Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/98r0bNxXEDMvZ7j6PltFu8qJeJg.roa
File:                     98r0bNxXEDMvZ7j6PltFu8qJeJg.roa (raw, json)
Hash identifier:          EU18mwS21+icltyLGLTMkrjH38LD7S0gNFf/o4/z9BM=
Subject key identifier:   F7:CA:F4:6C:DC:57:10:33:2F:67:B8:FA:3E:5B:45:BB:CA:89:78:98
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       019593D95A5A3AF0F59EE65566E3FE4CDD47
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/98r0bNxXEDMvZ7j6PltFu8qJeJg.roa
Signing time:             Fri 14 Mar 2025 08:50:49 +0000
ROA not before:           Fri 14 Mar 2025 08:50:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     272809
IP address blocks:        82.86.64.0/22 maxlen: 22
                          82.86.64.0/24 maxlen: 24
                          82.86.65.0/24 maxlen: 24
                          82.86.66.0/24 maxlen: 24
                          82.86.67.0/24 maxlen: 24
                          82.86.68.0/22 maxlen: 22
                          82.86.68.0/24 maxlen: 24
                          82.86.69.0/24 maxlen: 24
                          82.86.70.0/24 maxlen: 24
                          82.86.71.0/24 maxlen: 24
                          82.86.72.0/22 maxlen: 22
                          82.86.72.0/24 maxlen: 24
                          82.86.73.0/24 maxlen: 24
                          82.86.74.0/24 maxlen: 24
                          82.86.75.0/24 maxlen: 24
                          82.86.76.0/22 maxlen: 22
                          82.86.76.0/24 maxlen: 24
                          82.86.77.0/24 maxlen: 24
                          82.86.78.0/24 maxlen: 24
                          82.86.79.0/24 maxlen: 24
                          82.86.80.0/22 maxlen: 22
                          82.86.80.0/24 maxlen: 24
                          82.86.81.0/24 maxlen: 24
                          82.86.82.0/24 maxlen: 24
                          82.86.83.0/24 maxlen: 24
                          82.86.84.0/22 maxlen: 22
                          82.86.84.0/24 maxlen: 24
                          82.86.85.0/24 maxlen: 24
                          82.86.86.0/24 maxlen: 24
                          82.86.87.0/24 maxlen: 24
                          82.86.88.0/22 maxlen: 22
                          82.86.88.0/24 maxlen: 24
                          82.86.89.0/24 maxlen: 24
                          82.86.90.0/24 maxlen: 24
                          82.86.91.0/24 maxlen: 24
                          82.86.92.0/22 maxlen: 22
                          82.86.92.0/24 maxlen: 24
                          82.86.93.0/24 maxlen: 24
                          82.86.94.0/24 maxlen: 24
                          82.86.95.0/24 maxlen: 24
                          82.86.96.0/22 maxlen: 22
                          82.86.96.0/24 maxlen: 24
                          82.86.97.0/24 maxlen: 24
                          82.86.98.0/24 maxlen: 24
                          82.86.99.0/24 maxlen: 24
                          82.86.100.0/22 maxlen: 22
                          82.86.100.0/24 maxlen: 24
                          82.86.101.0/24 maxlen: 24
                          82.86.102.0/24 maxlen: 24
                          82.86.103.0/24 maxlen: 24
                          82.86.128.0/22 maxlen: 22
                          82.86.128.0/24 maxlen: 24
