Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
File:                     7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa (raw, json)
Hash identifier:          bFV6Ilh37A7rxtqWGUrloLbDE+t60Xt584SZ/BWzfUc=
Subject key identifier:   23:9B:4B:E6:F1:96:A3:B0:77:26:31:E3:06:2A:8F:A4:2E:24:72:9C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       246A71BD2D5B4D4B7F751DA913A2B5BC489A7FF1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
Signing time:             Tue 17 Feb 2026 03:00:47 +0000
ROA not before:           Tue 17 Feb 2026 03:00:47 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        46.51.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6a:71:bd:2d:5b:4d:4b:7f:75:1d:a9:13:a2:b5:bc:48:9a:7f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 17 03:00:47 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=693e8946e691c8eb0c2fef559a3db90b94cb17515b73202e7770091a2a665154, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:0b:8e:b1:b3:06:f4:ed:4d:46:68:60:d1:
                    d1:07:1d:3d:77:48:55:15:3e:03:37:09:04:c3:ec:
                    6b:9e:c0:90:da:ae:52:ae:ab:4c:b8:7c:68:c4:37:
                    4c:7c:6d:d0:f3:11:6d:eb:19:e7:fe:ca:05:1a:5c:
                    5e:aa:d5:f1:a5:47:80:3a:25:e1:54:84:81:9e:af:
                    84:d7:38:88:a9:71:e9:f7:78:8d:ee:c6:22:3a:04:
                    a9:ee:c3:b1:05:8d:52:c1:3f:cb:13:3a:40:a5:97:
                    48:0d:14:95:2e:28:95:e9:a4:06:02:bd:0e:81:92:
                    d2:06:e7:8b:34:ee:fb:e1:ce:e8:34:d9:e8:f2:2d:
                    bd:4f:74:ce:8c:0d:69:0d:d7:13:46:31:e1:46:4d:
                    ed:6b:bd:f6:ea:b2:45:f2:87:d2:03:cd:d7:61:62:
                    6e:ad:03:3a:e1:08:c1:a3:25:e9:76:31:7c:3f:55:
                    8a:81:4e:bd:aa:ab:38:e7:83:11:13:95:9a:c5:b4:
                    7a:2a:40:95:e8:d7:9c:a4:3c:2a:f1:74:b4:a7:d7:
                    55:1a:d1:1c:c7:2b:5c:0e:35:fc:a2:ce:93:e2:fb:
                    71:66:5a:9a:6f:bf:7d:0e:d2:b5:fb:94:bb:5a:d5:
                    5f:6d:64:2f:d4:6a:1a:26:54:5e:ce:7e:06:4d:39:
                    ef:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9B:4B:E6:F1:96:A3:B0:77:26:31:E3:06:2A:8F:A4:2E:24:72:9C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.51.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4e:88:76:d3:be:77:06:57:ca:a3:35:ee:cf:fc:c4:72:84:cd:
         5f:80:4e:06:af:e0:d1:82:91:f5:2b:7b:52:a2:d9:fd:eb:2c:
         e7:0d:2b:0a:b0:fe:89:c6:53:b3:38:f7:c3:3c:02:c0:f3:0b:
         76:1b:45:ee:3f:b9:62:2e:00:52:2a:dd:9f:f6:50:a5:8c:67:
         3b:15:27:98:42:45:9f:69:a4:e5:44:20:ec:9a:0c:bf:91:c6:
         23:eb:da:62:ec:cb:5a:8f:14:d9:df:b5:e9:b0:e0:ae:a5:ba:
         f8:2e:bb:0d:1d:43:19:69:d4:06:26:7c:e1:69:c5:ca:1b:ef:
         41:cf:75:db:e6:41:71:cf:09:74:18:55:71:4b:e3:d2:6d:91:
         c6:ab:a3:6b:88:4c:aa:78:69:21:c3:7b:17:b8:80:8b:e6:c1:
         b5:d8:a9:19:eb:a6:28:fa:5d:e2:66:8c:a1:fb:c0:a2:26:e8:
         a5:c5:9c:3a:72:bd:08:83:9b:0f:c8:ca:ec:0f:f0:df:3c:a8:
         8a:39:08:0b:ae:8a:14:62:d8:ce:f0:03:83:d6:72:18:a5:f0:
         05:34:71:41:d1:2a:26:0e:21:bc:6a:df:a4:58:69:30:0e:cd:
         6e:bf:83:a5:f7:91:42:27:3e:7d:29:14:1d:40:e5:30:93:08:
         57:89:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----