Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fMNp0WawB9aiZNJhENwtDIMKv6s.roa
File:                     fMNp0WawB9aiZNJhENwtDIMKv6s.roa (raw, json)
Hash identifier:          kX9bqTf62TSE/EgEllfWIXr155ziuFoEFR2CWnne/68=
Subject key identifier:   7C:C3:69:D1:66:B0:07:D6:A2:64:D2:61:10:DC:2D:0C:83:0A:BF:AB
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       01982DD62624561265AA5E925ABF19D30CC7
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fMNp0WawB9aiZNJhENwtDIMKv6s.roa
Signing time:             Mon 21 Jul 2025 16:34:25 +0000
ROA not before:           Mon 21 Jul 2025 16:34:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201194
IP address blocks:        2a05:9080:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2d:d6:26:24:56:12:65:aa:5e:92:5a:bf:19:d3:0c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Jul 21 16:34:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7cc369d166b007d6a264d26110dc2d0c830abfab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:84:ec:2e:1d:10:dc:99:65:35:16:1e:b9:
                    c1:96:3b:e6:5e:ae:a3:d6:9f:bc:a6:45:f2:53:62:
                    b1:86:46:24:24:c0:98:32:97:c8:6c:be:8f:0b:62:
                    86:e3:48:6e:f9:83:c4:c5:45:ea:d8:a1:31:43:9c:
                    41:14:30:7a:00:ed:73:b0:6e:f5:73:af:5b:c3:f7:
                    fe:cc:38:36:ce:e1:49:73:3e:3e:a1:32:9d:94:97:
                    8e:f6:96:6a:d0:dd:e4:4d:93:8b:7f:b7:8d:1a:3b:
                    da:da:b3:df:ce:25:3f:01:48:b0:81:7d:9a:9a:be:
                    8c:48:16:c3:70:71:9d:9a:cf:78:0b:52:ff:c7:3f:
                    a9:b7:8d:87:44:cb:3f:1b:bc:66:b6:f4:e5:e0:c9:
                    68:49:b3:35:41:3d:d7:76:94:83:f1:3c:94:c2:29:
                    99:f3:0c:db:2d:6c:d1:0a:69:7d:50:e9:98:be:0c:
                    f3:ef:01:b6:da:ed:b0:49:4f:64:ab:a9:e3:7b:36:
                    f9:9b:b3:89:62:4c:9c:7b:7b:e2:d6:50:fb:a1:71:
                    72:67:08:d6:48:9c:79:b7:77:51:bc:19:78:8f:a1:
                    a5:0d:17:c7:39:a7:24:4a:ee:7f:6a:f6:a3:dd:e1:
                    54:3e:2c:63:08:9a:c1:eb:8e:bb:18:5f:0d:ed:09:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C3:69:D1:66:B0:07:D6:A2:64:D2:61:10:DC:2D:0C:83:0A:BF:AB
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fMNp0WawB9aiZNJhENwtDIMKv6s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:9080:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:37:5b:9d:e8:35:70:3d:fc:43:ab:b3:72:df:cb:2c:ed:f8:
         fe:9f:14:7b:e9:6c:e6:25:87:55:3d:cb:cf:5c:8f:95:79:1c:
         48:b3:65:c4:6b:60:e0:c4:8f:d8:e2:58:92:04:57:d9:06:bb:
         a8:d9:1c:0b:f7:0f:4d:ff:7f:3b:c4:3f:31:29:12:b0:04:ef:
         1e:92:01:7d:b8:00:87:29:2c:46:42:b8:f7:8b:d9:4e:b3:16:
         e9:f1:0f:2f:c0:41:78:ea:1e:64:3c:d7:1c:57:e2:61:0a:95:
         05:60:4b:00:bc:af:88:ab:b1:3a:1d:a2:e1:37:13:3f:b0:56:
         7c:8f:70:35:0d:b6:31:38:a3:82:96:5a:63:35:55:a1:65:5f:
         5c:e5:84:f4:8e:3c:59:c3:04:c2:4f:b1:c7:f6:86:43:e9:90:
         13:f8:9c:90:63:da:71:20:69:f4:2e:93:18:ff:37:9d:a3:78:
         65:21:6d:7f:28:ba:33:73:e2:16:95:a2:96:fa:fd:5c:de:96:
         7d:06:aa:ae:2c:b6:d5:fc:7a:bb:ea:2d:28:d7:d4:69:7e:0c:
         c3:3f:05:57:da:81:b1:db:6d:96:6c:0a:83:cf:a1:fd:70:41:
         bd:99:87:ed:63:b1:4f:f8:3b:a4:52:ae:51:da:53:50:29:1c:
         64:9e:3a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:37:57 2025 by rpki-client