Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa
File:                     fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa (raw, json)
Hash identifier:          RyM38xJ34QFlWcKFq5LAPcHna+g9v+7QgRQJDgDjr7s=
Subject key identifier:   60:8C:05:96:3A:85:6D:D3:17:73:41:55:6F:AB:60:33:57:55:72:36
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3D8450FCD6C72A61EB50B2FC0B70878C088C8A6A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa
Signing time:             Tue 02 Apr 2024 00:00:00 +0000
ROA not before:           Tue 02 Apr 2024 00:00:00 +0000
ROA not after:            Tue 07 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075:c000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:84:50:fc:d6:c7:2a:61:eb:50:b2:fc:0b:70:87:8c:08:8c:8a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Apr  2 00:00:00 2024 GMT
            Not After : May  7 23:59:59 2024 GMT
        Subject: serialNumber=1e3a2ed7032dd973e290700e92cd636928241b550e205552599bef6dfb2e8231, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:4f:5f:3c:6e:10:72:cf:b2:f8:ec:ef:88:
                    ca:d4:42:6c:ba:47:74:46:b1:f4:3a:68:70:66:a2:
                    8c:aa:1f:4d:94:53:8a:d8:6d:6f:94:d3:4c:de:fc:
                    58:a7:cc:75:af:c7:30:12:68:9e:08:60:7d:07:e9:
                    c4:7c:8c:74:4a:ba:8f:45:ec:0f:b2:45:d0:db:30:
                    37:5e:ef:bb:8d:51:27:70:8a:99:0d:e9:83:24:84:
                    a3:ed:d9:dd:d8:9b:f7:b2:5d:a7:2e:40:89:50:b2:
                    ca:3d:5b:e6:86:72:45:94:8f:6d:e3:bd:e8:14:80:
                    2c:7a:a8:90:3e:7a:0b:ab:1d:5a:81:ec:a5:42:b5:
                    6c:b7:b9:e4:44:3b:8d:db:6d:22:b9:9d:c0:10:2d:
                    47:3f:f5:51:49:b5:ef:f6:08:06:80:0f:99:cc:97:
                    16:70:9c:d1:37:48:49:f5:4b:a1:dd:8d:42:33:7c:
                    35:81:cd:b0:31:aa:39:1f:76:11:a2:8e:4c:96:f7:
                    78:93:c3:35:0e:60:42:15:4e:fa:d7:fe:ed:6a:f2:
                    d9:f9:00:51:55:0f:17:db:b0:44:1e:d1:d2:f6:35:
                    fb:4b:d5:45:20:68:3b:6e:ed:ea:18:45:b5:ba:47:
                    77:00:a0:b4:94:82:e3:04:c9:f5:b6:29:c0:7c:6d:
                    c8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8C:05:96:3A:85:6D:D3:17:73:41:55:6F:AB:60:33:57:55:72:36
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:2b:58:b8:7f:7b:3e:79:cd:2f:4a:bd:d3:9b:f0:77:1c:58:
         17:99:15:b9:2c:a5:00:40:8d:07:77:c3:cb:11:f0:42:c2:16:
         01:2c:b6:f5:21:81:71:d7:b0:5c:56:f1:83:db:c8:3f:39:0e:
         7e:01:bf:84:7a:59:d0:4d:11:b8:3c:ac:11:a8:07:05:9a:ef:
         81:e3:ab:d6:20:dd:00:ec:cb:1f:22:0d:51:8f:f6:06:b0:28:
         34:b3:73:03:66:9f:12:b7:61:fb:75:b4:63:ab:c6:97:d4:3f:
         10:98:b8:65:c7:57:49:be:84:eb:69:16:30:09:37:26:28:8c:
         74:e4:64:8a:e5:c0:76:82:0d:d1:d9:6e:f4:e2:d2:50:35:bf:
         d0:d2:c8:d6:3f:61:9e:57:aa:9c:ee:f2:44:5d:8c:d7:18:8a:
         83:31:61:3f:93:98:25:c3:e1:63:74:dd:bf:4a:1a:11:c1:cb:
         e7:5e:a4:cb:a4:f9:04:f5:d9:38:06:e4:20:24:ec:3e:56:55:
         aa:05:cf:cd:db:70:7b:cd:8f:8a:84:22:5a:cb:ef:88:0d:48:
         3a:e7:87:81:63:7b:55:28:a0:bd:c0:8d:2a:ca:52:23:44:65:
         8e:58:2b:76:a5:03:85:58:96:93:2b:9f:ad:f2:00:27:15:d8:
         78:9d:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----