                          82.86.129.0/24 maxlen: 24
                          82.86.130.0/24 maxlen: 24
                          82.86.131.0/24 maxlen: 24
                          82.86.132.0/22 maxlen: 22
                          82.86.132.0/24 maxlen: 24
                          82.86.133.0/24 maxlen: 24
                          82.86.134.0/24 maxlen: 24
                          82.86.135.0/24 maxlen: 24
                          82.86.136.0/22 maxlen: 22
                          82.86.136.0/24 maxlen: 24
                          82.86.137.0/24 maxlen: 24
                          82.86.138.0/24 maxlen: 24
                          82.86.139.0/24 maxlen: 24
                          82.86.140.0/22 maxlen: 22
                          82.86.140.0/24 maxlen: 24
                          82.86.141.0/24 maxlen: 24
                          82.86.142.0/24 maxlen: 24
                          82.86.143.0/24 maxlen: 24
                          82.86.144.0/22 maxlen: 22
                          82.86.144.0/24 maxlen: 24
                          82.86.145.0/24 maxlen: 24
                          82.86.146.0/24 maxlen: 24
                          82.86.147.0/24 maxlen: 24
                          82.86.148.0/22 maxlen: 22
                          82.86.148.0/24 maxlen: 24
                          82.86.149.0/24 maxlen: 24
                          82.86.150.0/24 maxlen: 24
                          82.86.151.0/24 maxlen: 24
                          82.86.152.0/22 maxlen: 22
                          82.86.152.0/24 maxlen: 24
                          82.86.153.0/24 maxlen: 24
                          82.86.154.0/24 maxlen: 24
                          82.86.155.0/24 maxlen: 24
                          82.86.156.0/22 maxlen: 22
                          82.86.156.0/24 maxlen: 24
                          82.86.157.0/24 maxlen: 24
                          82.86.158.0/24 maxlen: 24
                          82.86.159.0/24 maxlen: 24
                          82.86.160.0/22 maxlen: 22
                          82.86.160.0/24 maxlen: 24
                          82.86.161.0/24 maxlen: 24
                          82.86.162.0/24 maxlen: 24
                          82.86.163.0/24 maxlen: 24
                          82.86.164.0/22 maxlen: 22
                          82.86.164.0/24 maxlen: 24
                          82.86.165.0/24 maxlen: 24
                          82.86.166.0/24 maxlen: 24
                          82.86.167.0/24 maxlen: 24
                          82.86.224.0/19 maxlen: 19
                          82.86.224.0/20 maxlen: 20
                          82.86.224.0/21 maxlen: 21
                          82.86.224.0/22 maxlen: 22
                          82.86.224.0/23 maxlen: 23
                          82.86.224.0/24 maxlen: 24
                          82.86.225.0/24 maxlen: 24
                          82.86.226.0/23 maxlen: 23
                          82.86.226.0/24 maxlen: 24
                          82.86.227.0/24 maxlen: 24
                          82.86.228.0/22 maxlen: 22
                          82.86.228.0/23 maxlen: 23
                          82.86.228.0/24 maxlen: 24
                          82.86.229.0/24 maxlen: 24
                          82.86.230.0/23 maxlen: 23
                          82.86.230.0/24 maxlen: 24
