Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ilbTbKDw7TN7XTGmwqbvNDRO4fw.roa
File:                     ilbTbKDw7TN7XTGmwqbvNDRO4fw.roa (raw, json)
Hash identifier:          4N4i1l9+mBJiqdctdVubAmlboOr8e2raVm5nIrlAgsQ=
Subject key identifier:   8A:56:D3:6C:A0:F0:ED:33:7B:5D:31:A6:C2:A6:EF:34:34:4E:E1:FC
Certificate issuer:       /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial:       01974A6E63B6ACB258EBB6F5011005B3F670
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ilbTbKDw7TN7XTGmwqbvNDRO4fw.roa
Signing time:             Sat 07 Jun 2025 12:47:17 +0000
ROA not before:           Sat 07 Jun 2025 12:47:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     11967
IP address blocks:        2a0d:d940:70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 15:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:6e:63:b6:ac:b2:58:eb:b6:f5:01:10:05:b3:f6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
        Validity
            Not Before: Jun  7 12:47:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8a56d36ca0f0ed337b5d31a6c2a6ef34344ee1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f2:24:0d:ae:40:ae:54:b5:7b:16:ab:32:96:
                    c9:78:6c:bb:59:15:61:91:03:c9:75:c7:c6:9d:11:
                    8c:ea:b2:ae:bc:96:67:04:75:59:5f:79:21:2f:f9:
                    44:7f:8f:64:a7:62:8d:66:98:06:65:52:81:0c:83:
                    2d:a4:69:43:5b:d0:cd:46:a6:e7:97:70:b5:d1:cb:
                    cd:ba:fb:fb:a3:8a:fc:24:59:a8:d7:ad:33:cc:19:
                    99:ec:74:0b:56:c2:29:2a:35:83:bc:5c:5f:aa:bf:
                    c3:fd:4e:e2:f4:10:30:92:6c:3f:5a:7c:be:f4:61:
                    2a:5d:24:c8:b9:17:3b:e7:6e:3c:ca:d1:d5:f7:40:
                    77:f5:a0:d9:70:b3:8a:f0:a1:0b:16:b3:c4:83:d4:
                    24:3d:bc:6e:b6:bb:40:df:42:89:d4:16:57:c3:8d:
                    30:80:d6:f2:80:d8:1d:32:9c:4d:0a:72:55:55:2d:
                    68:e7:8d:76:bc:f3:48:70:6d:7a:b7:de:3a:f4:e9:
                    c3:3c:68:d7:59:d7:29:f1:a4:ae:14:ed:a7:7e:64:
                    1f:1b:04:22:5f:90:d3:f9:b7:d3:5f:88:cf:fa:b1:
                    cf:67:93:c8:af:76:56:c9:f8:c1:84:89:49:82:5a:
                    dd:53:08:06:46:e0:63:06:b1:4c:07:fc:da:30:a7:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:56:D3:6C:A0:F0:ED:33:7B:5D:31:A6:C2:A6:EF:34:34:4E:E1:FC
            X509v3 Authority Key Identifier:
                keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ilbTbKDw7TN7XTGmwqbvNDRO4fw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:d940:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         d9:fd:bc:34:bd:1b:8d:64:5c:8a:ff:dd:17:db:21:8b:31:5b:
         a0:a5:90:e2:13:57:92:de:02:b2:88:e9:9a:c0:a1:e9:5e:97:
         ef:ee:03:e3:61:02:1f:19:e4:0f:69:05:da:88:d7:23:5e:d9:
         32:27:ac:eb:4e:da:84:be:cd:85:6e:04:6b:75:88:fe:ac:78:
         9f:fc:c7:a3:bc:e4:c3:90:80:59:50:06:03:3d:2e:3a:8f:f1:
         18:81:c6:c0:43:79:53:93:59:fa:d0:46:77:ef:44:08:4a:27:
         5b:79:88:90:58:25:5e:24:f5:00:26:99:e3:44:e9:e9:bf:61:
         6d:9b:42:07:f3:dc:05:7e:70:c0:6d:72:e3:6c:08:cf:dd:89:
         c6:2c:06:8d:97:6b:1c:78:f9:ee:ab:df:d4:9f:7f:25:b7:cc:
         a0:15:6a:bd:90:66:42:94:e5:a9:da:61:c0:ab:9c:53:ec:f1:
         d4:b2:11:a5:87:e8:93:99:0c:3a:b8:56:3b:02:6d:1c:02:99:
         4f:b9:16:fe:20:b5:a3:5d:9d:2d:f4:55:f7:f3:af:8b:6c:6f:
         56:61:17:ce:a1:02:a3:86:0c:18:6c:6f:b7:e1:e9:5e:17:8c:
         01:a3:96:9c:03:76:bc:be:c0:9f:8f:8c:b8:cf:f3:dd:8c:d9:
         bf:f5:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:17:11 2025 by rpki-client