Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/ABh9BVEUwIw_okat0rY-aX6ZyPU.roa
File:                     ABh9BVEUwIw_okat0rY-aX6ZyPU.roa (raw, json)
Hash identifier:          eWGDuCUhWH7AwA1JYOY9kZ0kb9CrgiFOHE0IRNR2Fdc=
Subject key identifier:   00:18:7D:05:51:14:C0:8C:3F:A2:46:AD:D2:B6:3E:69:7E:99:C8:F5
Certificate issuer:       /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial:       019ECA96FEE882FBF2EC54BF7BB5C6E13B58
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/ABh9BVEUwIw_okat0rY-aX6ZyPU.roa
Signing time:             Mon 15 Jun 2026 09:22:33 +0000
ROA not before:           Mon 15 Jun 2026 09:22:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154321
IP address blocks:        191.40.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ca:96:fe:e8:82:fb:f2:ec:54:bf:7b:b5:c6:e1:3b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
        Validity
            Not Before: Jun 15 09:22:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=00187d055114c08c3fa246add2b63e697e99c8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:33:7f:f9:2a:3f:5d:59:7e:1d:6e:3d:08:
                    75:22:ab:a7:53:0f:8e:5e:3d:78:05:14:de:c9:b0:
                    06:c8:a0:83:71:32:2c:bb:d1:19:37:3a:06:ce:fd:
                    24:14:fa:44:81:a3:2d:3d:90:26:1f:4c:5e:72:25:
                    dc:1f:85:ca:cf:15:80:12:a4:74:58:2b:3f:f3:8e:
                    25:ab:b3:38:d2:4c:d5:b5:62:4f:69:35:00:c6:b8:
                    f9:1a:20:e0:54:d8:7e:9c:f3:32:76:64:4a:ee:e6:
                    07:0a:3e:35:73:10:84:9e:ad:4e:17:1f:7c:01:94:
                    83:ef:1e:9a:2b:07:c1:ad:5b:d7:3e:fd:47:e5:17:
                    ff:b4:9a:9e:7a:b9:f0:07:84:c5:ea:cf:2f:bf:9d:
                    fc:d4:57:89:f5:14:c2:73:bf:f4:67:07:24:15:40:
                    f8:0b:f3:51:22:81:b3:c3:b4:d9:60:e2:1e:2a:85:
                    e3:7d:78:49:6a:7b:b9:fc:8b:c7:ab:e3:e6:0a:c3:
                    9f:84:b6:e3:f0:3e:ca:0d:4a:74:d8:39:1a:ec:df:
                    96:38:23:a9:18:60:85:0a:9f:7f:4e:43:84:9f:e3:
                    8f:ad:06:a9:e2:8b:dd:13:c0:e9:fe:d9:1d:ec:e1:
                    88:b0:33:99:5a:6c:26:3f:64:cc:84:fa:13:56:62:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:18:7D:05:51:14:C0:8C:3F:A2:46:AD:D2:B6:3E:69:7E:99:C8:F5
            X509v3 Authority Key Identifier:
                keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/ABh9BVEUwIw_okat0rY-aX6ZyPU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.40.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:45:8a:1c:53:94:0a:48:dc:c7:f8:3f:6f:52:9e:0d:e5:1c:
         d4:74:48:ef:82:bd:99:3e:7f:72:3d:aa:4d:5a:af:8e:47:4b:
         ec:b9:e4:8f:e0:19:e1:df:39:58:92:25:9d:ed:d8:ba:7f:0b:
         8d:1e:ae:9f:51:ab:53:52:b2:6c:5a:ea:da:af:f9:95:7c:3f:
         f3:42:eb:72:c4:d3:ed:5c:94:4d:71:e5:99:cb:c6:15:96:a4:
         b0:a0:c2:62:48:02:b2:f8:98:56:e0:de:bd:95:65:c3:f0:83:
         39:16:fd:51:f0:3c:54:19:14:c2:c0:76:c7:8f:64:41:ba:dc:
         f9:25:66:85:da:8a:70:72:4e:37:b1:d5:39:ae:56:2a:e3:88:
         63:b4:b3:b6:c9:20:2e:13:d4:24:25:d0:03:d4:ef:8b:7b:6f:
         7c:8a:11:dd:ff:c9:ef:10:19:f8:9a:58:bf:d7:b0:eb:ab:62:
         43:93:75:18:de:c0:23:0d:ef:73:33:6c:f9:51:41:c1:29:e0:
         d7:b1:e1:26:91:39:b7:e3:f0:a3:d3:81:52:47:53:56:22:d9:
         f5:da:90:af:0d:61:08:12:aa:05:84:60:23:c4:9b:8a:63:1b:
         16:8a:36:63:e7:50:0a:bc:f4:69:0e:4e:90:ad:9d:29:84:68:
         ee:05:62:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7Klv7ogvvy7FS/e7XG4TtYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm
ZDVlNzgwHhcNMjYwNjE1MDkyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDE4N2QwNTUxMTRjMDhjM2ZhMjQ2YWRkMmI2M2U2OTdlOTljOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAAzf/kqP11Zfh1uPQh1IqunUw+O
Xj14BRTeybAGyKCDcTIsu9EZNzoGzv0kFPpEgaMtPZAmH0xeciXcH4XKzxWAEqR0
WCs/844lq7M40kzVtWJPaTUAxrj5GiDgVNh+nPMydmRK7uYHCj41cxCEnq1OFx98
AZSD7x6aKwfBrVvXPv1H5Rf/tJqeernwB4TF6s8vv5381FeJ9RTCc7/0ZwckFUD4
C/NRIoGzw7TZYOIeKoXjfXhJanu5/IvHq+PmCsOfhLbj8D7KDUp02Dka7N+WOCOp
GGCFCp9/TkOEn+OPrQap4ovdE8Dp/tkd7OGIsDOZWmwmP2TMhPoTVmJ8twIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAAYfQVRFMCMP6JGrdK2Pml+mcj1MB8GA1UdIwQY
MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt
ZjEyMzdmNGM1Y2Y2LzEvQUJoOUJWRVV3SXdfb2thdDByWS1hWDZaeVBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2
LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvyggMA0G
CSqGSIb3DQEBCwUAA4IBAQAARYocU5QKSNzH+D9vUp4N5RzUdEjvgr2ZPn9yPapN
Wq+OR0vsueSP4Bnh3zlYkiWd7di6fwuNHq6fUatTUrJsWurar/mVfD/zQutyxNPt
XJRNceWZy8YVlqSwoMJiSAKy+JhW4N69lWXD8IM5Fv1R8DxUGRTCwHbHj2RButz5
JWaF2opwck43sdU5rlYq44hjtLO2ySAuE9QkJdAD1O+Le298ihHd/8nvEBn4mli/
17Drq2JDk3UY3sAjDe9zM2z5UUHBKeDXseEmkTm34/Cj04FSR1NWItn12pCvDWEI
EqoFhGAjxJuKYxsWijZj51AKvPRpDk6QrZ0phGjuBWJq
-----END CERTIFICATE-----