Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/0omwK82k6-ukvFCQHw7xsevKf2M.roa
File:                     0omwK82k6-ukvFCQHw7xsevKf2M.roa (raw, json)
Hash identifier:          dQ6pnx+9udoxo/jVwLNjm/bU3fo59LWJNw3wfHN7LMc=
Subject key identifier:   D2:89:B0:2B:CD:A4:EB:EB:A4:BC:50:90:1F:0E:F1:B1:EB:CA:7F:63
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       01A0D099ED31C75CC3098F7222190E3E802E
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/0omwK82k6-ukvFCQHw7xsevKf2M.roa
Signing time:             Wed 23 Sep 2026 23:29:03 +0000
ROA not before:           Wed 23 Sep 2026 23:29:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        2a10:fa80:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:99:ed:31:c7:5c:c3:09:8f:72:22:19:0e:3e:80:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Sep 23 23:29:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d289b02bcda4ebeba4bc50901f0ef1b1ebca7f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:98:7d:fd:e8:ef:db:fd:c4:7a:b8:18:33:
                    87:52:ae:97:f8:0b:b0:53:70:60:4c:b7:66:b3:54:
                    2c:f9:f1:b6:f8:e5:61:f6:7b:a9:78:37:33:d9:6a:
                    82:ef:c4:7c:5a:21:5f:3b:a6:e4:58:18:a3:d4:71:
                    95:df:d6:de:2d:fa:0c:ee:38:2f:e5:8d:da:16:97:
                    a9:d5:33:73:0f:d5:64:f8:64:4e:a0:a7:ab:bd:eb:
                    84:b8:75:8e:eb:b0:01:2e:61:e7:8b:60:d8:9d:45:
                    c3:76:4b:b5:c8:c6:6e:b6:a4:29:c0:b7:7a:b6:18:
                    4c:01:c8:1e:4a:82:e6:38:e2:98:87:e9:59:a2:cf:
                    3e:2c:7e:00:ad:31:0f:b8:bb:ee:79:3a:f4:ee:97:
                    b4:ee:ca:7a:e4:24:e4:e8:34:99:70:3b:00:4a:23:
                    a6:d2:10:6f:97:0e:c9:56:55:4d:cb:ef:aa:e5:40:
                    33:ec:79:73:29:80:ab:84:b9:ef:ef:e4:c1:1b:a5:
                    58:46:f3:b0:ad:41:20:54:eb:47:0e:04:9a:9a:0d:
                    2c:03:af:50:dc:df:21:f1:63:87:4a:03:86:43:61:
                    ba:0b:1b:2c:d6:a9:e1:78:04:d2:7f:5d:db:69:e6:
                    7c:ce:a9:28:67:66:7c:67:70:dd:4b:61:64:5c:62:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:89:B0:2B:CD:A4:EB:EB:A4:BC:50:90:1F:0E:F1:B1:EB:CA:7F:63
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/0omwK82k6-ukvFCQHw7xsevKf2M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:fa80:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:d7:a8:ae:52:ba:3b:02:f6:54:c4:49:ac:64:27:62:f1:0b:
         80:2e:b9:c3:04:6b:f7:3b:60:86:45:ab:31:27:7f:8c:0c:b6:
         2c:af:a3:bc:ac:b6:37:8e:cb:14:ac:f3:66:bc:1a:50:6e:2d:
         7c:64:8c:aa:fd:80:d0:45:0f:cb:e8:e2:88:92:63:0d:40:52:
         a0:b7:04:be:ef:eb:93:eb:af:d1:8a:ab:9c:c0:da:d9:43:3e:
         cb:b0:ee:77:30:78:dd:b4:55:2a:9a:ce:aa:14:96:de:4a:99:
         0e:6a:be:ab:94:5a:85:a6:82:42:51:fd:0f:76:36:71:00:5a:
         1b:63:83:7d:bb:02:2a:7b:6f:3e:0a:39:6d:d9:62:d5:6a:f1:
         90:44:76:ca:f9:34:f7:47:8a:f4:95:2b:58:80:47:40:00:cb:
         86:79:28:2f:db:18:15:3a:e9:80:98:f7:d4:a2:dd:d1:86:bd:
         5c:78:b4:2f:18:5f:9a:b8:98:1f:28:2e:73:67:36:90:5d:08:
         15:ba:da:e6:45:40:4a:eb:0a:9b:83:82:29:44:a5:27:d8:9e:
         eb:6c:5d:61:0b:07:16:77:59:f4:51:d8:8c:b7:9c:51:a6:26:
         27:0b:b7:c3:01:38:b1:55:0d:71:8b:36:9e:56:d2:72:25:7d:
         54:18:66:4c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDQme0xx1zDCY9yIhkOPoAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjYwOTIzMjMyOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjg5YjAyYmNkYTRlYmViYTRiYzUwOTAxZjBlZjFiMWViY2E3ZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLqYff3o79v9xHq4GDOHUq6X+Auw
U3BgTLdms1Qs+fG2+OVh9nupeDcz2WqC78R8WiFfO6bkWBij1HGV39beLfoM7jgv
5Y3aFpep1TNzD9Vk+GROoKerveuEuHWO67ABLmHni2DYnUXDdku1yMZutqQpwLd6
thhMAcgeSoLmOOKYh+lZos8+LH4ArTEPuLvueTr07pe07sp65CTk6DSZcDsASiOm
0hBvlw7JVlVNy++q5UAz7HlzKYCrhLnv7+TBG6VYRvOwrUEgVOtHDgSamg0sA69Q
3N8h8WOHSgOGQ2G6Cxss1qnheATSf13baeZ8zqkoZ2Z8Z3DdS2FkXGJj7QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNKJsCvNpOvrpLxQkB8O8bHryn9jMB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvMG9td0s4Mms2LXVrdkZDUUh3N3hzZXZLZjJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhD6gAAO
MA0GCSqGSIb3DQEBCwUAA4IBAQBf16iuUro7AvZUxEmsZCdi8QuALrnDBGv3O2CG
RasxJ3+MDLYsr6O8rLY3jssUrPNmvBpQbi18ZIyq/YDQRQ/L6OKIkmMNQFKgtwS+
7+uT66/RiqucwNrZQz7LsO53MHjdtFUqms6qFJbeSpkOar6rlFqFpoJCUf0PdjZx
AFobY4N9uwIqe28+Cjlt2WLVavGQRHbK+TT3R4r0lStYgEdAAMuGeSgv2xgVOumA
mPfUot3Rhr1ceLQvGF+auJgfKC5zZzaQXQgVutrmRUBK6wqbg4IpRKUn2J7rbF1h
CwcWd1n0UdiMt5xRpiYnC7fDATixVQ1xizaeVtJyJX1UGGZM
-----END CERTIFICATE-----