                          82.86.231.0/24 maxlen: 24
                          82.86.232.0/21 maxlen: 21
                          82.86.232.0/22 maxlen: 22
                          82.86.232.0/23 maxlen: 23
                          82.86.232.0/24 maxlen: 24
                          82.86.233.0/24 maxlen: 24
                          82.86.234.0/23 maxlen: 23
                          82.86.234.0/24 maxlen: 24
                          82.86.235.0/24 maxlen: 24
                          82.86.236.0/22 maxlen: 22
                          82.86.236.0/23 maxlen: 23
                          82.86.236.0/24 maxlen: 24
                          82.86.237.0/24 maxlen: 24
                          82.86.238.0/24 maxlen: 24
                          82.86.239.0/24 maxlen: 24
                          82.86.240.0/20 maxlen: 20
                          82.86.240.0/21 maxlen: 21
                          82.86.240.0/22 maxlen: 22
                          82.86.240.0/23 maxlen: 23
                          82.86.240.0/24 maxlen: 24
                          82.86.241.0/24 maxlen: 24
                          82.86.242.0/23 maxlen: 23
                          82.86.242.0/24 maxlen: 24
                          82.86.243.0/24 maxlen: 24
                          82.86.244.0/22 maxlen: 22
                          82.86.244.0/23 maxlen: 23
                          82.86.244.0/24 maxlen: 24
                          82.86.245.0/24 maxlen: 24
                          82.86.246.0/23 maxlen: 23
                          82.86.246.0/24 maxlen: 24
                          82.86.247.0/24 maxlen: 24
                          82.86.248.0/21 maxlen: 21
                          82.86.248.0/22 maxlen: 22
                          82.86.248.0/23 maxlen: 23
                          82.86.248.0/24 maxlen: 24
                          82.86.249.0/24 maxlen: 24
                          82.86.250.0/23 maxlen: 23
                          82.86.250.0/24 maxlen: 24
                          82.86.251.0/24 maxlen: 24
                          82.86.252.0/22 maxlen: 22
                          82.86.252.0/23 maxlen: 23
                          82.86.252.0/24 maxlen: 24
                          82.86.253.0/24 maxlen: 24
                          82.86.254.0/23 maxlen: 23
                          82.86.254.0/24 maxlen: 24
                          82.86.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:93:d9:5a:5a:3a:f0:f5:9e:e6:55:66:e3:fe:4c:dd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Mar 14 08:50:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f7caf46cdc5710332f67b8fa3e5b45bbca897898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:92:f8:1a:63:ca:08:ff:92:b9:ea:7f:27:
                    b9:81:c4:2f:61:49:de:73:39:30:41:fa:4e:71:5d:
                    09:e6:85:43:00:ef:10:a4:26:73:59:b7:bc:20:56:
                    41:b6:67:c4:4d:56:08:ab:1f:aa:50:15:90:61:d8:
                    ef:83:1f:bb:3b:8d:d3:50:d2:4d:1f:cd:1e:35:8b:
                    c4:3d:cd:13:97:98:cf:56:19:b5:e2:cd:1a:54:1c:
                    45:73:a0:79:f0:e9:6e:07:af:97:8a:71:a9:1e:42:
                    bb:2a:27:c6:3d:f4:fd:21:ec:8f:6b:71:3c:c1:c0:
                    97:51:fe:c0:88:e7:49:8e:19:82:31:87:cb:37:e5:
                    a9:c2:8e:09:e6:a8:57:31:3c:cd:cb:d5:8e:6a:63:
