Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
File:                     bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa (raw, json)
Hash identifier:          11yDpp6CfBM2F2OJUy6/3gQUTqFCbhxv/lNB80d4j8o=
Subject key identifier:   CA:21:A4:C0:24:8B:BA:B0:51:F9:B7:62:D6:4C:37:0D:B2:93:1F:EC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       38EB81A7CD4468C7181AF23F0935004C96E461A9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
Signing time:             Fri 10 Oct 2025 17:10:36 +0000
ROA not before:           Fri 10 Oct 2025 17:10:36 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        46.137.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:eb:81:a7:cd:44:68:c7:18:1a:f2:3f:09:35:00:4c:96:e4:61:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Oct 10 17:10:36 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=99c2f716a41defc8345d44f36c9b4442cff03f3636828ae194d34bcc0c8647b0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:34:9d:93:ac:7a:cd:9b:13:46:30:1d:e1:
                    69:d4:b7:86:61:ce:2e:ab:9d:31:5a:70:3e:4d:ab:
                    b6:02:18:9f:f3:1f:fc:c5:ba:0d:02:e6:9a:da:d9:
                    d3:41:9d:ce:82:0d:81:d4:89:bb:df:b4:34:6f:69:
                    e8:a9:92:35:97:9c:58:18:e3:9a:85:9a:d7:4c:52:
                    cf:f3:5e:e4:61:c2:90:5a:4d:ad:68:7d:60:ff:4d:
                    a0:de:24:4d:41:86:b0:53:bb:b8:29:9b:af:62:ae:
                    bc:ff:b9:53:82:5c:76:e9:91:6d:fe:b3:1b:fb:ee:
                    9d:f5:be:65:14:ef:5b:f7:bf:e6:ff:64:1d:60:1c:
                    9d:a3:6d:30:29:bd:42:ec:c1:55:15:89:a6:c2:56:
                    a7:af:36:c9:eb:0e:52:c6:7f:58:a8:9e:d6:0e:a1:
                    95:b9:43:b0:71:7f:70:74:c3:eb:c0:53:7f:bd:e6:
                    8e:fb:1f:da:8e:8c:41:90:f1:a1:6d:81:5c:05:33:
                    54:af:b2:c7:7d:52:cb:61:e9:49:b8:db:7a:dc:ae:
                    f3:54:1c:19:3e:66:7d:ab:04:7f:51:05:e8:aa:d0:
                    ee:9a:be:70:ee:2f:d1:4f:9f:6e:1f:39:e3:35:28:
                    4b:76:ec:62:49:53:d6:d0:f0:56:bc:73:28:4c:10:
                    a8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:21:A4:C0:24:8B:BA:B0:51:F9:B7:62:D6:4C:37:0D:B2:93:1F:EC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:59:bd:c8:f5:3a:1a:41:29:af:5c:be:a0:01:0a:ce:59:13:
         74:52:ec:c5:18:3f:2f:e6:ef:cf:3e:90:51:78:6a:95:92:66:
         3e:45:6b:3a:15:6c:07:5c:b8:7e:89:4d:bc:3b:9a:b3:07:03:
         90:f2:10:3e:5d:30:70:72:1d:a9:89:2b:4d:b2:cd:16:14:b5:
         2b:60:39:30:62:27:5d:fd:0d:6d:8d:20:c0:91:67:bf:7c:61:
         5e:89:aa:cf:8b:fa:7a:0e:40:24:96:f6:b9:62:c4:dd:db:5e:
         01:b7:93:f5:9a:6d:1d:e8:6b:e2:f7:5c:8c:ca:49:b9:1a:30:
         9f:b8:07:da:61:e6:86:0b:60:2d:28:59:20:f8:64:e9:5e:ec:
         69:85:19:83:48:55:9b:38:61:01:8f:04:d8:1b:24:7f:53:6d:
         3d:a0:11:0d:14:74:3a:d0:08:31:ea:fb:98:55:84:71:40:38:
         10:6c:e5:d7:be:8a:af:1d:1b:fa:3c:7a:ba:ec:49:bc:cc:87:
         f3:98:db:18:61:52:00:f0:02:f5:1d:c7:31:38:69:f8:d6:51:
         48:e2:5d:20:b3:28:cd:a5:05:44:10:f7:73:dc:47:5d:0b:79:
         37:9f:ac:f1:49:f2:f6:23:b3:64:9e:ff:82:1a:24:c9:f0:36:
         88:1a:27:e8
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUOOuBp81EaMcYGvI/CTUATJbkYakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMTAxNzEwMzZaFw0yNTExMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDk5YzJmNzE2YTQxZGVmYzgzNDVkNDRmMzZjOWI0NDQyY2ZmMDNmMzYzNjgy
OGFlMTk0ZDM0YmNjMGM4NjQ3YjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANEvNJ2TrHrNmxNGMB3hadS3hmHOLqudMVpwPk2rtgIYn/Mf/MW6DQLmmtrZ
00GdzoINgdSJu9+0NG9p6KmSNZecWBjjmoWa10xSz/Ne5GHCkFpNrWh9YP9NoN4k
TUGGsFO7uCmbr2KuvP+5U4JcdumRbf6zG/vunfW+ZRTvW/e/5v9kHWAcnaNtMCm9
QuzBVRWJpsJWp682yesOUsZ/WKie1g6hlblDsHF/cHTD68BTf73mjvsf2o6MQZDx
oW2BXAUzVK+yx31Sy2HpSbjbetyu81QcGT5mfasEf1EF6KrQ7pq+cO4v0U+fbh85
4zUoS3bsYklT1tDwVrxzKEwQqM8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTKIaTA
JIu6sFH5t2LWTDcNspMf7DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmRkZDVkNTItZjA5Ny00YWEwLTlhNzEtYWE3YjY3NTJkY2FhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAC6JMA0G
CSqGSIb3DQEBCwUAA4IBAQClWb3I9ToaQSmvXL6gAQrOWRN0UuzFGD8v5u/PPpBR
eGqVkmY+RWs6FWwHXLh+iU28O5qzBwOQ8hA+XTBwch2piStNss0WFLUrYDkwYidd
/Q1tjSDAkWe/fGFeiarPi/p6DkAklva5YsTd214Bt5P1mm0d6Gvi91yMykm5GjCf
uAfaYeaGC2AtKFkg+GTpXuxphRmDSFWbOGEBjwTYGyR/U209oBENFHQ60Agx6vuY
VYRxQDgQbOXXvoqvHRv6PHq67Em8zIfzmNsYYVIA8AL1HccxOGn41lFI4l0gsyjN
pQVEEPdz3EddC3k3n6zxSfL2I7Nknv+CGiTJ8DaIGifo
-----END CERTIFICATE-----