Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07144f38-ed46-40bc-a3ed-30785c0cc3e2.roa
File:                     07144f38-ed46-40bc-a3ed-30785c0cc3e2.roa (raw, json)
Hash identifier:          sIQOcUIfmKElJ1DEkJU38S2hZ9SswHZGOabMQCh2LQ8=
Subject key identifier:   FC:69:8F:D1:6B:F0:81:6F:77:A9:62:C5:79:22:6C:B4:3A:95:83:1B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       51E9A6DB7D02CF25F2147C2D1B4E86EB10430133
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07144f38-ed46-40bc-a3ed-30785c0cc3e2.roa
Signing time:             Thu 15 Oct 2026 03:30:58 +0000
ROA not before:           Thu 15 Oct 2026 03:30:58 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        46.137.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e9:a6:db:7d:02:cf:25:f2:14:7c:2d:1b:4e:86:eb:10:43:01:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 15 03:30:58 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=083cf7bff4ee46b763ce431df2aec847f1f32eececc3f90d151fbea51bb974fa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:c2:b2:7b:d7:ef:d8:da:8a:fa:a8:34:28:
                    c2:e3:27:86:c7:5b:cd:bc:53:b9:d2:7b:b7:eb:23:
                    c6:15:ef:75:6c:ce:a9:30:93:bf:77:cb:70:9a:02:
                    80:93:f7:5c:6d:c9:30:3a:0d:d4:5c:ba:82:93:99:
                    22:0b:f3:d2:8c:dc:e8:ad:4c:a4:a2:d8:09:cd:4d:
                    de:81:47:90:29:8e:10:da:83:4c:17:a8:01:72:2b:
                    b3:b6:f6:c8:08:49:85:75:85:88:22:3d:b4:ca:01:
                    ee:a2:57:ee:00:d4:7c:13:d6:e5:58:71:d8:40:b6:
                    f8:6b:ce:e1:a2:22:13:ec:cd:9d:c5:b5:92:7b:fa:
                    8c:d3:12:a8:99:f2:82:d5:53:80:64:d3:f8:84:4a:
                    d0:3e:8a:8e:ec:37:da:af:8c:e8:cf:05:a8:7d:3a:
                    b3:21:42:b0:ac:12:4f:0f:e4:f4:2d:fd:40:4e:f6:
                    5c:39:fa:ec:2c:53:6f:a7:c3:3b:f3:c1:7f:ff:25:
                    9d:f4:01:8c:55:e6:9e:52:5e:40:13:62:81:c3:d3:
                    f8:99:19:bd:ee:04:7d:60:ca:8b:f4:c3:32:10:7a:
                    c5:b0:18:4e:dc:7f:6d:ac:86:f5:1e:70:70:99:f5:
                    11:5d:4b:e4:43:21:2b:f7:38:c3:1e:ee:0a:37:14:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:69:8F:D1:6B:F0:81:6F:77:A9:62:C5:79:22:6C:B4:3A:95:83:1B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07144f38-ed46-40bc-a3ed-30785c0cc3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.137.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:f9:7c:58:7b:70:be:28:f4:57:d6:ca:9e:b7:d6:c3:a9:38:
         ec:af:dc:d7:d2:63:ea:de:6f:6b:88:b0:06:6a:d0:0e:ad:e0:
         fb:3b:48:a5:fe:1d:05:d8:ee:8f:4a:7f:ba:6b:dc:e1:68:32:
         be:71:aa:a1:18:2d:47:1f:3f:e1:af:53:9d:f3:42:82:dc:d0:
         16:f0:50:c8:9d:0c:3b:0c:d1:e7:47:21:e3:69:73:16:80:ae:
         52:f3:b0:f8:ca:5e:5e:8a:bc:36:0f:27:1a:eb:93:c5:b2:50:
         6c:79:93:f1:4b:00:26:a2:f7:3d:76:6b:d7:d8:a2:21:ae:9e:
         41:40:dc:f7:4d:75:b7:8c:2f:71:15:3e:8b:c2:a9:ad:3b:57:
         fb:0a:3a:38:7a:ad:d2:f2:b9:a2:3b:b3:25:31:fc:2a:29:a1:
         41:09:09:06:91:b3:c4:fd:fd:b0:4f:48:f1:f9:77:30:84:c1:
         7c:47:85:c5:25:96:60:13:b3:b2:f0:4d:01:96:a4:ca:15:5b:
         5f:dd:73:33:98:32:88:be:74:46:bc:54:e1:7c:e6:55:7c:4d:
         67:1b:53:6b:7b:2c:ed:a1:bc:e2:6d:54:48:1b:e9:ce:52:5e:
         ae:57:53:29:2d:92:d7:f6:11:f4:01:1a:4c:1f:6f:6b:5c:b3:
         40:8f:90:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----