Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa
File:                     4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa (raw, json)
Hash identifier:          s+IyOwFKhIRVW0+9qn9hO+0tv409GPuBp4Aj0TJvy00=
Subject key identifier:   28:B3:6D:28:BF:CD:FB:37:22:E2:6C:53:D4:70:14:81:0F:30:04:B1
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       10502F168A85A96F42203F8DB1CC667DEA120408
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa
Signing time:             Fri 10 Oct 2025 17:10:47 +0000
ROA not before:           Fri 10 Oct 2025 17:10:47 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        46.51.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:50:2f:16:8a:85:a9:6f:42:20:3f:8d:b1:cc:66:7d:ea:12:04:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 10 17:10:47 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=12c83e99a4fb6ef3d83aba215992fd54866c0c06b647fbf8e760b2ab857b884e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:28:7f:fb:de:45:ff:4f:57:b1:a1:97:1a:
                    0e:9c:76:4d:c1:21:22:a3:ff:2d:a0:86:f6:2c:1b:
                    28:ea:08:e9:93:a4:c9:09:18:a8:36:dd:1c:b2:8c:
                    3d:76:25:cb:e2:6e:d6:7d:2e:6c:d8:64:d9:b6:29:
                    1e:e5:ae:81:0f:bb:6b:df:8b:fe:81:a0:c9:b4:b1:
                    ee:e1:89:21:6e:1b:39:e7:29:da:46:f9:e0:ad:34:
                    be:50:aa:50:72:26:6f:ff:5e:68:ba:e9:c0:8f:3d:
                    93:80:ec:e5:12:81:db:8f:c4:2f:44:6c:c3:f8:19:
                    e9:82:50:e3:0f:31:1d:c9:7e:51:1e:a7:0b:3b:84:
                    fa:cd:2b:19:39:03:22:cc:8e:f7:04:67:a0:59:d0:
                    fb:8f:ba:96:46:e9:86:2e:66:95:db:98:a9:37:3b:
                    3f:95:23:ff:b1:1c:13:18:56:68:b8:95:e5:08:50:
                    96:28:6b:ae:9a:af:2f:b5:e9:8d:e2:e8:40:b9:af:
                    c1:e3:41:9c:9b:43:10:a6:aa:38:7b:58:9f:3a:65:
                    82:82:75:99:ff:d3:6b:08:e9:7d:bb:79:6d:43:4a:
                    23:47:ec:7e:64:dc:ef:2f:01:0a:af:60:0c:82:42:
                    46:0e:85:60:4e:1e:8c:19:4d:8b:3a:26:60:3e:74:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B3:6D:28:BF:CD:FB:37:22:E2:6C:53:D4:70:14:81:0F:30:04:B1
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.51.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c3:a6:f7:a3:40:09:3a:49:07:b2:76:54:08:c1:09:a1:aa:cf:
         d5:09:cd:4a:ef:74:ca:e9:42:18:78:04:42:a5:56:8a:a6:c5:
         ab:80:6d:2c:d9:5c:24:6d:f1:ec:dd:09:f2:00:95:08:ac:36:
         59:85:06:8d:04:d2:90:2f:eb:87:93:76:9a:e1:ff:07:a1:e1:
         f0:e3:cf:e0:54:c1:74:04:cd:a7:8b:28:27:56:09:a1:70:92:
         66:ea:0d:3f:6e:a4:0d:05:91:7c:ae:17:3f:a2:9b:0d:73:61:
         8f:f6:1f:56:39:de:6d:18:29:94:30:23:23:b4:00:22:30:ab:
         fe:17:56:6a:62:d8:90:fe:76:e4:94:e3:1b:30:7b:9e:d7:8f:
         ac:14:88:e4:9a:34:23:bd:9e:de:ba:2e:13:61:18:ee:2e:e0:
         6b:95:e9:27:b7:4f:58:ca:e4:51:e0:c6:54:ae:82:4e:57:ed:
         98:14:73:34:64:56:85:c8:43:c6:a4:3f:d4:2d:7c:2b:07:62:
         91:8b:de:1c:82:bd:78:b2:f1:56:0f:8f:77:1c:10:ea:54:53:
         9f:de:6c:5f:0c:6e:0a:3a:74:86:9f:26:f0:16:4b:de:ee:08:
         4d:15:0a:a2:6f:66:76:f2:e3:66:02:1d:c6:34:8f:9e:fd:5b:
         42:3f:ba:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----