Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa
File:                     9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa (raw, json)
Hash identifier:          mVGf9AGcGUK8QHd2yYX4TDcjKXLLUNwJE4t/Y58ToGY=
Subject key identifier:   D7:89:EB:97:23:75:13:3E:04:AB:6B:C3:99:46:46:E8:90:C5:9E:EA
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       1C46B49696D5CF3E8A8E8875981D0FD19E7D9177
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa
Signing time:             Thu 23 Jul 2026 15:30:11 +0000
ROA not before:           Thu 23 Jul 2026 15:30:11 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        51.206.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:46:b4:96:96:d5:cf:3e:8a:8e:88:75:98:1d:0f:d1:9e:7d:91:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Jul 23 15:30:11 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=17ec3984616f92b6a0a75d09afa0a601ce17812bff7cae214e50438bde1a992f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:58:42:6c:13:bc:ee:84:25:72:cc:36:d9:
                    ed:81:cc:80:1d:fa:b2:07:7e:89:1c:df:ab:68:b7:
                    2b:19:ea:5b:d4:16:71:c4:b2:b8:10:d8:94:cc:b2:
                    2f:8c:cd:c3:39:84:d2:09:b5:2c:08:c7:e8:f4:b2:
                    6d:62:cf:26:75:7d:ff:e9:24:e8:33:52:7e:03:eb:
                    e8:30:e3:e4:44:57:65:6d:14:9f:7a:99:e2:49:ad:
                    1f:72:29:09:ea:56:0d:a1:3f:d1:c5:c8:2b:57:b4:
                    ab:a8:93:1b:38:b0:c0:4d:6f:3a:20:0d:09:8e:16:
                    f4:d4:56:36:e1:34:6f:85:f9:a1:b3:07:cc:33:24:
                    11:fd:40:86:15:9d:7b:50:91:47:f5:39:a3:76:67:
                    6e:f3:19:e9:49:fc:82:3d:c6:56:5b:7f:b7:89:11:
                    da:39:5e:74:a3:e6:84:5c:45:1e:76:b0:b3:1d:12:
                    bc:01:06:4b:5e:99:f6:8f:e1:8f:b2:ff:96:f7:4c:
                    eb:b4:36:4f:45:8d:6d:f8:0f:98:80:7a:1e:86:32:
                    fa:a6:4f:a9:79:d9:aa:c8:f0:16:0f:05:91:6a:a1:
                    55:e8:87:37:ff:77:ed:0d:96:e1:13:ae:20:c0:85:
                    24:c3:d1:51:37:76:59:95:af:75:34:21:40:a6:45:
                    06:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:89:EB:97:23:75:13:3E:04:AB:6B:C3:99:46:46:E8:90:C5:9E:EA
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.206.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         92:71:92:fa:d5:80:32:72:6e:c7:c0:4a:f1:55:29:ac:06:90:
         fb:b9:73:56:ea:4d:40:33:32:ff:48:14:ec:aa:e4:94:fa:9e:
         67:5e:c8:c1:74:68:9e:f4:36:75:09:34:fd:45:fa:eb:5c:d7:
         64:33:52:e4:81:e9:7e:ff:e4:c1:28:89:14:d2:ed:01:1b:f8:
         44:4f:62:3d:50:e5:ee:f9:10:3d:de:65:21:98:62:02:ab:47:
         39:f1:db:4d:bc:7c:88:b8:37:6e:19:62:b0:2f:d9:e6:e9:6f:
         36:b0:af:6d:9c:75:b1:23:ad:a5:b7:6f:03:e3:2e:44:2d:00:
         db:f7:8d:57:a4:9e:61:f8:61:b3:4f:dd:04:70:5c:ce:b2:36:
         a8:c1:9c:62:bd:e3:46:81:5b:e4:d6:dc:3a:82:d5:03:7a:b9:
         8d:13:b2:82:10:11:05:29:46:59:35:d0:39:3b:94:bb:dd:8f:
         89:87:fe:e4:49:b2:c4:ee:8c:2b:21:04:4f:17:7c:df:f2:3b:
         15:9f:8a:3a:1d:14:47:88:88:69:52:8f:e7:49:e6:f0:15:4c:
         dc:e6:25:6a:ce:5e:9b:a5:a1:0e:33:81:f5:f5:8e:87:72:ee:
         49:9f:4f:9d:83:17:e2:5b:ca:d9:cb:f9:e6:af:78:fc:3a:7b:
         5e:25:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----