Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8d2d588e-ac05-4633-acba-4d5705f7071e.roa
File:                     8d2d588e-ac05-4633-acba-4d5705f7071e.roa (raw, json)
Hash identifier:          GPsOcHjHnUPAlfXiDBJKPl0o4rPWO/KJBvIpLnyViVU=
Subject key identifier:   51:AC:E8:CA:C9:E2:C2:7B:93:50:AD:09:5E:D9:88:B1:65:44:C1:F9
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       2CEFF11AAE0A942046D1562C9BC542B1DE725DF1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8d2d588e-ac05-4633-acba-4d5705f7071e.roa
Signing time:             Mon 26 Oct 2026 05:50:06 +0000
ROA not before:           Mon 26 Oct 2026 05:50:06 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        51.180.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ef:f1:1a:ae:0a:94:20:46:d1:56:2c:9b:c5:42:b1:de:72:5d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Oct 26 05:50:06 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=8fd8a92ae40ad91d0c2ffd6a6333495173f519e4799db40fb5460897ae58984b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ff:62:f3:cf:26:b5:19:9c:75:af:1c:1b:65:
                    1d:3a:db:41:ca:b4:88:66:b3:9d:39:a8:bb:ff:67:
                    97:ce:81:bf:ab:c5:77:27:aa:5b:11:dd:51:91:b7:
                    af:b9:8d:58:5f:1b:05:b1:80:24:0a:ad:72:ce:91:
                    d0:55:64:13:62:6e:3f:44:df:8f:7e:13:88:46:7a:
                    9d:1b:0d:9f:fd:f8:6c:70:32:52:fe:90:6b:c5:b5:
                    dc:d8:83:f2:54:42:b1:9d:6d:c1:2a:d3:34:28:31:
                    e6:29:40:86:89:65:5d:0b:e4:2d:4f:2d:7a:ad:d2:
                    e2:39:61:67:c4:01:a8:72:fd:b1:82:79:67:da:a4:
                    f1:d3:5f:b7:48:95:f2:2d:9f:b2:d0:bb:2a:61:fa:
                    f4:84:e8:9f:26:fe:38:e2:cb:30:75:86:ad:fe:9f:
                    78:94:93:f2:96:44:75:a8:0f:e9:e5:13:93:da:07:
                    05:f6:23:af:e7:16:bb:68:50:05:c2:ca:a7:99:64:
                    b5:a2:af:d4:a8:13:cb:59:fb:15:55:fa:34:cd:f6:
                    66:5d:2f:d3:ba:5a:bf:2e:f8:75:32:76:d8:dd:60:
                    ac:e9:bd:ba:57:35:11:b0:b2:0a:16:ef:03:6e:e6:
                    ca:ab:39:e4:59:1d:b0:39:da:33:5f:97:a8:78:25:
                    f2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AC:E8:CA:C9:E2:C2:7B:93:50:AD:09:5E:D9:88:B1:65:44:C1:F9
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8d2d588e-ac05-4633-acba-4d5705f7071e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.180.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         34:df:c6:56:fd:fb:1b:67:b2:c4:7a:5f:7b:e3:72:64:ec:6e:
         98:4a:6a:56:a3:80:c9:4d:2a:88:d7:10:cc:56:8c:87:5c:d4:
         33:5d:43:a4:db:b0:20:f7:30:c5:88:c4:0b:3b:d3:a3:e5:cd:
         91:a0:4f:00:f6:59:08:21:e0:fc:d6:76:60:b8:e2:ff:e2:f3:
         9c:22:40:93:d3:f0:f5:32:26:0e:cd:6a:28:8c:3d:02:fc:b4:
         39:a8:6f:1c:9b:27:fa:36:90:c3:e5:42:f0:7b:78:fb:e3:5e:
         4a:63:75:92:b9:8e:26:b8:b5:69:12:55:a4:ac:f3:f2:e0:24:
         0a:2b:16:41:bd:32:bc:f8:ff:52:e5:f7:a9:07:3e:6b:58:8b:
         3c:7d:49:e5:54:e7:b2:88:5e:29:71:c2:60:aa:48:d9:21:44:
         86:a0:ae:18:a7:dc:db:1c:64:3f:1c:bb:61:22:ce:bb:1d:c5:
         3c:66:d7:54:46:18:00:c9:2b:e8:4a:1e:9f:06:70:36:4b:b6:
         bf:50:ba:24:53:22:7a:41:68:3f:81:df:0f:87:c0:cd:73:b3:
         cf:d2:4e:10:18:71:20:d5:e5:0e:46:4b:45:5e:fe:09:26:93:
         a3:3a:15:f0:20:04:ec:2d:fa:ca:48:06:4f:06:b5:a7:2a:ba:
         3c:12:2f:35
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIULO/xGq4KlCBG0VYsm8VCsd5yXfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwMDZaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDhmZDhhOTJhZTQwYWQ5MWQwYzJmZmQ2YTYzMzM0OTUxNzNmNTE5ZTQ3OTlk
YjQwZmI1NDYwODk3YWU1ODk4NGIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPX/YvPPJrUZnHWvHBtlHTrbQcq0iGaznTmou/9nl86Bv6vFdyeqWxHdUZG3
r7mNWF8bBbGAJAqtcs6R0FVkE2JuP0Tfj34TiEZ6nRsNn/34bHAyUv6Qa8W13NiD
8lRCsZ1twSrTNCgx5ilAhollXQvkLU8teq3S4jlhZ8QBqHL9sYJ5Z9qk8dNft0iV
8i2fstC7KmH69ITonyb+OOLLMHWGrf6feJST8pZEdagP6eUTk9oHBfYjr+cWu2hQ
BcLKp5lktaKv1KgTy1n7FVX6NM32Zl0v07pavy74dTJ22N1grOm9ulc1EbCyChbv
A27myqs55FkdsDnaM1+XqHgl8h8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRRrOjK
yeLCe5NQrQle2YixZUTB+TAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OGQyZDU4OGUtYWMwNS00NjMzLWFjYmEtNGQ1NzA1ZjcwNzFlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATO0MA0G
CSqGSIb3DQEBCwUAA4IBAQA038ZW/fsbZ7LEel9743Jk7G6YSmpWo4DJTSqI1xDM
VoyHXNQzXUOk27Ag9zDFiMQLO9Oj5c2RoE8A9lkIIeD81nZguOL/4vOcIkCT0/D1
MiYOzWoojD0C/LQ5qG8cmyf6NpDD5ULwe3j7415KY3WSuY4muLVpElWkrPPy4CQK
KxZBvTK8+P9S5fepBz5rWIs8fUnlVOeyiF4pccJgqkjZIUSGoK4Yp9zbHGQ/HLth
Is67HcU8ZtdURhgAySvoSh6fBnA2S7a/ULokUyJ6QWg/gd8Ph8DNc7PP0k4QGHEg
1eUORktFXv4JJpOjOhXwIATsLfrKSAZPBrWnKro8Ei81
-----END CERTIFICATE-----