Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff7e3bea-9aea-447a-a901-bd6869a31a09.roa
File:                     ff7e3bea-9aea-447a-a901-bd6869a31a09.roa (raw, json)
Hash identifier:          KJcPyqjHS0oziKllI6yiKg18gHphLkh+cBBD6TS6yAM=
Subject key identifier:   DB:59:96:B3:17:EB:2E:36:7B:AB:21:CB:A2:53:33:AA:ED:16:4C:29
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4153A8B360CA90640510A48E0261D40E2F93BE2D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff7e3bea-9aea-447a-a901-bd6869a31a09.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d071:b000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:53:a8:b3:60:ca:90:64:05:10:a4:8e:02:61:d4:0e:2f:93:be:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=b7f45a09b47d1071f67b6395192a103eee1259a61c3cad0f34115fedf63095bc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:1f:a4:2b:80:6b:40:f7:28:e3:03:b5:79:
                    c0:dd:fa:fc:e2:f3:21:6f:57:8d:aa:d2:27:32:46:
                    03:91:90:8a:d8:63:32:c9:6c:e2:56:1c:fa:85:20:
                    c2:f2:87:70:ff:75:4c:5c:20:a1:f7:ba:6e:f2:d1:
                    79:c9:af:ce:67:cd:49:0c:1c:fe:60:0d:e1:a8:1d:
                    1a:95:bf:bd:d0:cb:a7:eb:a3:58:8e:95:56:a7:68:
                    91:cf:0c:48:4d:f0:ef:e1:97:c1:6c:23:f1:b3:2f:
                    d0:4b:4c:1e:ea:6e:09:92:96:3c:8c:6c:45:fe:dd:
                    13:92:f5:70:f7:da:db:e6:96:88:74:51:f6:c6:e8:
                    1e:69:4a:1f:bd:03:09:3d:51:22:a5:3b:2f:70:44:
                    b7:28:22:06:32:eb:fd:cc:c2:c9:59:97:ea:60:4a:
                    fc:1d:27:95:24:93:75:35:3c:00:f5:ce:90:3a:e5:
                    1a:63:06:4d:f4:83:60:c3:f7:c3:8c:71:21:05:bf:
                    75:f1:f8:8b:ec:56:4c:bf:d2:5d:2a:cc:53:91:77:
                    0d:a6:81:ff:8d:97:09:88:16:ff:66:46:ec:52:1c:
                    93:d9:9d:39:d1:20:1d:b6:7b:25:52:b5:4f:26:26:
                    fc:df:0d:2f:a7:22:49:83:bd:8d:12:ca:51:a6:bd:
                    5d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:59:96:B3:17:EB:2E:36:7B:AB:21:CB:A2:53:33:AA:ED:16:4C:29
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff7e3bea-9aea-447a-a901-bd6869a31a09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d071:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:26:fe:e7:11:da:b0:45:5a:12:d3:ca:cf:bb:61:fd:4a:97:
         48:1a:64:23:e7:38:7d:c6:ca:00:a8:3e:6b:d2:35:24:eb:92:
         c5:a7:ad:3e:ea:68:a3:6a:bc:c6:39:fb:75:4b:8b:64:5c:06:
         65:01:5e:d3:d2:33:3a:0f:52:90:0a:19:d3:77:0c:26:32:9a:
         2b:69:91:d6:94:08:e0:1b:c8:64:5c:c1:06:14:a8:30:e6:a9:
         8a:bf:97:97:f2:f9:08:21:9b:c4:81:cf:75:54:81:e3:e3:c7:
         ef:80:29:9d:e2:3c:fd:a1:47:8e:c8:f9:d7:4c:6c:4c:d5:57:
         b9:4f:0f:f7:f9:69:c6:7f:bb:6c:8e:6e:64:62:ea:84:61:f1:
         fe:e3:8a:bc:57:38:d4:10:e2:eb:de:6d:65:5c:e4:f2:c7:fe:
         87:d5:9e:89:59:9b:0d:59:92:f3:81:cf:5a:33:0f:65:8b:48:
         55:38:3a:b3:9e:e6:a1:96:08:8e:b6:a9:d4:3c:62:ad:e7:4a:
         9f:b2:52:b7:b2:5b:88:be:c7:42:a3:e6:00:0b:db:24:2f:c0:
         d1:76:ed:6b:bd:95:31:e5:10:e4:ea:cc:d5:1b:c7:8d:43:cf:
         f8:29:56:c2:f4:6e:c6:fb:52:8c:82:0b:52:83:c3:fc:d0:1c:
         a2:b8:76:0a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQVOos2DKkGQFEKSOAmHUDi+Tvi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDExMTUwMDAwMDBaFw0yNDEyMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQGI3ZjQ1YTA5YjQ3ZDEwNzFmNjdiNjM5NTE5MmExMDNlZWUxMjU5YTYxYzNj
YWQwZjM0MTE1ZmVkZjYzMDk1YmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANofH6QrgGtA9yjjA7V5wN36/OLzIW9XjarSJzJGA5GQithjMsls4lYc+oUg
wvKHcP91TFwgofe6bvLRecmvzmfNSQwc/mAN4agdGpW/vdDLp+ujWI6VVqdokc8M
SE3w7+GXwWwj8bMv0EtMHupuCZKWPIxsRf7dE5L1cPfa2+aWiHRR9sboHmlKH70D
CT1RIqU7L3BEtygiBjLr/czCyVmX6mBK/B0nlSSTdTU8APXOkDrlGmMGTfSDYMP3
w4xxIQW/dfH4i+xWTL/SXSrMU5F3DaaB/42XCYgW/2ZG7FIck9mdOdEgHbZ7JVK1
TyYm/N8NL6ciSYO9jRLKUaa9XUECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTbWZaz
F+suNnurIcuiUzOq7RZMKTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmY3ZTNiZWEtOWFlYS00NDdhLWE5MDEtYmQ2ODY5YTMxYTA5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HGw
MA0GCSqGSIb3DQEBCwUAA4IBAQCuJv7nEdqwRVoS08rPu2H9SpdIGmQj5zh9xsoA
qD5r0jUk65LFp60+6mijarzGOft1S4tkXAZlAV7T0jM6D1KQChnTdwwmMporaZHW
lAjgG8hkXMEGFKgw5qmKv5eX8vkIIZvEgc91VIHj48fvgCmd4jz9oUeOyPnXTGxM
1Ve5Tw/3+WnGf7tsjm5kYuqEYfH+44q8VzjUEOLr3m1lXOTyx/6H1Z6JWZsNWZLz
gc9aMw9li0hVODqznuahlgiOtqnUPGKt50qfslK3sluIvsdCo+YAC9skL8DRdu1r
vZUx5RDk6szVG8eNQ8/4KVbC9G7G+1KMggtSg8P80ByiuHYK
-----END CERTIFICATE-----