Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/SwpHza0Ol_xSWiGeYQX5SjZ_FWE.roa
File:                     SwpHza0Ol_xSWiGeYQX5SjZ_FWE.roa (raw, json)
Hash identifier:          zBDTlApIS/5sWZC8htu4RySvMXIynumZqy8NDxp8PkI=
Subject key identifier:   4B:0A:47:CD:AD:0E:97:FC:52:5A:21:9E:61:05:F9:4A:36:7F:15:61
Certificate issuer:       /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial:       01A0A70BE730B5A7AA01840C2AD1F9595960
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/SwpHza0Ol_xSWiGeYQX5SjZ_FWE.roa
Signing time:             Tue 15 Sep 2026 21:49:30 +0000
ROA not before:           Tue 15 Sep 2026 21:49:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211014
IP address blocks:        142.228.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 02:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a7:0b:e7:30:b5:a7:aa:01:84:0c:2a:d1:f9:59:59:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
        Validity
            Not Before: Sep 15 21:49:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4b0a47cdad0e97fc525a219e6105f94a367f1561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:53:b1:2c:ef:8f:4f:16:9f:7a:8b:75:b0:0f:
                    25:11:97:53:f0:70:28:70:72:ad:e9:e1:e8:09:08:
                    e3:4f:0a:80:6e:00:a5:ff:c7:64:74:8f:aa:77:5f:
                    c6:16:a6:be:b6:b2:31:fd:3f:4d:08:34:0d:84:99:
                    72:74:53:c9:58:b2:5d:d3:9b:ed:df:dd:0a:18:5c:
                    ae:15:8d:68:51:2d:11:d1:67:d6:81:2c:54:98:a9:
                    bb:35:2f:73:94:d8:db:b5:92:56:32:3b:87:4e:26:
                    f0:93:b5:9e:19:dc:53:1d:f5:21:57:5c:73:98:fe:
                    34:c8:50:85:a7:13:4e:32:74:7c:48:2a:05:4c:e8:
                    f4:8d:6c:3a:c3:47:6c:6d:01:d1:58:d4:09:8d:bf:
                    b3:19:f4:54:47:ee:2b:4f:20:d0:74:41:29:5a:e3:
                    fd:22:7b:f8:7e:b3:fe:e0:0b:8f:58:6d:04:51:b2:
                    fa:98:21:47:4c:cd:31:37:43:af:58:b3:f7:a6:c3:
                    56:5d:e9:75:a5:21:b7:3b:aa:2f:02:67:44:a8:54:
                    d8:84:5a:ee:b2:99:10:dd:03:5b:60:1e:a7:c6:3a:
                    17:96:99:81:f8:7a:ee:03:fd:24:d4:34:a8:cb:25:
                    a3:12:64:14:36:f1:fd:99:2d:fd:56:af:55:0f:e5:
                    58:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0A:47:CD:AD:0E:97:FC:52:5A:21:9E:61:05:F9:4A:36:7F:15:61
            X509v3 Authority Key Identifier:
                keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/SwpHza0Ol_xSWiGeYQX5SjZ_FWE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.228.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:66:14:98:8c:e1:d9:d3:1a:46:6c:5e:1e:ec:4b:e7:e2:c8:
         94:48:b1:14:d3:4d:e9:78:14:6b:2b:8f:80:00:9a:c0:ef:dd:
         82:2a:8a:95:ac:c5:f1:ec:73:3e:75:6b:8f:99:f4:ab:91:44:
         22:9a:29:ed:04:86:bf:a4:2a:e0:09:ce:39:83:2d:54:e5:a6:
         1e:99:c4:5a:c5:ff:3e:b1:54:ec:e5:29:0c:d8:9b:d7:a3:f7:
         18:59:ea:3f:2c:8c:65:2c:93:2d:0e:e1:c1:be:21:5c:6d:47:
         7c:80:a5:cd:fe:72:1c:9f:db:c7:77:99:79:33:db:e4:5c:0e:
         63:c8:b7:59:d9:d3:5b:30:c8:38:3c:15:12:1a:76:32:6e:13:
         d6:3e:4a:ca:7f:f9:84:a1:00:01:7e:01:2b:80:0e:73:ba:39:
         eb:e1:d7:7d:d8:81:14:c3:27:95:dc:37:af:3e:65:5b:3f:35:
         70:64:f7:5a:79:83:1e:a7:39:39:2a:3f:a1:45:19:78:6e:9d:
         65:8a:5d:8d:f1:9d:2c:ed:6d:29:ef:92:e1:8f:7c:ca:60:41:
         eb:14:ef:2f:e9:bc:e3:ae:00:51:18:74:ff:26:db:f7:6c:ba:
         6b:ba:03:41:a6:40:6e:80:a8:2b:45:24:8b:5e:b7:1e:78:2e:
         3f:48:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:11:55 2026 by rpki-client