Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa
File:                     4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa (raw, json)
Hash identifier:          XDBCZVRp9msPiiA2SZ0G8YRKw5n57OAn/mbl7n0zQF0=
Subject key identifier:   BA:52:F6:13:85:F7:AA:A3:F2:7C:9C:EA:26:17:C1:80:94:87:E9:86
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5A701AC1F0E53BC86DFF00C21A746E48090B03DD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa
Signing time:             Thu 15 Oct 2026 03:20:12 +0000
ROA not before:           Thu 15 Oct 2026 03:20:12 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        46.51.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:70:1a:c1:f0:e5:3b:c8:6d:ff:00:c2:1a:74:6e:48:09:0b:03:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 15 03:20:12 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=a7542c0dd5f08247eb8ed79f394d0ec4fac2798abdf074e53fc184a8cfc3e5b7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:7c:5c:29:35:ac:01:05:e7:9b:bc:82:d5:
                    4a:e2:a4:07:c8:81:3a:35:21:d1:26:f3:d5:57:66:
                    57:b5:af:bb:c3:cf:1d:98:e8:70:21:e9:00:de:e2:
                    27:6b:16:f4:8c:62:1d:46:5b:e8:18:3b:50:b0:6e:
                    16:1a:56:1b:bd:44:1e:b7:7d:18:50:2e:c4:9b:cd:
                    ac:c6:0d:6d:87:15:15:25:93:b0:91:6f:35:4a:3f:
                    59:f3:be:53:62:3c:9a:20:f2:50:ae:7e:b4:61:49:
                    ed:2a:80:e4:a6:f7:c6:69:bf:aa:b9:ee:6a:8e:36:
                    22:62:e7:3d:e5:29:46:b2:a5:7e:b2:0c:d9:c4:86:
                    66:46:17:bf:33:be:d7:bf:90:f7:31:7b:c2:63:6e:
                    76:6a:cf:aa:38:67:e1:28:ed:c1:07:73:2b:5c:66:
                    b9:e0:12:2d:69:f3:58:5f:03:9e:26:d4:72:34:f9:
                    73:60:a6:ef:83:4c:e0:7b:a5:b3:06:e0:82:f8:96:
                    85:ff:f6:cf:93:e3:89:01:d9:45:d6:54:75:8f:52:
                    50:94:22:50:77:ff:8f:a4:51:96:b5:63:4e:81:96:
                    7d:60:41:fe:af:9e:d4:53:56:66:42:d6:ff:01:21:
                    8c:38:68:a5:63:18:eb:9b:09:d9:96:64:62:17:a9:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:52:F6:13:85:F7:AA:A3:F2:7C:9C:EA:26:17:C1:80:94:87:E9:86
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.51.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         aa:e9:f4:77:78:7c:ec:41:4c:76:1a:4f:4e:3f:35:a9:12:91:
         ef:d8:2a:97:b3:0e:71:0a:e1:c3:e6:ab:2f:59:3b:92:7b:1c:
         ab:09:ff:13:f3:5f:6c:10:1a:26:19:2e:e7:a3:27:33:ab:0a:
         3a:9f:5e:cd:1b:25:f9:b6:3c:a0:0f:b7:df:87:b6:01:81:ce:
         21:25:b1:3e:fc:2b:e4:f2:68:8b:95:c5:7e:84:5c:66:f9:42:
         54:4a:fd:8d:fe:bb:13:a5:f4:6c:bb:f6:9c:07:c0:19:d5:fc:
         8f:c0:99:6a:ce:2a:b9:e2:32:b3:01:6a:bc:9e:41:7d:ee:ae:
         54:2d:f0:40:7b:52:75:64:d4:cd:27:33:f5:62:e6:d2:7a:dc:
         53:d9:e5:23:a7:e8:f3:26:b2:4b:14:b5:ab:d0:fa:a5:ec:5c:
         26:87:3e:8a:ab:aa:96:73:8c:b1:09:9d:a1:e2:0c:b2:3d:0c:
         18:31:33:4f:25:8a:06:b1:b9:7e:29:72:26:17:c0:97:d1:a9:
         00:f9:35:14:c3:a0:2a:70:27:96:f9:20:44:a3:90:c8:b0:e2:
         fe:c4:80:bb:6e:27:4e:af:ae:55:fc:d4:d7:8b:6b:f2:2e:05:
         4f:ab:22:58:5c:f8:cd:ad:ea:bb:8a:45:b7:02:6e:fc:09:8b:
         dd:5b:43:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----