Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12083.roa
File:                     AS12083.roa (raw, json)
Hash identifier:          4nZHHxtwvNmTDStJhrsvqR/jgHReDwpxjd7FZw7GPyM=
Subject key identifier:   73:A0:73:C1:3F:6D:D8:3E:C0:44:36:59:C0:F1:86:C8:81:FB:31:2B
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       206D8609B42353B217740BBA54DA326C6B88897D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12083.roa
Signing time:             Fri 10 Jul 2026 20:23:33 +0000
ROA not before:           Fri 10 Jul 2026 20:18:33 +0000
ROA not after:            Fri 09 Jul 2027 20:23:33 +0000
asID:                     12083
IP address blocks:        84.75.4.0/22 maxlen: 24
                          84.75.28.0/22 maxlen: 24
                          84.75.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 16:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6d:86:09:b4:23:53:b2:17:74:0b:ba:54:da:32:6c:6b:88:89:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jul 10 20:18:33 2026 GMT
            Not After : Jul  9 20:23:33 2027 GMT
        Subject: CN=73A073C13F6DD83EC0443659C0F186C881FB312B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:91:dd:3e:ea:f1:86:7e:7f:fb:05:7d:38:
                    c0:05:eb:4a:2f:5e:32:b3:3f:d2:67:c8:ee:1e:f2:
                    60:83:ce:f5:05:e0:2a:46:8e:6f:df:88:e4:1d:27:
                    21:f2:fa:0a:e9:d7:3d:6c:0e:21:5c:73:ba:cb:a5:
                    2e:06:b8:8e:a4:e4:67:c0:66:13:b1:1f:72:f8:b1:
                    22:bf:ee:9b:4f:7d:76:4f:89:b7:90:7c:7c:44:5e:
                    73:29:6e:b5:d0:aa:93:bb:1d:b5:05:2a:3e:e5:1a:
                    16:a8:3b:65:8c:9e:2e:d6:79:53:e0:f0:cd:ab:8d:
                    b2:4c:53:fa:3f:4a:b1:54:01:c5:7e:b9:20:3e:72:
                    0d:45:66:7a:ef:74:83:1b:ca:1c:d2:a6:76:83:cd:
                    a8:29:02:87:24:d0:73:d3:56:7a:86:9b:57:c0:2e:
                    21:1f:ce:4e:36:17:97:53:63:c4:61:0d:f8:8a:68:
                    38:7c:17:7a:4d:4a:74:80:fe:95:75:fe:37:5f:1a:
                    58:68:0b:a9:5f:b1:a7:0f:b0:99:2d:b8:6b:76:74:
                    d9:97:cd:28:c3:60:e3:94:03:0e:87:96:38:7a:cc:
                    88:8e:b7:6e:a1:82:eb:46:af:9e:b7:d0:9b:80:2b:
                    ec:56:68:4b:3d:42:08:60:85:8b:4f:b0:34:e1:8e:
                    4b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A0:73:C1:3F:6D:D8:3E:C0:44:36:59:C0:F1:86:C8:81:FB:31:2B
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.75.4.0/22
                  84.75.28.0/22
                  84.75.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:fd:f6:df:89:bf:98:ec:cc:7a:18:14:25:27:75:85:6f:80:
         2b:b2:f8:a2:6a:2a:36:c2:2b:d1:c8:4e:16:f7:7a:a6:cb:63:
         ec:63:d3:b9:c8:54:ab:d0:25:de:86:6d:f4:c4:7e:a7:ba:99:
         13:c4:65:1e:d2:21:da:00:39:71:0e:26:6d:88:37:17:42:93:
         0e:ec:4e:38:9b:da:5d:f9:ee:c3:88:2c:d4:69:ee:70:6d:be:
         ef:52:44:bb:46:5d:6e:87:7e:9b:1b:3e:92:a9:7f:89:f9:b3:
         ab:aa:fc:36:74:31:0d:04:06:44:c9:fb:8f:36:01:f7:29:d7:
         9e:a0:f0:95:19:4b:4c:79:6d:c5:6e:f6:d4:78:55:d6:09:4d:
         d1:e0:e3:2c:9c:b2:f4:ad:5f:2b:e6:a0:e0:15:9f:d5:d5:17:
         bd:ad:a4:83:ea:79:e6:1c:2f:c2:46:4b:6d:13:32:c2:76:74:
         0f:a7:10:7f:a9:42:2e:91:4a:f2:2d:d9:3e:de:c5:b3:0c:c9:
         50:65:6d:31:f9:2b:c4:0f:1a:17:a2:65:52:82:14:93:d7:fc:
         0c:e0:a0:bb:68:7b:8f:bc:61:dc:71:c6:b6:2d:7e:10:39:7b:
         d5:e4:93:bb:bb:8d:f8:fe:c8:13:2e:9b:f3:66:69:92:08:cd:
         e2:d8:eb:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:55 2026 by rpki-client