Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/PSGark7gwGiSr_vUHQsh4aYIRzQ.roa
File:                     PSGark7gwGiSr_vUHQsh4aYIRzQ.roa (raw, json)
Hash identifier:          TQr3YJK+Hq7L/eR/P3eisChXvEczT3vU2l+vtLcIX60=
Subject key identifier:   3D:21:9A:AE:4E:E0:C0:68:92:AF:FB:D4:1D:0B:21:E1:A6:08:47:34
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       019FDD61A4CAE10DC19F1ABEA188087EF93B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/PSGark7gwGiSr_vUHQsh4aYIRzQ.roa
Signing time:             Fri 07 Aug 2026 17:59:51 +0000
ROA not before:           Fri 07 Aug 2026 17:59:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     23470
IP address blocks:        93.113.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 05:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:dd:61:a4:ca:e1:0d:c1:9f:1a:be:a1:88:08:7e:f9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Aug  7 17:59:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d219aae4ee0c06892affbd41d0b21e1a6084734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:18:1b:ec:0e:1e:7f:13:2e:f7:ea:9b:36:57:
                    8f:75:66:41:c0:5a:84:df:f0:01:be:f6:0b:61:39:
                    80:a0:dc:06:6d:ca:15:0f:1d:45:8d:d8:58:33:8b:
                    40:46:9b:2c:e4:70:68:79:42:c8:97:2c:a7:32:1d:
                    82:23:bc:ce:60:ae:9f:d2:e6:d8:8b:72:c7:57:ef:
                    00:7a:fb:e2:b1:73:f6:54:0f:14:06:2a:62:a5:b2:
                    3f:9a:f8:f6:15:d6:41:da:7c:7b:c0:3c:bb:ae:16:
                    33:29:f6:15:91:e1:3b:02:a2:14:ca:b8:00:ab:b2:
                    96:b0:c2:80:b8:6d:05:24:4a:a1:32:b2:69:59:fd:
                    a7:12:1d:bd:39:a4:f9:c2:a6:58:95:7c:92:5e:51:
                    e7:67:4e:41:10:d6:d9:1f:9a:12:ad:cc:34:b1:9f:
                    cc:c4:6e:c2:00:94:2a:e5:3e:74:34:21:b3:0a:a8:
                    dd:aa:29:57:73:f0:5d:eb:81:70:65:45:46:56:3f:
                    7d:fd:99:ec:0b:fe:1b:3c:74:16:e8:21:a0:c2:2b:
                    62:c4:dc:4b:00:e4:26:d0:89:3d:1d:a7:1d:aa:3f:
                    8a:52:4c:2d:1d:9e:9d:85:47:ba:c9:1c:fd:cd:84:
                    b0:80:aa:aa:75:5f:53:32:0a:4f:e6:c4:47:19:2c:
                    f2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:21:9A:AE:4E:E0:C0:68:92:AF:FB:D4:1D:0B:21:E1:A6:08:47:34
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/PSGark7gwGiSr_vUHQsh4aYIRzQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:e2:19:ee:72:c0:58:70:88:a0:f5:52:02:be:f6:8b:e9:
         1d:48:25:e8:aa:bd:46:a6:32:85:47:dd:ca:f0:2d:48:e2:72:
         dd:f4:fb:df:8e:7e:0b:9b:56:9b:19:85:0f:f4:ea:e9:a3:8e:
         7a:4f:67:37:e4:17:de:d5:9b:89:87:72:0f:cf:c8:51:e9:2a:
         f5:5f:c7:5b:c3:0e:4c:72:3a:5d:33:8d:b7:78:18:e3:3e:a2:
         5a:e1:20:74:6f:ed:e7:02:f9:54:5b:e6:49:ca:3f:7a:5a:b6:
         c7:3c:68:64:3c:aa:bd:2c:1d:5a:c4:ca:45:bc:aa:5e:75:2c:
         e1:0a:11:c3:5a:6b:d4:42:5a:58:44:92:bd:bb:5a:43:3b:59:
         61:78:0f:d7:29:ee:14:3a:34:da:1d:31:f8:3b:eb:10:20:24:
         4e:be:2e:f7:6f:1c:ec:cf:c9:e8:10:97:66:35:5b:a9:aa:45:
         ea:5a:c9:a1:85:df:48:2b:13:3c:34:93:7f:38:ae:0a:54:1d:
         6b:1d:71:6c:2f:f8:97:2d:f9:0a:ce:61:ac:c2:2c:b3:f1:e3:
         6e:a7:2b:73:03:d5:95:65:d7:00:b3:cf:40:5e:d5:68:69:07:
         00:58:f4:05:a3:fc:ba:8d:80:f9:f9:c0:98:16:49:4d:e7:46:
         6d:bb:fd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 14:51:29 2026 by rpki-client