Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa
File:                     bb73d62f-513c-4673-8547-902e7fa2148b.roa (raw, json)
Hash identifier:          YCiVO4SgPWAfgwd4RU61kcjcDYOQDRIO4FKo8gDLBoQ=
Subject key identifier:   FF:07:E0:02:5A:20:6A:64:AC:76:E8:DF:44:2A:9C:41:58:90:DB:F3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3C7E4135CC42DDDC5B559980CD3BC8D5F8FC7878
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa
Signing time:             Mon 27 Jul 2026 03:30:10 +0000
ROA not before:           Mon 27 Jul 2026 03:30:10 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        46.137.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7e:41:35:cc:42:dd:dc:5b:55:99:80:cd:3b:c8:d5:f8:fc:78:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 27 03:30:10 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=57df23c9b3b3a45aba5445e37b5036e5312e916c2664112143cd9337ff7cd5de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bc:68:8f:d6:af:9d:f9:e3:40:22:7f:78:1e:
                    ef:c5:e2:07:64:ca:76:c1:44:16:92:c4:f2:a5:0c:
                    d9:10:cc:89:11:2b:f4:fc:db:6c:59:d3:61:1d:60:
                    31:34:7d:84:1b:c3:10:3d:3d:b5:03:53:7b:ee:42:
                    7e:05:0a:79:38:65:a3:51:a5:53:f1:a4:8b:52:aa:
                    19:b4:17:0f:cc:80:d0:44:02:14:fa:29:c8:7b:a3:
                    80:27:7f:87:57:96:3e:52:ac:e2:56:7c:4a:e3:fc:
                    44:2d:e8:04:2d:68:f6:27:c1:43:46:4b:9c:24:90:
                    ad:47:f5:d3:f9:c6:4f:d4:79:1a:e4:19:3e:29:e4:
                    cd:e2:94:e4:79:af:83:d4:ae:45:d8:cb:51:99:eb:
                    e9:e3:4e:01:67:65:1d:1c:34:fa:12:13:22:ab:05:
                    8a:7c:53:05:47:2c:07:dc:49:9b:dc:ef:4d:23:e9:
                    de:33:f9:6b:20:c3:50:ff:09:4d:f3:f2:24:ef:4b:
                    61:95:39:b9:2b:ae:44:90:2e:0a:d4:ea:7e:ee:e9:
                    a6:c4:45:08:b6:ec:50:2f:85:fe:a5:8d:34:a3:1b:
                    e6:d8:ae:5b:5a:15:a2:ad:d4:67:c8:1e:d4:51:a1:
                    bf:d8:7c:b5:8c:dc:d0:0f:e2:fb:80:cb:a6:95:21:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:07:E0:02:5A:20:6A:64:AC:76:E8:DF:44:2A:9C:41:58:90:DB:F3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.137.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8c:eb:c0:bf:df:68:d6:27:53:4e:f8:a8:93:3f:ab:ee:17:f1:
         79:48:e5:fe:72:6d:39:3e:b7:4a:21:49:e0:7a:49:a5:7b:23:
         ba:dd:49:9a:6f:f6:98:cf:6d:d8:bb:40:b2:9c:bd:e9:d1:4b:
         bc:ff:10:bc:0c:2c:93:c0:44:24:6d:3b:2e:08:bf:4f:21:8c:
         7d:50:0a:3d:a3:8e:c9:ce:21:12:e1:bb:92:d5:ed:5d:2f:ff:
         8f:1e:de:07:ac:ca:42:e6:c8:d1:42:a0:23:f9:69:00:f1:c7:
         8b:7c:bd:74:ce:78:da:ff:58:43:ce:8e:af:db:27:96:34:1b:
         93:2b:29:71:61:78:6b:df:11:39:72:f4:34:9a:69:42:47:d5:
         1f:23:0f:36:6f:8f:a8:6a:e2:bc:c0:16:63:ce:61:9a:71:64:
         f9:19:9a:2c:e5:6c:90:3b:b3:50:56:bb:32:6f:a5:a8:d3:df:
         0b:a5:0a:38:56:45:a7:8c:94:0a:3d:43:42:62:56:61:d6:95:
         79:6d:03:0b:e5:17:27:75:d6:ca:4a:20:46:43:ad:d3:6d:3b:
         72:f9:d1:5a:51:c0:32:19:72:bb:d1:72:53:e7:b2:d0:85:00:
         66:c5:c3:bc:32:05:99:02:da:0f:9d:ef:c9:59:03:32:df:55:
         a2:c8:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----