Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
File:                     2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa (raw, json)
Hash identifier:          ccFSpCXEu7d11po88iw4p/VNstIPIaHkeUN6EpBIA1k=
Subject key identifier:   5A:FC:34:32:D5:4F:B7:09:F9:05:BA:B8:58:23:D6:30:51:0C:77:93
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4F1CAADA229F9934A19CBF5ABC0E9E81F5A28A7C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
Signing time:             Mon 27 Jul 2026 03:20:29 +0000
ROA not before:           Mon 27 Jul 2026 03:20:29 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        46.51.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1c:aa:da:22:9f:99:34:a1:9c:bf:5a:bc:0e:9e:81:f5:a2:8a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:29 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=fae494bb344ac3f722060b6b7891ecb9ec7abfcc74e61e5e985993be53bad2fb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:21:21:bf:d3:0a:53:2d:f8:a1:e5:35:66:6a:
                    15:63:6a:b7:12:88:a0:5d:ab:26:14:40:06:74:82:
                    77:a8:35:8a:e0:2e:ab:e4:10:ab:2b:79:37:a8:b1:
                    95:0d:d4:bc:2d:f6:cd:db:89:f6:57:9b:c6:54:b4:
                    44:fb:2a:67:9b:c2:ca:6b:85:93:0e:fa:59:5c:66:
                    0d:15:c2:f5:03:d8:33:31:cd:6f:11:8c:c9:9c:f2:
                    6c:76:dc:38:45:0e:e3:86:a6:73:fd:83:74:20:ef:
                    df:db:b2:36:c5:40:46:59:14:cb:2d:da:54:80:c6:
                    7b:8f:7a:ad:59:66:25:0a:0d:2b:bd:2f:e7:19:0a:
                    d1:a9:e0:fa:bb:5a:c9:d9:6b:c4:c6:1e:0f:1b:f2:
                    80:80:91:6f:2a:ef:74:d2:09:ec:5f:bc:e6:56:9b:
                    4b:35:f7:e7:39:eb:f7:c2:3a:b5:f6:35:40:2d:cb:
                    5c:72:06:e2:2d:c1:94:f9:0d:6e:f4:41:a9:2d:fe:
                    88:1a:2b:3c:f7:07:29:e1:74:a3:a1:38:32:9e:71:
                    e0:9f:3a:ab:ad:7c:44:99:55:0f:bd:34:24:61:d6:
                    0c:e0:73:75:3d:63:49:dd:20:7d:6c:d5:8a:6b:5f:
                    f6:c1:cb:38:3d:68:b2:dc:b3:f9:c3:01:99:83:49:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FC:34:32:D5:4F:B7:09:F9:05:BA:B8:58:23:D6:30:51:0C:77:93
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.51.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:07:ff:ae:d3:5b:93:a6:f1:32:4a:d1:a7:7a:9b:18:b1:0e:
         d9:46:d1:2c:be:36:7f:40:80:2e:df:00:e0:a8:c4:f9:a8:ec:
         ae:31:0a:56:6b:ba:a9:d1:2b:95:98:16:0f:e5:22:a2:ce:fb:
         15:34:95:f2:63:2d:f4:73:07:57:9f:55:fd:ea:57:14:02:7e:
         c9:cb:da:e2:5b:b9:8b:ec:d7:c9:04:f1:59:9d:90:9a:0a:2a:
         d3:73:5e:19:54:2f:27:9e:bc:5e:fe:71:9a:12:aa:39:8b:28:
         5f:84:a7:04:1f:d6:db:f0:e4:e2:30:da:7b:14:b5:51:39:ae:
         b2:1e:9d:38:03:57:33:ae:e1:3a:4a:c8:08:1a:b4:97:73:02:
         2c:67:15:fc:5c:fc:9c:6a:c5:4d:68:2c:6e:00:91:f9:cb:47:
         61:86:e1:4a:03:5c:6b:82:5d:45:3d:66:4c:10:bc:82:39:90:
         25:79:51:08:4d:e0:48:33:07:6d:5a:e0:3b:50:02:c8:f9:e8:
         9c:78:17:b1:f8:88:96:68:ae:7c:9e:f3:01:64:0d:72:44:66:
         53:ef:ac:3a:13:c2:ab:37:ee:cb:0a:5f:d4:76:7f:07:66:00:
         82:1a:45:5f:be:49:73:97:24:5a:5d:35:3b:81:65:5c:8c:23:
         0f:e0:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----