                    88:b6:ef:2b:ff:a0:36:da:ac:24:a0:76:07:f6:fa:
                    75:68:03:cf:31:47:12:e8:77:e1:b2:fd:3c:1e:29:
                    1c:43:d5:de:69:fa:27:ac:38:38:68:c9:ff:76:58:
                    4d:3e:d2:e6:ee:8d:6d:71:00:3e:75:3a:eb:70:20:
                    2b:34:5e:46:1c:e0:01:75:85:00:6f:b9:d9:92:b1:
                    9f:d1:88:4e:bf:b7:01:c3:e6:1d:ec:99:16:cb:03:
                    2f:56:60:e5:e2:c4:d6:e5:04:7c:ff:37:1b:d9:45:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CA:F4:6C:DC:57:10:33:2F:67:B8:FA:3E:5B:45:BB:CA:89:78:98
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/98r0bNxXEDMvZ7j6PltFu8qJeJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.86.64.0-82.86.103.255
                  82.86.128.0-82.86.167.255
                  82.86.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2b:17:ef:75:2d:8f:b7:4a:aa:93:e8:e8:26:14:cf:82:18:a2:
         88:72:ae:0a:db:0a:8c:12:a7:b5:d6:43:77:07:bc:82:11:eb:
         45:6b:53:85:d1:0e:36:16:d1:1b:3a:f1:ea:ed:68:a9:6f:3d:
         a3:e3:8b:5c:fe:76:b4:40:1e:06:12:cb:7e:b3:22:9c:92:5d:
         75:14:f3:cb:2f:0f:05:a7:cb:08:16:69:bd:68:17:37:5c:48:
         a3:5c:42:b3:ca:f6:4c:de:ba:cc:45:65:19:9c:35:9e:73:9e:
         a8:fa:7c:48:d2:e8:0a:38:26:90:99:0e:d6:71:e4:62:0b:99:
         7c:b6:73:d8:10:e2:d9:2d:c7:53:87:29:87:b6:b5:0d:34:b7:
         73:2f:b2:a4:77:3c:50:2f:14:cf:d3:c7:5e:38:1e:ff:b5:37:
         ee:fe:e6:7c:62:82:22:ca:d5:5b:2a:ed:af:5f:f1:55:6c:f8:
         8b:59:eb:23:3d:bc:4b:10:f8:cd:97:72:a2:c7:ac:42:a7:05:
         9c:18:33:60:23:e3:d5:e8:ff:36:a9:4d:ea:57:72:1d:4c:1b:
         b1:e0:d2:c1:e1:e0:b5:67:32:94:98:f2:b5:af:72:9e:41:fc:
         90:e4:a7:1f:ed:53:db:ba:cd:cd:db:61:7f:49:5c:19:c3:bf:
         20:81:cc:37
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZWT2VpaOvD1nuZVZuP+TN1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmYzNzkwOWNlMTdiYTUzYWQ5MGE4NjMyMzc3YTVkOTM4
NzQzZTUwHhcNMjUwMzE0MDg1MDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2NhZjQ2Y2RjNTcxMDMzMmY2N2I4ZmEzZTViNDViYmNhODk3ODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OeS+Bpjygj/krnqfye5gcQvYUne
czkwQfpOcV0J5oVDAO8QpCZzWbe8IFZBtmfETVYIqx+qUBWQYdjvgx+7O43TUNJN
H80eNYvEPc0Tl5jPVhm14s0aVBxFc6B58OluB6+XinGpHkK7KifGPfT9IeyPa3E8
wcCXUf7AiOdJjhmCMYfLN+Wpwo4J5qhXMTzNy9WOamOItu8r/6A22qwkoHYH9vp1
aAPPMUcS6Hfhsv08HikcQ9XeafonrDg4aMn/dlhNPtLm7o1tcQA+dTrrcCArNF5G
HOABdYUAb7nZkrGf0YhOv7cBw+Yd7JkWywMvVmDl4sTW5QR8/zcb2UXTSwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPfK9GzcVxAzL2e4+j5bRbvKiXiYMB8GA1UdIwQY
MBaAFNu/N5Cc4XulOtkKhjI3el2Th0PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2Ut
ODIyZWE0M2RjMThkLzEvOThyMGJOeFhFRE12WjdqNlBsdEZ1OHFKZUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2UtODIyZWE0M2RjMThk
LzEvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAZSVkAD
BANSVmAwDAMEB1JWgAMEA1JWoAMEBVJW4DANBgkqhkiG9w0BAQsFAAOCAQEAKxfv
dS2Pt0qqk+joJhTPghiiiHKuCtsKjBKntdZDdwe8ghHrRWtThdEONhbRGzrx6u1o
qW89o+OLXP52tEAeBhLLfrMinJJddRTzyy8PBafLCBZpvWgXN1xIo1xCs8r2TN66
zEVlGZw1nnOeqPp8SNLoCjgmkJkO1nHkYguZfLZz2BDi2S3HU4cph7a1DTS3cy+y
pHc8UC8Uz9PHXjge/7U37v7mfGKCIsrVWyrtr1/xVWz4i1nrIz28SxD4zZdyoses
QqcFnBgzYCPj1ej/NqlN6ldyHUwbseDSweHgtWcylJjyta9ynkH8kOSnH+1T27rN
zdthf0lcGcO/IIHMNw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:36:23 2025 by rpki-client