Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e362e302f32332d3234203d3e20383334.roa
File:                     38372e3235342e362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          tfVvEhgafJFq3DRHglA/EFHAHlZh/KyEJcqOLgxf+hg=
Subject key identifier:   1D:C1:12:63:4D:C4:B7:1B:EC:AE:B2:1C:3D:4E:5E:D3:83:B8:04:43
Certificate issuer:       /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial:       193F49A9DCE7234544E3C4BFB4AB286823387668
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e362e302f32332d3234203d3e20383334.roa
Signing time:             Thu 15 Oct 2026 07:00:22 +0000
ROA not before:           Thu 15 Oct 2026 06:55:22 +0000
ROA not after:            Thu 14 Oct 2027 07:00:22 +0000
asID:                     834
IP address blocks:        87.254.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 13:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3f:49:a9:dc:e7:23:45:44:e3:c4:bf:b4:ab:28:68:23:38:76:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
        Validity
            Not Before: Oct 15 06:55:22 2026 GMT
            Not After : Oct 14 07:00:22 2027 GMT
        Subject: CN=1DC112634DC4B71BECAEB21C3D4E5ED383B80443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:80:a6:4c:49:81:0d:fd:b2:13:6d:6c:ee:
                    a9:35:69:0b:c5:ad:59:a4:2e:60:cc:42:51:71:50:
                    ad:28:d7:cf:c8:ae:5b:ee:5a:85:a2:d0:e5:58:26:
                    fd:3f:14:c5:1e:11:f5:b8:64:4b:58:64:4f:79:4c:
                    b0:61:2a:a1:bd:25:c5:a6:0a:d7:84:62:a6:61:05:
                    44:ba:e3:a9:6f:7e:09:22:27:e3:11:26:64:a4:d9:
                    44:07:a9:48:8c:54:36:00:fa:54:24:b5:e3:dd:c2:
                    b0:a8:b2:f9:e3:db:64:67:a5:7a:58:15:31:2b:c2:
                    54:61:e2:b6:22:16:90:ce:42:3b:cb:e5:9a:d7:a4:
                    3e:13:d1:9f:1b:1e:52:31:ff:7c:e9:2c:e7:2f:4a:
                    e9:76:57:32:ec:38:f0:d1:f6:9b:7a:59:44:b5:83:
                    ea:bb:53:d8:37:3c:f7:77:d3:39:8c:d0:2f:85:f0:
                    36:cd:4c:a2:bd:6d:f1:72:8b:08:92:57:00:51:c4:
                    64:f9:a5:fa:f0:7b:e7:76:89:68:0e:af:02:b2:8a:
                    02:40:07:10:6d:d4:f4:cc:4c:88:18:91:dd:87:ae:
                    3b:b8:80:ff:cd:98:6a:32:c2:28:fe:56:ce:d2:8a:
                    37:dc:71:06:a9:13:04:c3:eb:c3:a2:c5:56:4c:72:
                    37:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C1:12:63:4D:C4:B7:1B:EC:AE:B2:1C:3D:4E:5E:D3:83:B8:04:43
            X509v3 Authority Key Identifier:
                keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e362e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.254.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:84:df:f0:ee:ec:21:f8:4c:36:d7:04:a7:80:06:28:17:46:
         6e:e8:dc:e4:b8:f0:c2:5b:cc:65:31:93:7e:cc:07:3d:7c:34:
         d6:d0:e0:a9:b7:9f:0d:5b:3f:22:d6:03:4a:55:86:d9:09:d2:
         e8:0f:97:f5:2c:35:93:5f:63:53:a2:63:dd:ef:9d:b0:11:ee:
         ce:7e:a9:bc:2e:cf:d1:14:39:6c:49:20:51:8a:7b:7b:83:f5:
         94:b8:12:aa:f6:aa:1d:2c:d4:02:56:6c:95:bb:42:59:fd:48:
         12:52:dd:b4:05:bc:79:0f:4c:77:6b:f1:64:40:cf:b1:06:a1:
         ca:c2:1e:26:0c:e7:93:30:9f:0b:dd:55:4f:13:92:93:7f:6e:
         e7:14:4e:c7:bc:42:b0:8b:50:f8:a9:c1:ce:79:1d:9f:c3:59:
         3b:6c:04:33:00:d6:3f:0d:86:ce:c4:f0:79:87:db:20:7d:2e:
         e7:31:a0:48:2d:07:6e:7c:f4:a7:d4:f4:28:1f:33:f1:e8:7b:
         ab:cd:ac:62:e0:9c:e2:00:6e:26:95:09:4a:79:a9:88:b6:01:
         8e:e1:97:d7:b0:04:ff:81:26:c7:45:5c:53:ad:82:88:43:d4:
         f7:e3:02:b1:bf:96:11:7d:ae:f2:66:d2:d1:a6:ca:c6:e0:50:
         f4:36:53:db
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUGT9JqdznI0VE48S/tKsoaCM4dmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjEwMTUwNjU1MjJaFw0yNzEwMTQwNzAwMjJaMDMxMTAvBgNV
BAMTKDFEQzExMjYzNERDNEI3MUJFQ0FFQjIxQzNENEU1RUQzODNCODA0NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0t4CmTEmBDf2yE21s7qk1aQvF
rVmkLmDMQlFxUK0o18/IrlvuWoWi0OVYJv0/FMUeEfW4ZEtYZE95TLBhKqG9JcWm
CteEYqZhBUS646lvfgkiJ+MRJmSk2UQHqUiMVDYA+lQktePdwrCosvnj22RnpXpY
FTErwlRh4rYiFpDOQjvL5ZrXpD4T0Z8bHlIx/3zpLOcvSul2VzLsOPDR9pt6WUS1
g+q7U9g3PPd30zmM0C+F8DbNTKK9bfFyiwiSVwBRxGT5pfrwe+d2iWgOrwKyigJA
BxBt1PTMTIgYkd2Hrju4gP/NmGoywij+Vs7SijfccQapEwTD68OixVZMcjdZAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUHcESY03EtxvsrrIcPU5e04O4BEMwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzNjJl
MzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVf+BjANBgkq
hkiG9w0BAQsFAAOCAQEAJYTf8O7sIfhMNtcEp4AGKBdGbujc5LjwwlvMZTGTfswH
PXw01tDgqbefDVs/ItYDSlWG2QnS6A+X9Sw1k19jU6Jj3e+dsBHuzn6pvC7P0RQ5
bEkgUYp7e4P1lLgSqvaqHSzUAlZslbtCWf1IElLdtAW8eQ9Md2vxZEDPsQahysIe
JgznkzCfC91VTxOSk39u5xROx7xCsItQ+KnBznkdn8NZO2wEMwDWPw2GzsTweYfb
IH0u5zGgSC0Hbnz0p9T0KB8z8eh7q82sYuCc4gBuJpUJSnmpiLYBjuGX17AE/4Em
x0VcU62CiEPU9+MCsb+WEX2u8mbS0abKxuBQ9DZT2w==
-----END CERTIFICATE-----