Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/GowNRMREZKR5ilcFNbirUlolLCA.roa
File:                     GowNRMREZKR5ilcFNbirUlolLCA.roa (raw, json)
Hash identifier:          kqqGe8oFBgbqeSQiGXRf2DzunqvURIFQWNtSiG/14AU=
Subject key identifier:   1A:8C:0D:44:C4:44:64:A4:79:8A:57:05:35:B8:AB:52:5A:25:2C:20
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       01A085AFD2CEA3078C7664DBB72A801246D1
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/GowNRMREZKR5ilcFNbirUlolLCA.roa
Signing time:             Wed 09 Sep 2026 10:21:27 +0000
ROA not before:           Wed 09 Sep 2026 10:21:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58061
IP address blocks:        88.214.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 08:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:85:af:d2:ce:a3:07:8c:76:64:db:b7:2a:80:12:46:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Sep  9 10:21:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a8c0d44c44464a4798a570535b8ab525a252c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:d5:1b:2a:9c:ce:e3:c0:16:87:e4:9b:cb:
                    9f:df:eb:25:be:bd:50:5f:33:81:d3:2e:ac:35:9c:
                    29:cf:d3:00:b8:a8:86:e1:e5:ca:1b:bd:8e:51:36:
                    0c:ee:3e:54:8c:cd:1a:e5:a6:06:2a:aa:47:15:93:
                    b5:e9:76:06:32:bc:2d:b0:2d:dd:7b:a2:61:32:e4:
                    d1:b3:ce:13:d9:7f:60:49:bd:28:d4:4e:13:59:fe:
                    36:05:be:5f:57:fa:a2:50:cf:7b:b4:2b:41:67:36:
                    ef:da:cf:95:f6:9a:70:db:ec:00:92:df:2e:1d:1e:
                    09:ab:65:7c:62:7c:38:12:66:80:97:68:06:b3:b5:
                    cf:f9:e0:70:bd:3f:0f:24:2d:cb:6b:a2:2d:58:13:
                    97:5d:f4:46:1a:c8:3b:ab:e7:61:b4:47:b1:3e:12:
                    5e:46:17:bc:0a:1b:e5:6f:98:60:9c:b7:d2:80:b0:
                    0e:fd:b2:d8:1c:f8:e4:02:5e:24:00:b1:f1:c1:a0:
                    bf:17:15:2c:b6:71:ab:91:4b:3e:48:f5:f9:6e:db:
                    0d:96:c1:2f:4e:3a:55:cf:90:27:e3:e5:10:4e:46:
                    8d:47:ef:2a:61:42:bf:dc:8b:89:b5:9f:9c:f0:67:
                    73:0e:a2:8c:dd:3d:f5:3f:98:33:58:9b:4b:3f:7d:
                    4f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8C:0D:44:C4:44:64:A4:79:8A:57:05:35:B8:AB:52:5A:25:2C:20
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/GowNRMREZKR5ilcFNbirUlolLCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.214.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:df:18:51:c3:77:85:aa:79:98:92:8a:f0:b4:3d:c1:df:e6:
         d0:c0:43:ab:a6:dc:23:80:e5:5b:63:0b:62:84:e0:7d:34:03:
         4c:6d:a5:24:b2:1c:c6:32:ba:35:0f:e5:f0:bc:6f:6e:99:51:
         cb:94:f1:e0:a1:14:49:01:0d:a9:dd:ac:5c:1c:91:95:eb:d2:
         c9:67:c7:0e:3d:2a:f1:9c:1b:65:78:0f:6b:b6:18:79:f8:da:
         23:ad:d0:03:43:d0:04:45:aa:87:9d:ca:b2:4c:b9:ae:5f:3a:
         39:b7:76:90:2b:db:ff:9e:6c:87:5e:9d:b4:b8:0e:96:45:eb:
         22:1a:0f:6d:7a:67:f0:75:b4:29:54:65:a9:9d:29:61:c6:d9:
         30:0f:ad:f4:5e:f5:9c:c9:e2:bd:d3:57:2c:ce:87:b2:11:72:
         f1:50:29:24:e2:f0:e0:4b:a6:16:14:d6:25:71:a5:bc:9f:95:
         36:c3:41:27:84:cf:8b:c4:da:7d:2b:06:27:79:dd:df:31:ee:
         21:e2:a8:a4:85:8d:94:1d:43:61:45:46:e0:3f:d6:19:8d:e5:
         39:0a:b9:f5:b2:31:a6:49:cf:9c:19:f9:b7:3b:bf:b7:fc:6a:
         33:18:cc:32:11:91:57:a6:a8:f6:33:a4:a9:54:6c:a9:99:b6:
         96:19:2c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:47 2026 by rpki-client