Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fbae76-0646-43e5-826f-114b4990545e.roa
File:                     35fbae76-0646-43e5-826f-114b4990545e.roa (raw, json)
Hash identifier:          rD4r2tX6zJYSyeSVe2TyYfSVX33GMp1JcLhUds1dli4=
Subject key identifier:   52:CD:A5:02:F5:B4:84:4C:FA:61:2E:8A:6E:4F:42:37:23:D1:97:94
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       642464CC7E615D1BCAB207E646B0FBB0B0CB40C0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fbae76-0646-43e5-826f-114b4990545e.roa
Signing time:             Mon 27 Jul 2026 03:20:40 +0000
ROA not before:           Mon 27 Jul 2026 03:20:40 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        46.51.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:24:64:cc:7e:61:5d:1b:ca:b2:07:e6:46:b0:fb:b0:b0:cb:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:40 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=b2e11fda8d69709dbb148cb7627056006f7075b5f25c17a81607879a23046fe7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:64:51:7c:03:8c:55:31:33:cb:95:87:46:0d:
                    28:7c:d7:9b:c5:51:21:b7:8a:5c:0b:46:da:06:5b:
                    6c:b9:5e:27:36:fc:f5:b1:ed:83:2a:f5:28:6e:d6:
                    48:ce:c8:a9:51:fa:c7:5c:3a:d8:b5:c8:91:42:ba:
                    7d:93:30:84:6d:71:2b:fd:19:60:d7:e3:9a:2a:e1:
                    ab:26:d6:60:7a:57:c3:bf:3b:bf:f7:09:0b:28:6a:
                    5d:5c:6a:0f:50:ed:f0:38:fb:ee:af:e0:83:8c:74:
                    e0:9f:be:2c:a0:c6:d2:c2:3f:f0:14:6c:c1:c2:58:
                    94:f5:92:e6:b7:91:95:a0:15:40:42:0a:33:31:aa:
                    bb:33:84:38:86:91:fe:36:52:08:c6:4c:38:b8:9d:
                    8b:bc:ca:43:de:93:d3:4b:23:bd:16:f8:b1:84:3c:
                    c6:ce:1d:57:96:38:15:11:93:1a:1c:60:62:7c:bb:
                    64:f9:94:15:e7:e0:d0:da:1b:f1:e4:e7:c0:15:e2:
                    2c:1c:5b:27:7c:f2:55:3c:ad:b1:1b:8f:9d:06:6a:
                    fc:74:b3:8a:eb:c4:b7:80:00:c0:46:ec:77:d6:57:
                    15:12:e2:d5:ab:e1:de:01:af:93:ab:15:1f:a0:6a:
                    7b:9d:73:bc:08:0f:68:66:16:81:59:2d:87:a6:e9:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CD:A5:02:F5:B4:84:4C:FA:61:2E:8A:6E:4F:42:37:23:D1:97:94
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fbae76-0646-43e5-826f-114b4990545e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.51.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:dc:c3:93:10:fb:fc:38:c3:d3:f7:5a:f0:8f:d0:c0:70:47:
         d5:10:b2:d4:7a:b2:89:48:3e:ea:eb:f9:26:35:61:d4:fb:d4:
         59:b6:dd:2f:6c:27:ae:d7:20:c2:56:47:6d:64:08:6e:bf:99:
         f8:f8:0a:44:9b:f5:86:d3:ff:85:0c:c3:0b:a3:9e:38:32:39:
         92:4e:b1:7b:29:4a:ae:2b:32:1b:4b:09:ab:51:b5:9d:fc:3f:
         a9:ba:0e:2c:06:67:4a:e4:bd:d3:cf:ad:12:e3:2c:af:a4:df:
         b0:e9:b5:30:70:2c:3f:99:02:f1:e4:ff:0b:97:8a:87:b4:02:
         10:96:70:2a:af:a0:67:db:db:3a:44:00:f6:ae:98:de:25:94:
         f5:a8:64:74:0a:9e:03:2a:1d:be:62:12:cf:a3:b7:85:15:c5:
         45:e6:3c:d1:d7:d3:5d:7b:bf:bd:2e:74:80:3f:bc:6f:65:72:
         cd:df:44:5d:5b:27:a4:fc:42:01:aa:a2:ac:66:33:af:50:56:
         ab:db:06:77:af:3d:e1:74:7a:21:44:f1:b9:19:9f:72:ec:a0:
         d5:36:e9:22:f9:10:c7:1e:b2:96:5c:3f:b3:7e:cf:44:6a:67:
         af:4b:43:d6:34:7b:74:9b:37:8f:16:9e:d2:d8:1f:ee:f8:87:
         a1:0a:98:51
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUZCRkzH5hXRvKsgfmRrD7sLDLQMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjcwMzIwNDBaFw0yNjEwMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGIyZTExZmRhOGQ2OTcwOWRiYjE0OGNiNzYyNzA1NjAwNmY3MDc1YjVmMjVj
MTdhODE2MDc4NzlhMjMwNDZmZTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ5kUXwDjFUxM8uVh0YNKHzXm8VRIbeKXAtG2gZbbLleJzb89bHtgyr1KG7W
SM7IqVH6x1w62LXIkUK6fZMwhG1xK/0ZYNfjmirhqybWYHpXw787v/cJCyhqXVxq
D1Dt8Dj77q/gg4x04J++LKDG0sI/8BRswcJYlPWS5reRlaAVQEIKMzGquzOEOIaR
/jZSCMZMOLidi7zKQ96T00sjvRb4sYQ8xs4dV5Y4FRGTGhxgYny7ZPmUFefg0Nob
8eTnwBXiLBxbJ3zyVTytsRuPnQZq/HSziuvEt4AAwEbsd9ZXFRLi1avh3gGvk6sV
H6Bqe51zvAgPaGYWgVkth6bpS7sCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRSzaUC
9bSETPphLopuT0I3I9GXlDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzVmYmFlNzYtMDY0Ni00M2U1LTgyNmYtMTE0YjQ5OTA1NDVlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAy4zqDAN
BgkqhkiG9w0BAQsFAAOCAQEACdzDkxD7/DjD0/da8I/QwHBH1RCy1HqyiUg+6uv5
JjVh1PvUWbbdL2wnrtcgwlZHbWQIbr+Z+PgKRJv1htP/hQzDC6OeODI5kk6xeylK
risyG0sJq1G1nfw/qboOLAZnSuS908+tEuMsr6TfsOm1MHAsP5kC8eT/C5eKh7QC
EJZwKq+gZ9vbOkQA9q6Y3iWU9ahkdAqeAyodvmISz6O3hRXFReY80dfTXXu/vS50
gD+8b2Vyzd9EXVsnpPxCAaqirGYzr1BWq9sGd6894XR6IUTxuRmfcuyg1TbpIvkQ
xx6yllw/s37PRGpnr0tD1jR7dJs3jxae0tgf7viHoQqYUQ==
-----END CERTIFICATE-----