Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/baUqu5BOZn-17bxFJ1bj7-pxE84.roa
File:                     baUqu5BOZn-17bxFJ1bj7-pxE84.roa (raw, json)
Hash identifier:          TKFpAjUOc6uE2BWScm/z+VtNNwsjVVUMHazjGwbR4Bk=
Subject key identifier:   6D:A5:2A:BB:90:4E:66:7F:B5:ED:BC:45:27:56:E3:EF:EA:71:13:CE
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       01A0BEBE0D7AAEA86E91AE8478A84689144D
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/baUqu5BOZn-17bxFJ1bj7-pxE84.roa
Signing time:             Sun 20 Sep 2026 12:15:21 +0000
ROA not before:           Sun 20 Sep 2026 12:15:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     218751
IP address blocks:        2a10:fa81:1a05::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:be:0d:7a:ae:a8:6e:91:ae:84:78:a8:46:89:14:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Sep 20 12:15:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6da52abb904e667fb5edbc452756e3efea7113ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:ec:e3:02:c0:7d:8b:f5:56:5b:a9:36:24:
                    67:77:ee:65:d0:cb:ac:9e:4e:4e:10:68:9c:2e:33:
                    aa:35:46:03:4e:54:24:18:7b:fc:86:4b:69:f0:03:
                    47:ba:5d:3f:9e:cc:dc:9d:27:16:1c:fb:c2:97:9c:
                    51:28:09:82:52:c7:ba:cf:ab:c1:03:ed:e8:90:23:
                    f2:19:bc:23:3c:9b:73:6c:c9:c0:88:77:fb:0d:48:
                    8c:ec:f4:ca:25:e3:2b:cc:78:bd:ff:2d:8a:1e:7b:
                    6c:10:bd:42:09:a7:9f:a7:16:66:3e:79:a9:b8:4f:
                    04:b7:cf:91:86:c5:d7:6d:2d:cc:14:28:ac:76:0c:
                    76:0d:7f:30:c4:6c:f0:63:67:3b:2b:da:9a:58:10:
                    de:83:83:8b:d2:7e:bb:74:5c:36:50:b2:4c:d8:ab:
                    26:17:a5:d9:88:67:69:66:04:de:c0:79:cb:eb:0b:
                    0c:11:e4:19:cd:82:41:f4:9a:92:38:ae:da:18:9b:
                    73:eb:01:3b:dc:e2:d3:d5:05:e4:d7:2c:c0:22:40:
                    f2:a8:f9:e3:e8:91:45:75:9e:c2:7f:7a:6e:31:cb:
                    96:33:bc:00:26:ac:c3:1e:a2:0f:ba:08:97:98:61:
                    f2:1f:f1:2e:b0:d5:23:5c:f6:8b:58:b3:5e:b2:1e:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A5:2A:BB:90:4E:66:7F:B5:ED:BC:45:27:56:E3:EF:EA:71:13:CE
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/baUqu5BOZn-17bxFJ1bj7-pxE84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:fa81:1a05::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:1a:4d:9e:35:59:8e:a0:ec:84:99:0b:26:f5:84:63:ce:54:
         8b:03:f5:a0:3c:b7:73:ac:65:e7:4d:9f:60:a4:ef:45:e9:0c:
         23:92:1c:bf:ed:93:ef:7d:5f:b8:d0:82:06:31:c0:6e:57:a1:
         38:0c:f2:a3:b0:32:97:00:3b:e5:07:ba:0c:2b:9d:e1:34:a4:
         eb:83:1e:21:cf:4a:e2:16:29:d7:5e:e0:41:0d:98:3c:84:e0:
         30:b1:e3:5a:e5:66:7b:fd:c9:2a:28:49:59:72:1f:5c:8c:67:
         7b:57:f0:61:8a:43:9a:22:96:e5:1d:74:bf:af:30:18:96:fb:
         06:5b:08:c0:ce:0e:b0:52:90:dc:ae:e4:2f:84:4b:b7:82:ba:
         3c:4a:38:5f:4c:37:58:12:94:06:27:c9:e7:33:cc:1c:d0:aa:
         9e:7c:28:f7:02:36:89:df:41:aa:4c:a2:e3:33:59:20:aa:9d:
         6e:bb:58:02:87:61:67:4e:8c:56:44:0e:cf:a7:f6:39:3e:e7:
         65:6c:17:cd:ea:3f:4a:bf:48:4e:56:71:b0:38:b2:d8:b2:08:
         18:13:d0:5d:48:da:7c:37:61:b7:ad:37:01:87:67:cf:d0:7c:
         9b:e8:7a:a4:18:4f:45:8b:6f:0f:60:31:35:a2:73:c7:23:c0:
         60:1f:47:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----