Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/C6-YTlrCM1gie4Fio5ZDAzjrAsw.roa
File:                     C6-YTlrCM1gie4Fio5ZDAzjrAsw.roa (raw, json)
Hash identifier:          wPQWprVQswwSy5xTXeYKqV2fnuyS8659zgMoKY2VdDA=
Subject key identifier:   0B:AF:98:4E:5A:C2:33:58:22:7B:81:62:A3:96:43:03:38:EB:02:CC
Certificate issuer:       /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial:       0199144360AE3587B24D0BC2A85C6FFC51ED
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/C6-YTlrCM1gie4Fio5ZDAzjrAsw.roa
Signing time:             Thu 04 Sep 2025 10:26:23 +0000
ROA not before:           Thu 04 Sep 2025 10:26:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214504
IP address blocks:        213.182.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:14:43:60:ae:35:87:b2:4d:0b:c2:a8:5c:6f:fc:51:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
        Validity
            Not Before: Sep  4 10:26:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0baf984e5ac23358227b8162a396430338eb02cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:6a:44:6a:fa:aa:4d:e7:3c:fc:98:21:1a:
                    5f:b1:ad:e6:fa:2f:37:39:e9:fc:d2:71:e2:fd:c5:
                    9e:e5:b4:d7:02:dd:ef:05:fe:c1:0e:31:36:07:00:
                    11:0f:06:82:ef:fc:ed:a3:17:01:75:0e:6b:da:f3:
                    33:14:86:bd:d9:df:ae:be:fe:75:90:f6:ab:a0:1b:
                    9d:c7:17:f3:82:b5:a8:c3:21:d2:c7:02:2f:f0:f2:
                    1e:aa:95:62:5e:dc:38:ec:4b:76:4c:d1:c2:5c:b5:
                    8c:63:0a:8f:0e:50:b0:2b:5e:a4:ee:9c:3d:c3:aa:
                    54:67:c3:f4:3c:01:c7:12:2c:3a:52:61:b8:ef:42:
                    13:d1:fd:29:f1:b4:de:73:70:96:f5:80:c2:6a:74:
                    01:d6:2a:a6:b4:af:55:46:ea:e7:ae:ba:6d:a9:0f:
                    b8:7c:59:df:9f:e0:fd:4d:04:f6:4c:37:1a:df:80:
                    99:d9:ed:68:19:ba:34:cb:1d:46:13:88:58:03:60:
                    b2:70:3e:55:a2:5d:26:04:3f:8b:73:4b:87:b8:9b:
                    78:5b:58:d5:34:7a:81:18:f4:cc:42:f9:56:0a:ac:
                    19:bc:ec:5e:54:77:c3:a2:c7:6b:97:81:11:c7:3a:
                    05:a5:f4:37:56:61:3a:d8:2f:18:d6:d0:24:70:00:
                    44:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AF:98:4E:5A:C2:33:58:22:7B:81:62:A3:96:43:03:38:EB:02:CC
            X509v3 Authority Key Identifier:
                keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/C6-YTlrCM1gie4Fio5ZDAzjrAsw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.182.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:03:45:86:06:51:75:4d:64:08:40:48:06:89:0b:66:22:5e:
         dd:cd:b7:a6:68:d0:cf:3f:26:5a:d7:e6:fb:59:a5:db:b9:a2:
         b0:d3:57:fd:83:38:d8:a6:19:a0:d8:6d:f2:ee:5c:c4:e7:c8:
         9d:cb:4a:db:57:06:eb:89:41:0c:c6:17:1b:a1:80:48:05:86:
         3c:ab:d7:ee:9b:24:64:1a:12:65:51:f8:5b:52:d4:78:db:53:
         5d:b5:80:7f:06:b4:32:21:db:1a:05:ba:8d:c7:73:88:49:96:
         34:8d:f0:46:9b:da:16:aa:99:96:c4:d7:83:1c:77:d1:f6:f6:
         6c:58:0b:ec:83:b0:f8:5c:1a:b7:53:4d:e6:06:7c:1c:0f:59:
         6d:06:ba:e5:27:15:11:d3:21:9a:ff:6b:ba:f4:7f:7a:66:97:
         7c:88:49:ae:dd:cc:8e:2c:c8:93:8c:92:a0:9b:52:b2:d3:3a:
         f6:fb:39:6f:dc:ff:52:1d:bf:71:7b:f9:e2:5f:d4:36:0c:a0:
         e2:7c:da:ab:23:8e:3d:8d:43:30:36:d3:c4:2b:88:56:77:7c:
         18:e3:dd:34:56:b9:c6:9b:34:16:ba:b5:b3:70:73:35:f6:ff:
         27:c9:1d:6d:7b:50:7f:ad:bf:12:6d:f8:4f:1f:c3:dc:58:e4:
         1d:33:08:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:47:13 2025 by rpki-client