Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa62015a-a5e6-4da6-b304-69d543bb9c8a.roa
File:                     fa62015a-a5e6-4da6-b304-69d543bb9c8a.roa (raw, json)
Hash identifier:          npR8rKOjoEkDNgFYGsI4SdJGuzKdKCmAexhJPzrp3L8=
Subject key identifier:   CD:F4:55:39:95:5E:BF:42:7D:55:C5:DE:8D:6E:18:F8:A8:1E:27:6C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1EDA05DD08B4969377FBC723E64295DBB74CED91
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa62015a-a5e6-4da6-b304-69d543bb9c8a.roa
Signing time:             Mon 11 Sep 2023 00:00:00 +0000
ROA not before:           Mon 11 Sep 2023 00:00:00 +0000
ROA not after:            Mon 16 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d070:8000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Sep 2023 14:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:da:05:dd:08:b4:96:93:77:fb:c7:23:e6:42:95:db:b7:4c:ed:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep 11 00:00:00 2023 GMT
            Not After : Oct 16 23:59:59 2023 GMT
        Subject: serialNumber=9481031bdef425bcc80d9a21f3f0b2b92b27f8a0c1f48d84aca513ecfc4bdd11, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:21:24:93:5a:53:fa:a7:0c:a1:fd:32:f9:
                    f9:36:e4:01:73:7f:50:a0:7e:f3:f6:45:11:67:0d:
                    46:c3:e5:b1:7c:14:d9:67:ad:82:53:be:e6:d9:27:
                    4b:7d:11:9a:29:9b:c0:45:da:f3:5d:4f:10:48:96:
                    ef:85:02:30:68:3e:0b:81:e7:bf:a7:54:5b:cc:64:
                    f2:44:30:53:e9:00:97:f4:a5:f9:2e:6d:23:b9:62:
                    16:83:87:d6:b7:43:62:6c:d5:4a:3e:3b:4e:4b:c7:
                    a1:d2:6d:ab:cd:b5:e0:68:f4:05:80:f9:d0:ca:e2:
                    d0:7a:0f:47:15:95:df:cd:ec:b0:8c:67:9f:f3:94:
                    67:5f:39:39:7f:08:61:f6:6c:bf:26:1b:a6:5a:15:
                    5f:e9:18:38:06:79:14:2c:7d:7d:60:68:38:e5:13:
                    48:4b:aa:16:69:b5:c5:35:53:6a:bc:37:42:c3:c8:
                    01:fb:33:9d:e0:2c:76:74:39:88:ef:d3:d2:39:76:
                    55:60:0b:58:e0:4c:75:d2:dc:a1:96:35:e1:77:a1:
                    94:f5:ab:62:91:d4:f7:34:33:40:1d:84:98:65:80:
                    6d:17:b3:36:e7:9d:fc:0e:55:7e:eb:2f:25:ca:a5:
                    07:b8:a7:59:89:21:ea:02:b5:c0:a1:31:aa:cb:15:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F4:55:39:95:5E:BF:42:7D:55:C5:DE:8D:6E:18:F8:A8:1E:27:6C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa62015a-a5e6-4da6-b304-69d543bb9c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d070:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:49:f5:70:2c:0c:55:5d:5a:04:17:bf:9a:71:ba:72:45:8a:
         05:30:1c:27:5b:a7:8f:55:04:30:40:49:b6:36:55:b4:ee:1d:
         93:fe:f1:cf:5d:8b:1e:fb:35:f1:f8:57:8f:af:59:f2:e6:6e:
         7e:bd:f4:d0:62:2e:d4:a8:51:80:bf:aa:94:a4:e4:86:f6:18:
         03:82:0a:06:0a:25:a5:31:97:4b:64:b9:f4:5a:16:d8:68:07:
         95:85:42:e6:3d:c8:fe:21:76:66:c3:17:0e:c6:ab:39:af:75:
         fa:9f:03:3c:d5:c4:06:34:5d:0b:8f:36:07:bb:98:8d:ba:5b:
         a9:2c:f5:ff:46:0b:46:72:dd:6a:00:c9:ef:d2:16:2b:fb:f6:
         52:7f:ab:a4:ee:bd:df:bb:05:04:20:8e:8d:20:f1:59:81:59:
         03:f0:7e:61:dd:b8:72:4c:f4:ad:29:73:bf:bc:a8:36:7b:dc:
         27:25:67:eb:9f:7e:59:14:a3:25:42:74:16:e2:28:f9:64:69:
         62:7e:d4:1f:05:25:27:73:05:7b:ae:a9:77:a6:4a:be:28:fd:
         65:2c:01:c9:26:05:41:92:d4:d5:32:3e:09:90:25:53:dc:60:
         77:dd:04:78:36:00:3f:86:11:ef:de:ac:e7:24:0e:f9:35:a3:
         22:66:ed:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----