Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mvjla0bo-b4smMyT4MbECv-Xg3g.roa
File:                     mvjla0bo-b4smMyT4MbECv-Xg3g.roa (raw, json)
Hash identifier:          Vqa7w/SLiL/4k4HQ/RKtBsHmvexhX5wGtbX9qiUFZ2c=
Subject key identifier:   9A:F8:E5:6B:46:E8:F9:BE:2C:98:CC:93:E0:C6:C4:0A:FF:97:83:78
Certificate issuer:       /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial:       01973FAC7B7C93EAA8DFE9F9745441F7C3E7
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mvjla0bo-b4smMyT4MbECv-Xg3g.roa
Signing time:             Thu 05 Jun 2025 10:39:17 +0000
ROA not before:           Thu 05 Jun 2025 10:39:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34119
IP address blocks:        158.120.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3f:ac:7b:7c:93:ea:a8:df:e9:f9:74:54:41:f7:c3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
        Validity
            Not Before: Jun  5 10:39:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9af8e56b46e8f9be2c98cc93e0c6c40aff978378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:c6:63:e8:d5:41:5b:59:5a:23:fe:a8:c2:
                    98:d4:4d:56:38:79:f5:56:ee:aa:f8:8e:8c:03:37:
                    94:8f:70:30:45:60:f0:71:2a:dd:35:97:d0:f4:8b:
                    2d:cf:50:64:82:a1:ea:6a:68:b3:7e:c5:26:2b:24:
                    aa:38:92:b5:58:46:64:36:ba:7a:48:5c:82:b5:8d:
                    e4:d7:3e:da:19:e4:8c:a8:ec:2d:c1:e2:6e:df:a4:
                    3d:2f:59:af:23:00:2e:d6:b6:ae:32:4b:b1:2e:4f:
                    6f:d5:5f:e9:e7:53:e6:28:93:0e:54:98:a7:74:d1:
                    52:39:e4:8f:2f:df:83:80:13:1b:73:1d:b4:9d:49:
                    58:a2:de:3a:17:44:f3:ae:fe:d3:bf:e7:ed:c2:6d:
                    a5:b7:26:a7:d7:d1:ef:19:3c:9f:18:96:ca:4b:f2:
                    e5:58:70:99:a7:ca:aa:f7:26:a5:28:1a:91:b6:d8:
                    4a:e2:0e:b0:08:9c:79:fc:91:5f:2a:9c:76:3a:51:
                    b2:24:2e:1d:0a:c8:95:22:6f:cf:7d:0a:b9:b4:02:
                    a4:e9:7b:ce:06:3d:d4:04:80:68:60:ee:b2:c0:ed:
                    00:fb:c4:a9:85:74:e5:6c:e1:68:a8:e1:b6:5b:13:
                    0b:bb:ed:34:8f:21:91:c1:46:d9:19:4b:29:ef:da:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F8:E5:6B:46:E8:F9:BE:2C:98:CC:93:E0:C6:C4:0A:FF:97:83:78
            X509v3 Authority Key Identifier:
                keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mvjla0bo-b4smMyT4MbECv-Xg3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:d6:4f:06:40:b9:5f:0f:a1:1f:e9:3a:72:d4:b8:83:d0:ae:
         f9:2b:16:1e:e9:62:e0:f5:43:d6:18:ac:42:35:12:1a:ac:4a:
         02:65:e4:50:00:28:45:85:9f:2f:c7:48:50:b3:16:12:33:73:
         1f:55:56:d8:f8:53:73:f7:5f:aa:04:c9:cd:48:9f:77:60:8f:
         f8:5a:eb:98:22:7a:02:ba:ba:56:f0:ae:8c:04:32:29:df:5b:
         20:85:14:b4:5c:10:c5:96:93:71:6b:c8:94:3e:58:69:6c:6f:
         4c:25:fc:d6:bf:a8:d4:73:34:5e:84:c6:c5:a9:5f:c1:f2:78:
         6b:19:d8:ba:b6:37:57:f0:83:f4:99:ef:fe:43:be:45:58:5c:
         22:9b:0d:b4:63:8f:c0:57:3a:c9:e5:5f:01:e9:fd:b3:fe:8c:
         04:2d:58:77:e2:4c:d3:7e:d7:ea:fd:2c:8c:0d:2b:6b:3c:44:
         eb:07:59:5d:42:c5:b5:13:c2:54:30:d1:1e:d8:36:f5:a9:16:
         80:53:a4:f6:b3:ad:d3:e7:12:e7:e1:79:ec:d7:68:91:3a:41:
         64:02:ef:08:b0:b6:89:1e:18:4f:c4:3d:af:f6:a6:2d:de:7b:
         dd:49:f8:05:ff:17:63:08:89:14:08:f3:8f:cd:ab:ee:f4:5e:
         86:9b:e3:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc/rHt8k+qo3+n5dFRB98PnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjUwNjA1MTAzOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWY4ZTU2YjQ2ZThmOWJlMmM5OGNjOTNlMGM2YzQwYWZmOTc4Mzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRTGY+jVQVtZWiP+qMKY1E1WOHn1
Vu6q+I6MAzeUj3AwRWDwcSrdNZfQ9Istz1BkgqHqamizfsUmKySqOJK1WEZkNrp6
SFyCtY3k1z7aGeSMqOwtweJu36Q9L1mvIwAu1rauMkuxLk9v1V/p51PmKJMOVJin
dNFSOeSPL9+DgBMbcx20nUlYot46F0Tzrv7Tv+ftwm2ltyan19HvGTyfGJbKS/Ll
WHCZp8qq9yalKBqRtthK4g6wCJx5/JFfKpx2OlGyJC4dCsiVIm/PfQq5tAKk6XvO
Bj3UBIBoYO6ywO0A+8SphXTlbOFoqOG2WxMLu+00jyGRwUbZGUsp79rXswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJr45WtG6Pm+LJjMk+DGxAr/l4N4MB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvbXZqbGEwYm8tYjRzbU15VDRNYkVDdi1YZzNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnhIMA0G
CSqGSIb3DQEBCwUAA4IBAQCs1k8GQLlfD6Ef6Tpy1LiD0K75KxYe6WLg9UPWGKxC
NRIarEoCZeRQAChFhZ8vx0hQsxYSM3MfVVbY+FNz91+qBMnNSJ93YI/4WuuYInoC
urpW8K6MBDIp31sghRS0XBDFlpNxa8iUPlhpbG9MJfzWv6jUczRehMbFqV/B8nhr
Gdi6tjdX8IP0me/+Q75FWFwimw20Y4/AVzrJ5V8B6f2z/owELVh34kzTftfq/SyM
DStrPETrB1ldQsW1E8JUMNEe2Db1qRaAU6T2s63T5xLn4Xns12iROkFkAu8IsLaJ
HhhPxD2v9qYt3nvdSfgF/xdjCIkUCPOPzavu9F6Gm+ND
-----END CERTIFICATE-----
Generated at Tue Jun 10 07:32:42 2025 by rpki-client