Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa
File:                     4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa (raw, json)
Hash identifier:          sS1F2swtZhyTw/4tug+m+QGa+uoyr/4v0dLUw53SYec=
Subject key identifier:   03:8A:32:54:50:2C:24:8B:11:EB:9E:74:96:DA:38:80:DF:CB:7A:0C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       215A2446CD077ED3E5E8B9E67EC2B76037AB2C41
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa
Signing time:             Mon 27 Jul 2026 03:20:43 +0000
ROA not before:           Mon 27 Jul 2026 03:20:43 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        46.51.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5a:24:46:cd:07:7e:d3:e5:e8:b9:e6:7e:c2:b7:60:37:ab:2c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:20:43 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=700e7adf8b33edf1515fbbc54187c5710401c5d820a7fc13afb2137faf214cd4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:28:79:21:ce:77:19:9c:39:5c:67:de:c2:9b:
                    92:f8:81:cb:eb:00:5f:8c:8f:4b:cd:9b:b4:b2:d3:
                    93:a9:0a:6a:59:bc:c2:eb:5d:3a:76:2c:3d:7d:ff:
                    85:5c:dc:38:4a:b1:a3:01:6a:7b:f6:1b:23:fe:90:
                    52:a6:b0:0e:22:f6:bd:9b:fc:e0:f4:2b:72:5b:a6:
                    f7:48:48:02:7e:24:55:6b:ea:69:7e:bb:da:64:f0:
                    f2:d6:1e:24:ef:1a:80:d3:4b:ec:91:0d:34:f9:92:
                    32:a3:5c:b4:1c:9c:90:8e:6b:cb:8d:5f:fb:8f:26:
                    b0:c2:1d:5b:cd:3d:ef:ab:7e:25:3b:ea:dc:c6:30:
                    fa:d9:07:52:43:3e:43:0f:5f:fc:5c:e8:04:59:66:
                    49:e0:ed:9c:f7:7e:62:66:61:2c:3c:43:4d:e9:90:
                    e3:c1:ba:11:47:61:97:66:1a:70:88:a5:a4:9c:de:
                    ea:2a:41:56:ac:3c:ee:17:51:53:17:fa:e5:47:52:
                    f1:c2:35:14:5c:f8:f0:f1:63:0d:cb:a7:2e:02:9c:
                    9f:9c:ae:b4:9a:45:ba:6e:1f:20:05:d4:8b:c9:7d:
                    d4:c8:82:b0:86:a0:a5:90:80:73:ea:3e:77:3b:fc:
                    2e:6b:1c:af:87:25:86:85:50:71:e3:b3:f3:b9:f1:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8A:32:54:50:2C:24:8B:11:EB:9E:74:96:DA:38:80:DF:CB:7A:0C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.51.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b9:14:4e:6c:9a:bd:e6:9b:8d:b7:25:d4:94:1b:00:20:f4:10:
         f2:3d:78:44:0c:a8:39:d5:77:bc:47:00:55:29:34:e9:a9:64:
         34:5b:83:94:c3:e2:2e:55:14:6a:77:ca:67:b1:65:69:64:17:
         23:b1:c3:eb:bc:85:81:0a:01:90:d8:fe:0a:89:68:3b:74:3d:
         a0:99:91:b9:3a:21:c6:ba:16:34:ef:fe:84:22:09:8c:49:40:
         a5:6c:6c:0c:ff:27:19:56:12:88:93:d9:f5:f7:89:3c:59:4a:
         4e:fd:ca:51:51:da:fd:6a:35:e3:6c:4d:27:b9:6b:b8:80:52:
         47:16:48:35:db:42:07:3b:4f:58:f6:5f:a8:3a:19:d5:16:64:
         37:3f:f8:a7:4f:1e:21:19:ef:65:a0:ad:7e:a6:35:2a:d9:07:
         77:5e:71:9c:df:b4:3e:8f:25:49:9c:2e:4e:f8:ee:90:e9:d8:
         86:5c:f0:00:6a:d2:bd:c5:1e:9f:0b:4f:0b:9d:fb:2c:0c:cf:
         a8:46:1d:ab:21:87:36:f3:f2:3b:b6:54:c2:4d:23:e2:28:8a:
         a8:ec:44:2b:f3:c9:e0:68:ba:34:9d:cd:7a:94:43:45:69:2a:
         85:a4:67:1e:cb:07:91:52:c6:b4:7a:6b:11:9b:b1:eb:08:4e:
         f7:10:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----