Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
File:                     19bd833c-9eac-4b19-b264-a191d9c1b939.roa (raw, json)
Hash identifier:          TmoqgdIw2CklZn1L5d92DTBzi8oLAuL/dRszj1BuEQQ=
Subject key identifier:   47:F8:51:CD:3C:86:B7:E3:FF:31:F1:E4:34:47:EF:88:D2:67:6B:33
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7A7E046D928316515824E508EE31E09612CF98C3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
Signing time:             Mon 27 Jul 2026 03:30:34 +0000
ROA not before:           Mon 27 Jul 2026 03:30:34 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        46.51.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7e:04:6d:92:83:16:51:58:24:e5:08:ee:31:e0:96:12:cf:98:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:30:34 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=046e6b2110786bc83f112a93e6df2191279ab4e985b658fd52810e90e4546242, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:50:d0:d7:92:a3:94:fe:4e:cb:0a:4d:0b:79:
                    9e:42:82:36:e8:52:f4:f0:6f:7b:69:58:2f:b4:e3:
                    f1:d5:3d:86:1c:e3:6a:4c:b1:c8:4b:a9:c1:c2:6c:
                    96:c8:77:97:ed:ad:d9:cd:62:6d:65:d1:00:1c:75:
                    03:a9:f1:4e:09:8a:02:21:85:e6:ca:62:a4:95:59:
                    e1:fc:d9:a2:cd:39:74:9b:3a:c4:ac:03:0b:b6:b7:
                    67:6f:74:24:08:8f:3c:e5:c7:4c:f8:42:4e:ea:25:
                    a9:82:09:34:78:64:41:50:73:7e:20:2d:6d:33:f3:
                    4d:e2:f3:0d:71:6f:b8:a0:6a:c1:f9:e0:fb:18:ee:
                    f9:34:c8:cb:3a:1e:1b:ef:0c:5c:a7:5b:69:e1:a9:
                    e6:f2:b2:3c:c3:fa:15:09:fd:d9:c8:40:40:f2:fa:
                    2a:b4:1d:d4:0a:76:23:6b:ca:cd:82:aa:e8:54:5b:
                    94:44:bd:dd:95:45:99:b7:69:0d:40:a3:62:c7:02:
                    b8:9e:1d:e0:42:36:ee:59:52:d1:48:0b:8e:f6:40:
                    c0:7e:ad:13:1d:83:51:f0:0f:b8:ca:87:5c:bc:af:
                    51:9c:ea:e3:d3:b7:da:bd:98:99:cd:e9:b1:80:37:
                    00:26:b1:20:f7:b8:a3:cb:42:e1:93:f1:d5:2a:91:
                    9c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F8:51:CD:3C:86:B7:E3:FF:31:F1:E4:34:47:EF:88:D2:67:6B:33
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.51.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:ff:da:f7:53:86:e9:34:8c:19:d6:27:04:a9:5f:9a:75:47:
         ee:0b:10:50:d2:ec:86:af:c2:ec:96:58:d3:b5:6b:cf:b6:33:
         c9:e1:99:9c:73:05:93:04:80:d2:c7:f9:a0:ba:b5:9b:ed:1c:
         73:bb:47:4d:6e:1c:3c:54:91:07:06:dc:ac:17:58:ec:b8:98:
         16:65:d8:92:df:31:74:ba:fd:20:2c:cb:b2:19:58:09:ba:9a:
         a1:21:aa:e1:44:01:52:bf:dc:b9:c6:20:2a:bb:2e:f1:bb:94:
         b4:a2:96:47:5e:9a:69:e0:e3:cd:f8:6e:c2:23:7a:57:b1:2f:
         0e:af:ae:2d:07:4a:c2:73:00:10:80:d7:bc:4f:f3:ab:10:15:
         90:f4:28:7c:85:a4:b0:44:4b:03:5a:75:11:0c:e0:73:b6:81:
         ef:f6:f9:b1:de:9c:e8:64:65:6a:9e:ad:f3:7f:71:e5:41:dd:
         ed:26:1c:07:6c:4e:db:23:58:6a:b5:f0:96:47:b3:38:05:94:
         7d:3f:c5:ee:a4:9f:45:16:37:e5:ce:c5:d9:90:5d:27:11:37:
         2e:78:d6:0e:ba:d2:dc:8f:09:53:1d:17:ae:ed:a4:d3:d1:85:
         ee:7f:cb:e3:47:43:6d:1a:2b:2d:4f:af:8c:7d:b4:e3:c9:17:
         2c:1e:be:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----