqvgf/bbu0vwvH6GI9+PppAOUYmyaXmcnV7TDh
4mU8Pg+AXd0bskhOzF1mBSxSZldYPeJLu/Vfnnq728ywlcPOoEEfs5jgM0I+oi93
qgEDPKVQCh+igthZtoKv+bqAKXECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRoBXNB
EI61oignWPPQnfrlQSLtCzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjU2MTZjZjktNzhmNy00MzI5LTkwYjEtOTBhMzgzZmQ1ODkwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H/g
MA0GCSqGSIb3DQEBCwUAA4IBAQAm6PcGTZK+e+VfBWFD2PIiDh8X3lUUBeYAcPSX
rPpOx5W4TCiVE3P12ezkjw/sXDiVfJ7Hj9p/rWytGbZcbccHIrYR6VHAoqKqKvqZ
5XID+OJ3jVoTWES/zm/u7kur+dKk+M3Ssvg7fxwJNrTI/dkdS91ZLVS2/IKEz0fS
08lwAyKhXz4Q6rMOixGkO2VWg1sM8dhtgjwuYuSXU3VUw3GWiotRdgSn6ERoz/WS
sX/C0pXD1DWeN/6U6A1e7lINweqPBhEoHGf+E7F4jFasgyA+fTZXCyuQMvNhtiV5
2H1BODzT4zUkQ1IxwiGrIdeIktiE/1z23yqYdvTU0f6zn2b9
-----END CERTIFICATE-----