Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46a21ff8-4dea-4da4-a276-6b424d4e3bed.roa
File:                     46a21ff8-4dea-4da4-a276-6b424d4e3bed.roa (raw, json)
Hash identifier:          1iv2G8LMpyTw+3pslI/lF/ZwMinsrK9aLos/1wshydw=
Subject key identifier:   40:D6:45:B5:E6:AB:36:4A:25:DF:48:BB:BB:25:8C:C2:EF:00:94:85
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5ABB529A83C45D0A4B966066DDA3ECB7CF5A3260
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46a21ff8-4dea-4da4-a276-6b424d4e3bed.roa
Signing time:             Mon 27 Jul 2026 03:20:25 +0000
ROA not before:           Mon 27 Jul 2026 03:20:25 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        46.137.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bb:52:9a:83:c4:5d:0a:4b:96:60:66:dd:a3:ec:b7:cf:5a:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:25 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=224fcbaaa82bf139223af105c4a2c00d9393e4a51d0df594786c21afed75f8fc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:2e:66:05:d8:25:0b:65:98:20:0f:6f:00:
                    94:a3:66:04:ac:96:51:08:3b:1e:95:d0:49:cf:52:
                    f2:51:8e:6f:3d:9f:3c:88:43:0f:8c:9f:f7:ad:af:
                    01:85:70:80:75:ec:2f:2f:15:ac:32:80:01:2e:5c:
                    3a:cf:c4:73:77:a0:71:05:4e:f6:ca:b9:09:c9:dc:
                    39:5d:01:1f:89:70:9d:43:dc:f7:e6:fa:33:75:f9:
                    53:e9:83:52:84:c5:10:32:09:d4:35:f3:b6:f1:fa:
                    81:50:5d:4b:14:1a:77:87:c9:be:6c:7d:60:23:5f:
                    32:e7:98:c9:79:b4:b0:0c:a1:2c:c5:12:6d:0b:46:
                    55:5c:10:1d:09:b9:4d:ae:f5:5a:b7:65:31:8b:a3:
                    f8:74:c9:c7:0d:95:54:4f:c1:a2:f9:99:c2:91:66:
                    1f:a3:5b:38:2b:50:79:32:67:95:6f:48:aa:05:db:
                    fe:8a:29:01:81:1b:19:fc:df:30:2a:a4:7b:f7:85:
                    66:db:81:4b:d1:1a:c5:30:22:eb:98:95:bf:d2:c5:
                    40:74:df:8d:b2:cc:25:d7:5b:95:2e:61:8c:c9:66:
                    0a:48:ee:a3:f0:96:87:50:f0:d3:69:19:a0:ff:fe:
                    87:87:2c:88:e9:8d:a7:7a:14:d0:c0:04:32:08:59:
                    51:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D6:45:B5:E6:AB:36:4A:25:DF:48:BB:BB:25:8C:C2:EF:00:94:85
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46a21ff8-4dea-4da4-a276-6b424d4e3bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.137.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:97:0f:bf:4e:38:7b:16:93:b8:0c:f2:6e:dd:4d:f9:69:
         f5:1d:e5:e7:03:58:98:8b:af:b5:a5:5a:d2:29:dd:18:ff:16:
         07:09:58:56:9e:9d:91:84:64:0c:db:a8:e3:c9:76:cb:29:41:
         b5:0f:a3:10:75:20:0d:ff:70:53:75:f9:96:f4:18:2d:05:df:
         43:05:5f:13:6b:ce:ba:c3:f7:b2:6d:99:bf:97:8c:af:17:9e:
         b5:b7:39:b0:17:7c:0a:5a:8b:17:75:43:76:2f:d7:aa:ac:e4:
         ca:1a:39:63:5e:c2:21:93:2d:1f:56:ab:fa:b1:84:56:47:e7:
         53:8e:2d:bd:d5:37:9a:e4:2e:55:c2:4f:b8:62:4a:6e:11:90:
         39:01:2c:cb:74:30:d9:70:f8:81:51:62:30:4f:8d:b6:12:29:
         9a:2c:ac:87:60:f5:4f:da:ba:3c:0c:22:e7:3e:2c:3d:44:cf:
         50:74:92:23:12:4c:3d:d2:2d:86:84:4b:1b:a3:0f:d8:08:d7:
         84:a4:28:83:16:67:80:be:ed:5e:b4:b8:40:5e:2d:58:76:4f:
         54:ff:92:7c:16:fe:30:fc:ec:78:e3:cd:8e:09:ac:0d:8e:6d:
         45:3f:e7:d4:7c:de:2b:9b:4c:0d:a2:c4:14:e4:8b:25:ea:67:
         73:13:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----