Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4d3b985-fb36-4d6a-bd42-a221f302409f.roa
File:                     c4d3b985-fb36-4d6a-bd42-a221f302409f.roa (raw, json)
Hash identifier:          Kc7AHluawbw/oFRopaC5NKGzoFabW37I3eEiCDYagg0=
Subject key identifier:   28:3C:1D:D8:06:52:08:F7:B3:18:90:33:70:25:BB:14:1D:E0:BC:DD
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4CE3AEBF9FEA2D2CB1470ECB521AFB9C1EA39946
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4d3b985-fb36-4d6a-bd42-a221f302409f.roa
Signing time:             Sat 09 Sep 2023 00:00:00 +0000
ROA not before:           Sat 09 Sep 2023 00:00:00 +0000
ROA not after:            Sat 14 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:9000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Sep 2023 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e3:ae:bf:9f:ea:2d:2c:b1:47:0e:cb:52:1a:fb:9c:1e:a3:99:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep  9 00:00:00 2023 GMT
            Not After : Oct 14 23:59:59 2023 GMT
        Subject: serialNumber=9f48ab3062d27900d587d2630d113994a11c67215fd95c4c5f01a21ad2c62278, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:40:25:70:af:81:3a:6d:1e:4c:42:16:cf:
                    71:64:ed:88:c9:45:81:03:3a:8f:9c:a3:64:63:60:
                    4f:f5:ce:68:a6:6f:0a:72:4a:7a:05:db:2a:9a:e9:
                    cf:c4:a6:db:a5:df:d4:cb:3a:f3:58:58:58:cc:af:
                    6e:ac:61:95:93:93:c6:b8:bc:15:b4:4a:1a:01:17:
                    b6:4e:b0:bc:61:87:47:70:39:9c:0c:f0:da:82:1f:
                    09:47:c5:39:ce:e2:0b:c5:fe:6a:af:b5:94:8d:0f:
                    b8:61:f5:70:73:29:f1:c3:af:3e:25:df:63:90:8f:
                    2a:ee:07:35:63:a4:3a:64:2c:f2:63:44:89:00:42:
                    ce:c3:9f:44:48:6f:3c:8b:fd:16:b3:db:60:a4:b5:
                    30:71:65:7f:0e:ca:a8:bd:46:27:4b:85:b7:11:22:
                    d8:79:ea:9f:d9:99:d9:95:e4:ed:6b:69:28:02:ab:
                    d4:57:21:c8:ab:00:13:03:26:bc:6c:96:59:42:cb:
                    5b:5e:ae:8b:06:3f:4e:9f:2b:5a:7f:f4:c1:bd:a1:
                    a7:27:65:fe:b4:82:50:df:37:46:53:d0:2f:ef:8b:
                    f5:a3:1d:4f:86:3e:02:46:5f:fb:ae:a5:d8:00:92:
                    d2:db:ab:2d:f6:41:09:65:db:e4:0c:b5:23:20:23:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3C:1D:D8:06:52:08:F7:B3:18:90:33:70:25:BB:14:1D:E0:BC:DD
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4d3b985-fb36-4d6a-bd42-a221f302409f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:a9:cb:44:c2:b6:37:ab:13:d6:69:20:68:4f:20:76:21:7e:
         87:17:9c:4e:ee:cb:f4:11:3a:e6:df:d6:f1:43:2f:f1:6f:76:
         46:87:62:ac:07:83:3d:2f:3c:35:af:15:87:ba:76:f9:17:71:
         b8:c8:62:df:e2:db:7b:cb:c2:ee:2a:5c:70:a9:7b:1e:56:50:
         ed:49:b0:39:f7:89:05:37:d7:4f:35:fe:df:4e:ec:e6:6f:de:
         cf:a1:74:8b:68:e1:2a:3f:0d:de:6a:a7:f6:85:bd:2e:b5:dd:
         ab:a3:5a:2b:00:86:d0:3c:59:64:2f:17:60:b8:5e:3b:6f:d0:
         a0:e3:f5:17:24:cb:07:72:75:35:51:a3:c5:60:5f:d3:52:ec:
         72:6b:70:c6:16:de:a3:62:8a:43:1a:cb:fe:3d:75:2f:58:19:
         24:76:f4:42:d0:f9:5c:ff:1e:0b:3c:1f:6c:23:73:8a:75:fc:
         5a:78:0d:af:57:26:9b:79:6f:9a:b4:5e:27:1b:f2:55:89:8e:
         a4:6d:bc:45:31:dc:d1:29:13:d2:8f:ac:bf:90:9e:f0:b6:b0:
         14:d0:8d:da:82:15:84:7b:ff:9c:b0:e9:bf:27:4b:ac:27:20:
         1a:ea:ff:ea:10:2b:c1:3b:10:68:17:97:9d:9d:2a:79:5b:56:
         0d:4d:1d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----