Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f25924f8-f3da-4eb4-b047-fdbfbc8e41e9.roa
File:                     f25924f8-f3da-4eb4-b047-fdbfbc8e41e9.roa (raw, json)
Hash identifier:          D+35HgLquo5JCtRdDKRq4pA80l8oYIm33dJfvPKOcyU=
Subject key identifier:   22:99:47:B2:0C:39:F5:F0:E7:F8:29:D0:5C:E1:DF:75:45:40:C0:C5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3303F8E2F3F57365FCFEF3F343F23FECCF2E5FA5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f25924f8-f3da-4eb4-b047-fdbfbc8e41e9.roa
Signing time:             Mon 11 Sep 2023 00:00:00 +0000
ROA not before:           Mon 11 Sep 2023 00:00:00 +0000
ROA not after:            Mon 16 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d077:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Sep 2023 14:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:03:f8:e2:f3:f5:73:65:fc:fe:f3:f3:43:f2:3f:ec:cf:2e:5f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 11 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2023 GMT
        Subject: serialNumber=dda71b4824974e6ed5e2deecef275e67cbb355e7f0972576268748d46ac90c58, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:9b:f1:46:bd:d3:0f:d2:2c:de:b9:de:b6:
                    a3:1f:68:52:8b:21:be:10:93:0c:89:5d:35:0b:7d:
                    49:86:88:32:65:4b:fb:a1:b9:bf:ee:f5:a0:f7:6f:
                    d1:a7:14:a2:25:5c:3e:02:51:94:d5:46:f3:cf:64:
                    0d:cf:7b:97:8b:96:17:51:8e:80:44:71:0e:87:25:
                    b2:ef:58:54:bc:a7:a1:15:7c:2a:b5:8a:e0:57:e8:
                    1b:79:17:3b:45:e2:bb:08:d8:78:60:82:26:27:fc:
                    36:9d:bf:ff:e6:97:bf:98:56:b4:37:7a:21:3b:1a:
                    72:70:8c:f8:a9:41:dc:37:df:3b:48:e0:a7:a5:89:
                    2b:77:53:eb:09:94:30:09:c2:0f:40:f4:20:82:90:
                    d3:2d:61:2c:6c:cf:1c:84:66:5d:85:9c:a4:f7:2f:
                    bf:ba:a7:6c:d3:e0:08:04:95:58:ee:a6:d0:1c:00:
                    fe:c0:88:1f:e3:7c:c4:4c:cf:1d:2c:3d:76:4c:57:
                    2f:6c:70:8f:32:3c:6b:6e:69:47:bd:8c:49:a3:54:
                    e1:f8:67:df:00:9a:03:81:47:90:92:1f:ae:dc:bf:
                    eb:d7:53:69:cf:1b:ca:5d:ef:ad:8e:bc:57:b6:62:
                    9d:6b:1b:51:6b:38:12:a5:51:1f:68:a2:2a:77:82:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:99:47:B2:0C:39:F5:F0:E7:F8:29:D0:5C:E1:DF:75:45:40:C0:C5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f25924f8-f3da-4eb4-b047-fdbfbc8e41e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d077:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:16:63:78:f3:f1:66:de:6a:7d:8b:5f:87:c3:40:5d:d3:ba:
         0e:e1:16:d7:b9:07:39:55:86:c0:cb:fd:0c:f2:0b:92:0a:27:
         2c:4c:b6:e2:fa:a9:5b:bd:f8:7e:fa:f6:48:87:ae:63:c5:62:
         86:da:09:7b:2f:e7:2a:eb:55:cd:69:09:d8:80:b0:39:35:f5:
         4e:0c:05:6a:53:44:bf:31:33:5b:5a:0a:15:db:e7:2d:9a:ea:
         e5:48:3c:72:2c:65:e5:f5:40:f1:6e:9d:ba:48:0d:d8:de:bd:
         66:8d:69:f7:09:0e:46:cb:3a:54:d2:15:e0:a8:c9:2b:ef:6b:
         fc:94:93:28:f0:0e:b1:5e:d3:33:4c:3b:98:71:6f:56:4e:ab:
         08:67:86:5d:74:07:dc:aa:a6:8b:30:2c:ca:60:9c:02:ef:b4:
         6b:1f:3e:6c:94:1f:84:47:18:de:c8:a4:b1:3c:d2:97:ab:ae:
         cd:ef:8b:5a:99:af:54:f3:25:48:ae:53:ba:96:c9:99:a5:ee:
         d5:1e:02:3d:82:1c:1f:cc:39:76:1f:93:15:56:dc:d3:32:6d:
         a9:e0:8a:3f:8f:8d:4b:31:70:7d:10:85:c5:be:73:9c:13:64:
         0f:e2:00:04:5b:e2:9c:93:df:45:fb:b7:1b:bd:7c:8e:ee:d1:
         6c:17:9b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----