Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216112.roa
File:                     AS216112.roa (raw, json)
Hash identifier:          zJE+FT5Lgy3/Y/vorF0RxfS34yaMk+xenMCcfkm8TlU=
Subject key identifier:   1F:CA:38:DB:F7:DE:2B:60:BF:1A:0F:8C:CF:72:C4:B0:65:2C:99:EC
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       642F733A101310ED747BD2435B1004CB571902EF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216112.roa
Signing time:             Sun 14 Sep 2025 12:02:32 +0000
ROA not before:           Sun 14 Sep 2025 11:57:32 +0000
ROA not after:            Sun 13 Sep 2026 12:02:32 +0000
asID:                     216112
IP address blocks:        2a13:9500:df::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 18:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2f:73:3a:10:13:10:ed:74:7b:d2:43:5b:10:04:cb:57:19:02:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Sep 14 11:57:32 2025 GMT
            Not After : Sep 13 12:02:32 2026 GMT
        Subject: CN=1FCA38DBF7DE2B60BF1A0F8CCF72C4B0652C99EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:37:5b:18:b7:91:77:f6:27:55:33:99:7f:
                    ed:1b:d0:47:7c:df:4b:bd:7b:14:2f:d8:d2:f4:67:
                    55:70:52:bd:96:d2:88:c7:cf:be:42:32:ff:fb:b0:
                    49:21:c7:40:92:87:80:76:98:ab:9d:71:7c:4b:72:
                    6f:c7:20:49:68:fb:19:9c:d4:e2:b6:5d:d9:e6:e4:
                    4f:74:07:e1:c2:df:48:bb:15:f7:83:b4:57:6c:f0:
                    91:13:9f:78:4c:6f:8d:dc:30:62:69:bc:25:5e:b7:
                    52:1b:36:f5:58:fb:fa:a9:b3:c0:93:2b:e1:5c:1d:
                    cb:ae:71:64:6a:4b:d7:e9:31:7e:54:24:e0:26:a1:
                    c6:97:76:f8:99:d7:a1:ab:34:f0:df:f8:e6:aa:f9:
                    74:bf:bb:c8:d6:d5:43:c7:67:16:0d:50:eb:33:35:
                    66:a0:ff:33:c6:72:82:e5:be:a5:dc:59:5f:6e:b0:
                    81:63:f4:f6:4b:2a:ad:6a:84:fa:60:8b:6b:73:87:
                    6e:58:5a:4b:f9:a5:62:c6:4c:62:e2:75:ac:2e:67:
                    bb:62:b8:c9:1b:9b:52:ed:2f:80:b8:64:52:25:aa:
                    43:fc:05:26:15:06:54:9f:ab:b6:6d:54:85:2a:7d:
                    13:cc:02:b6:42:88:de:00:c0:50:8f:87:f5:e4:19:
                    44:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CA:38:DB:F7:DE:2B:60:BF:1A:0F:8C:CF:72:C4:B0:65:2C:99:EC
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:df::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:e7:5e:e2:d4:0f:96:ad:4b:b5:7a:b2:a5:3f:1f:da:48:50:
         92:7f:2d:c9:a5:6e:36:a9:f6:aa:7f:c1:d8:55:aa:c2:df:88:
         cb:3c:4a:12:10:e9:9d:8e:03:e7:a0:23:da:a1:97:00:aa:4a:
         dd:92:2e:b8:dd:87:2a:1b:8d:92:da:93:b9:86:27:ed:c9:ec:
         b1:a3:ce:bd:f7:32:96:7a:3e:77:84:74:df:f5:d3:8b:7e:71:
         2d:8d:f2:2c:2c:6f:40:33:cf:ec:c7:91:88:44:fd:6c:41:0a:
         68:96:0c:bf:50:b4:37:a7:3a:7a:3d:74:a5:c2:39:7a:ea:3b:
         26:34:ec:e2:20:e0:d5:d7:3b:fa:66:20:e2:07:16:a3:13:28:
         4f:33:da:76:97:ed:88:4e:88:d7:0e:39:4d:d1:f3:9b:87:c5:
         15:13:52:38:75:3c:ec:08:0e:ad:c4:11:4f:0f:f0:ff:0e:ec:
         93:e3:c2:6c:44:3a:5a:31:fa:a0:67:07:02:68:d0:5f:1b:87:
         2d:9d:23:27:3c:2f:33:d1:cb:3c:ba:c4:96:6f:41:25:ff:93:
         ca:e4:94:46:3c:3a:1e:94:29:76:b0:5d:fa:4a:c2:e5:d5:ea:
         2f:93:8d:5b:44:da:21:f1:54:ca:12:77:1a:e2:e0:52:57:e2:
         72:37:d3:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUZC9zOhATEO10e9JDWxAEy1cZAu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA5MTQxMTU3MzJaFw0yNjA5MTMxMjAyMzJaMDMxMTAvBgNV
BAMTKDFGQ0EzOERCRjdERTJCNjBCRjFBMEY4Q0NGNzJDNEIwNjUyQzk5RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbhTdbGLeRd/YnVTOZf+0b0Ed8
30u9exQv2NL0Z1VwUr2W0ojHz75CMv/7sEkhx0CSh4B2mKudcXxLcm/HIElo+xmc
1OK2Xdnm5E90B+HC30i7FfeDtFds8JETn3hMb43cMGJpvCVet1IbNvVY+/qps8CT
K+FcHcuucWRqS9fpMX5UJOAmocaXdviZ16GrNPDf+Oaq+XS/u8jW1UPHZxYNUOsz
NWag/zPGcoLlvqXcWV9usIFj9PZLKq1qhPpgi2tzh25YWkv5pWLGTGLidawuZ7ti
uMkbm1LtL4C4ZFIlqkP8BSYVBlSfq7ZtVIUqfRPMArZCiN4AwFCPh/XkGUT1AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUH8o42/feK2C/Gg+Mz3LEsGUsmewwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE2MTEyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AADfMA0GCSqGSIb3DQEBCwUAA4IBAQAl517i1A+WrUu1erKlPx/aSFCSfy3JpW42
qfaqf8HYVarC34jLPEoSEOmdjgPnoCPaoZcAqkrdki643YcqG42S2pO5hiftyeyx
o8699zKWej53hHTf9dOLfnEtjfIsLG9AM8/sx5GIRP1sQQpolgy/ULQ3pzp6PXSl
wjl66jsmNOziIODV1zv6ZiDiBxajEyhPM9p2l+2ITojXDjlN0fObh8UVE1I4dTzs
CA6txBFPD/D/DuyT48JsRDpaMfqgZwcCaNBfG4ctnSMnPC8z0cs8usSWb0El/5PK
5JRGPDoelCl2sF36SsLl1eovk41bRNoh8VTKEnca4uBSV+JyN9NA
-----END CERTIFICATE-----