Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e332e392e302f32342d3234203d3e20323031333431.roa
File:                     36322e332e392e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          qmQuUVaFF1GQVwKXDVq1KijtZ4m6d1ZfHLn4noUX4Hw=
Subject key identifier:   96:7B:CD:B8:23:A8:94:40:59:99:7E:23:F2:1B:26:9E:F2:83:AC:9E
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       32B142562C2F7CB1BFB8C4258182EF21ECC50B4A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e332e392e302f32342d3234203d3e20323031333431.roa
Signing time:             Thu 03 Jul 2025 12:46:46 +0000
ROA not before:           Thu 03 Jul 2025 12:41:46 +0000
ROA not after:            Thu 02 Jul 2026 12:46:46 +0000
asID:                     201341
IP address blocks:        62.3.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b1:42:56:2c:2f:7c:b1:bf:b8:c4:25:81:82:ef:21:ec:c5:0b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Jul  3 12:41:46 2025 GMT
            Not After : Jul  2 12:46:46 2026 GMT
        Subject: CN=967BCDB823A8944059997E23F21B269EF283AC9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:73:49:78:bd:47:fe:06:3e:4e:aa:59:dd:
                    00:d7:28:9b:50:b8:0f:56:1c:51:69:57:8c:c7:d8:
                    6c:b4:df:b0:b1:b4:7d:49:73:0c:89:64:f6:fb:ce:
                    fa:c2:4b:b3:42:d0:9c:07:b4:6e:1a:bc:79:6f:a1:
                    06:b4:b5:c6:70:8a:23:d8:84:ab:dd:39:0f:98:d5:
                    a5:cd:1f:1b:fc:69:e1:e0:4c:e7:9b:46:88:2e:15:
                    22:f4:a4:a9:61:fb:00:0a:5e:b0:ee:5f:4a:a6:c5:
                    df:2d:ed:06:f0:ba:6d:17:98:33:0a:9c:46:7a:82:
                    2a:f0:aa:5d:d4:57:4a:32:0c:d5:8c:c3:a8:fa:c7:
                    56:da:cb:78:fa:4f:61:82:50:88:c5:82:89:06:cb:
                    a7:c7:a3:46:e9:87:eb:c9:40:03:f5:31:11:8e:22:
                    6a:ec:2a:93:0e:23:30:fd:6b:d9:77:9a:50:ff:0e:
                    fe:3e:13:ea:f8:6a:35:6f:de:c7:a5:f0:2b:15:07:
                    be:48:1e:60:fc:12:42:20:2f:c7:4f:ee:36:a0:ea:
                    e3:0d:3d:1a:b7:2c:c6:48:e9:4d:22:c8:c9:1d:0f:
                    ce:1c:67:bf:91:81:7d:e1:ad:6a:21:82:21:e7:f4:
                    1b:8b:82:5e:53:16:31:4a:b3:61:b6:bc:13:b7:fd:
                    be:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7B:CD:B8:23:A8:94:40:59:99:7E:23:F2:1B:26:9E:F2:83:AC:9E
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e332e392e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:41:6a:61:f6:7c:bd:ec:54:fb:44:14:05:49:79:10:2b:c0:
         8e:5f:10:c2:3b:74:d6:72:5a:55:7b:a5:d1:1a:41:a2:14:5c:
         4d:68:32:09:31:95:82:e7:a8:85:7e:65:c7:a1:f0:fb:30:cb:
         5b:6f:55:88:f6:78:87:c5:0e:36:4c:41:4a:77:9c:2a:00:33:
         59:ff:1f:df:d2:1d:d9:9c:e7:31:7e:4f:b3:6b:fd:3c:58:ef:
         0f:09:9c:2c:f9:8a:07:fa:82:e5:33:8f:28:41:fe:e7:cc:90:
         74:35:7b:b1:9f:01:b9:c4:a0:c7:77:98:d0:f0:69:32:1a:bc:
         96:31:ac:52:e0:72:96:a1:b8:fc:5d:2e:8a:1e:96:13:cd:20:
         dc:84:85:90:61:64:44:5a:3b:bb:a6:e6:ea:09:ac:a5:a7:d4:
         2a:2f:04:2e:91:0e:10:eb:92:a7:95:38:8a:64:cf:45:50:28:
         59:39:10:64:ab:b7:c3:2f:1b:04:bc:b2:1f:ad:df:47:59:49:
         85:79:79:44:a3:c6:28:62:33:25:43:fd:01:e5:13:6a:cb:fe:
         a3:82:25:89:84:9a:b5:28:c6:73:29:8b:d8:1d:30:5a:20:a1:
         13:2e:87:f2:46:ed:79:de:02:30:b6:53:87:7b:37:2c:dd:fe:
         ea:da:7c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:16:23 2025 by rpki-client