Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32302e302f32332d3234203d3e20383334.roa
File:                     38372e3235342e32302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          JNmHzwHPRq7qlddj0jcOBGMR8vn3SIVE2cJH7b/pCQQ=
Subject key identifier:   9B:36:19:CE:4B:5A:2B:BA:0B:32:71:17:1C:DE:B7:58:47:80:9D:48
Certificate issuer:       /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial:       40247A399E7C14CAEFD4B89D954AFC81461292BC
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32302e302f32332d3234203d3e20383334.roa
Signing time:             Tue 30 Jun 2026 04:58:16 +0000
ROA not before:           Tue 30 Jun 2026 04:53:16 +0000
ROA not after:            Tue 29 Jun 2027 04:58:16 +0000
asID:                     834
IP address blocks:        87.254.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 02:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:24:7a:39:9e:7c:14:ca:ef:d4:b8:9d:95:4a:fc:81:46:12:92:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
        Validity
            Not Before: Jun 30 04:53:16 2026 GMT
            Not After : Jun 29 04:58:16 2027 GMT
        Subject: CN=9B3619CE4B5A2BBA0B3271171CDEB75847809D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:d7:af:1e:ab:f8:3d:b3:7c:34:eb:70:67:
                    2a:4e:b1:a1:91:e3:e0:ce:4b:73:da:59:31:a3:ca:
                    a3:5c:ad:5a:b2:21:66:4e:13:f6:c3:37:09:5a:78:
                    56:ce:19:d6:3c:f3:a4:6b:19:52:8d:08:94:95:9b:
                    6c:f9:0e:01:28:7c:b8:26:ca:65:41:0b:0c:63:be:
                    9d:f7:66:75:77:1e:44:6e:91:8b:95:6a:0a:69:87:
                    91:76:55:bc:6b:cb:8d:12:d6:7b:38:aa:86:e1:7d:
                    ad:de:f9:8f:f9:93:b9:b9:78:fc:21:c1:7b:5a:da:
                    c7:5e:85:99:0d:b9:8b:26:02:65:d6:cf:81:d0:0f:
                    f0:62:81:0b:83:dc:e5:e7:4e:66:2f:3c:52:ad:42:
                    6d:53:71:73:9a:6e:49:20:53:c5:61:25:7a:16:c1:
                    1e:86:72:2a:c6:96:82:b5:da:d7:52:f7:fa:c1:19:
                    52:69:75:dc:c8:04:33:f1:26:69:61:87:9f:ab:29:
                    22:5a:a1:b0:e0:64:2c:7d:ea:85:7f:4d:10:b7:8e:
                    06:03:6b:ea:cc:c1:df:b8:a2:4c:0a:e4:49:f2:91:
                    f6:b8:aa:94:f4:68:a1:29:aa:d8:f3:e1:08:1c:a3:
                    ff:af:a9:3b:94:4e:ef:36:85:a7:29:5c:44:b7:97:
                    f6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:36:19:CE:4B:5A:2B:BA:0B:32:71:17:1C:DE:B7:58:47:80:9D:48
            X509v3 Authority Key Identifier:
                keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.254.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:30:f9:dc:ab:b6:c3:52:4c:53:c7:b2:4e:21:6a:2c:23:b7:
         4f:a5:ed:6c:5d:a6:d0:db:9e:1e:f1:b6:14:35:3c:ec:f9:e6:
         27:94:5b:c4:2a:85:20:6b:ed:5b:64:3c:6f:32:9a:4d:c4:fe:
         db:33:6f:20:eb:fc:cf:70:f8:9f:10:29:ea:78:0c:e8:6c:af:
         b8:50:41:15:17:12:59:30:f0:1d:96:90:ea:72:cb:b5:d2:2c:
         02:2e:e4:f8:b4:c6:3c:21:41:f1:e5:1f:23:3b:ba:96:f0:07:
         e9:dd:90:0e:7a:18:e4:26:c4:5f:24:8d:b3:ac:86:ea:fd:44:
         c2:78:43:4b:b8:3b:91:98:a2:2d:5f:dd:90:3f:85:a0:c4:2d:
         af:8a:02:38:97:54:15:cd:2f:37:40:44:1e:6e:e8:21:fd:00:
         48:52:6e:b5:ff:b7:fb:62:09:7f:45:1a:0c:59:63:d4:66:95:
         91:8d:3e:0f:f3:92:5a:95:ed:ba:a4:e4:84:26:42:15:15:51:
         fa:93:30:e5:18:9b:1c:ef:59:58:5e:96:e2:3e:97:bc:ff:f9:
         78:e8:e2:80:ef:3e:12:0b:3e:e5:de:79:ed:a4:bc:de:bf:72:
         5e:82:54:17:8d:e1:52:0b:24:63:f2:e5:86:16:df:08:3e:15:
         dd:a9:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----