Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h3q6Qj8JBMCKb_tTvQznlw8o0Wc.roa
File:                     h3q6Qj8JBMCKb_tTvQznlw8o0Wc.roa (raw, json)
Hash identifier:          WNdsK7uEhxqoP7z7kKHpiLmq51mI3TZtcyVQNDjYcyk=
Subject key identifier:   87:7A:BA:42:3F:09:04:C0:8A:6F:FB:53:BD:0C:E7:97:0F:28:D1:67
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       019822E2CD6E49CD96F8779858E5B82791CD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h3q6Qj8JBMCKb_tTvQznlw8o0Wc.roa
Signing time:             Sat 19 Jul 2025 13:32:25 +0000
ROA not before:           Sat 19 Jul 2025 13:32:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213622
IP address blocks:        89.106.65.0/24 maxlen: 24
                          185.121.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 11:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:22:e2:cd:6e:49:cd:96:f8:77:98:58:e5:b8:27:91:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jul 19 13:32:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=877aba423f0904c08a6ffb53bd0ce7970f28d167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:98:70:da:52:d2:e3:a9:4c:15:56:52:96:
                    39:24:a7:01:57:5c:68:2f:66:76:51:4f:bc:eb:72:
                    9e:99:a5:b7:09:9f:4a:50:a9:07:0d:26:5d:81:29:
                    75:fa:16:70:22:13:88:9c:05:06:66:00:ec:bf:79:
                    21:42:cd:06:20:a3:76:16:35:ab:cf:56:b6:67:5b:
                    79:ff:6d:d7:91:04:a0:e2:31:95:6a:57:d9:6b:98:
                    b1:da:9f:b4:f2:65:90:90:e9:00:61:09:36:5a:b3:
                    ae:5e:7e:e2:b9:31:30:fe:94:50:72:5b:80:0a:db:
                    cd:e7:44:34:fb:95:c3:4c:d0:b7:08:61:df:74:cf:
                    82:81:78:40:0b:e1:a8:05:04:30:1c:51:5c:07:ef:
                    39:da:9d:30:3e:a6:b7:5a:ae:c9:ef:62:20:93:55:
                    ca:a5:cd:25:c7:56:9d:70:ca:31:db:a8:23:51:4e:
                    08:d5:20:a0:47:41:fe:48:76:ff:35:87:57:ca:e6:
                    2f:8c:2a:b1:4b:d4:cb:a0:51:cd:28:0f:e7:3c:cf:
                    e0:aa:5c:94:29:99:fb:18:e1:63:45:71:55:d5:94:
                    6d:49:b0:62:d9:a7:a9:f1:7a:ab:9c:9e:2f:78:5e:
                    d5:ad:4f:ac:22:8a:9a:33:3e:1a:45:3b:bf:bb:39:
                    99:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7A:BA:42:3F:09:04:C0:8A:6F:FB:53:BD:0C:E7:97:0F:28:D1:67
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h3q6Qj8JBMCKb_tTvQznlw8o0Wc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.106.65.0/24
                  185.121.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:e5:08:4a:03:67:bc:b0:7c:79:e1:cc:49:36:ff:3c:70:18:
         6e:6c:ec:01:b8:28:9e:9a:2e:04:17:0d:02:76:12:36:83:3c:
         26:be:1d:16:a5:13:de:f3:00:0e:af:84:05:46:da:e7:0e:06:
         d7:42:8c:f5:04:c7:9d:0c:8e:36:3a:d3:9b:6a:67:fd:ec:f9:
         62:38:c1:e9:ee:3e:7d:6e:78:e9:ed:82:2d:a4:6d:04:f0:ee:
         6b:b0:d2:49:bd:1b:fb:fa:bb:1b:fc:9f:40:a6:16:1c:1b:cd:
         72:74:b1:04:25:d1:cf:87:dc:69:47:0e:fe:5a:47:e8:4d:d5:
         60:dd:20:6b:48:b3:76:96:d8:17:91:da:5f:d9:2c:10:b8:81:
         df:12:68:8f:9e:09:e5:28:8f:41:f4:ec:09:64:41:0d:90:77:
         b4:5c:93:a1:39:50:96:90:a2:b7:6a:92:91:89:92:73:e4:dd:
         33:d7:98:21:40:e0:f5:14:cd:de:f7:7a:d0:bf:d0:97:dd:1c:
         20:53:be:fc:18:ee:78:dc:23:7c:f3:1d:99:35:d1:b4:a8:8a:
         78:1c:26:ee:ce:3f:7e:f4:92:fb:a8:7b:c2:8e:68:5e:61:78:
         2b:81:87:97:ce:33:51:26:29:8e:1b:98:f8:5a:c7:15:a4:2e:
         c8:44:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:13:02 2025 by rpki-client