Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS150235.roa
File:                     AS150235.roa (raw, json)
Hash identifier:          sQZys0HSF7pxv/6FxdST7pimGfLcN+gtzK6Bp1xc9ms=
Subject key identifier:   01:5F:EE:2F:5E:1D:0F:0A:1D:A6:70:AC:BE:AC:09:4D:80:D0:FA:30
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       7BF85968270A9EFF9A82094781997B8F5ACAC780
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS150235.roa
Signing time:             Mon 20 Oct 2025 08:48:50 +0000
ROA not before:           Mon 20 Oct 2025 08:43:50 +0000
ROA not after:            Mon 19 Oct 2026 08:48:50 +0000
asID:                     150235
IP address blocks:        2a14:7583:c200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f8:59:68:27:0a:9e:ff:9a:82:09:47:81:99:7b:8f:5a:ca:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Oct 20 08:43:50 2025 GMT
            Not After : Oct 19 08:48:50 2026 GMT
        Subject: CN=015FEE2F5E1D0F0A1DA670ACBEAC094D80D0FA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:34:44:80:c2:b3:00:36:3f:65:af:7a:a1:
                    45:0b:3e:b7:83:ee:3c:4d:f4:e4:f9:ba:18:09:9e:
                    cd:38:01:4d:70:6d:9e:b7:b2:32:ed:4c:4e:fd:29:
                    7b:10:77:c2:50:40:a9:ef:6b:d9:ea:2c:67:09:56:
                    9d:29:1a:ff:cd:22:24:e1:7e:e5:90:b8:fb:8a:16:
                    c6:9b:0f:8a:ca:c7:d9:97:4a:d1:ff:72:ca:de:14:
                    17:e5:7b:91:41:56:f6:8f:37:36:76:16:f9:71:c9:
                    37:6e:dd:28:14:e7:b6:c2:96:f7:0c:ee:66:a4:28:
                    c8:55:94:83:93:ff:8d:94:b4:49:e4:e7:0b:c6:43:
                    7b:04:96:85:eb:3c:cf:64:c2:5c:12:e7:1e:2e:3a:
                    8e:9d:c6:5d:fe:3c:12:52:df:e2:51:b7:90:78:8f:
                    65:27:4b:6c:55:9e:97:49:01:dc:4f:5e:9d:20:11:
                    86:e5:2c:9c:37:51:82:85:eb:2a:a3:f7:2f:87:b9:
                    76:0e:3e:4a:20:c6:75:9b:ff:0b:e8:9f:e6:4b:94:
                    cd:c0:bc:e8:23:e8:e9:42:28:f8:ba:80:0f:33:d0:
                    ed:1c:90:9c:e6:24:2d:5e:50:6b:3d:57:74:87:45:
                    65:26:a8:c7:de:76:8d:05:be:12:b3:57:b0:9e:b1:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5F:EE:2F:5E:1D:0F:0A:1D:A6:70:AC:BE:AC:09:4D:80:D0:FA:30
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS150235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:c200::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:d0:97:13:5f:50:b7:cf:b8:5d:24:aa:fd:1d:db:40:8a:66:
         37:aa:d0:1a:8f:98:5b:d9:eb:27:69:31:4c:d6:d7:20:1c:86:
         7c:f8:30:a6:20:ab:72:77:47:c3:3a:8e:d7:60:14:51:cf:eb:
         61:8f:7d:c5:e9:8f:cf:e6:87:bc:c1:63:67:a3:30:92:9d:de:
         43:84:4c:3d:3f:4e:31:4f:cc:1b:ce:24:95:cf:57:f9:9a:51:
         c2:ba:5d:6d:6f:b9:26:2c:0c:3e:c8:c4:76:8b:a3:be:4f:8d:
         66:44:0a:d1:f8:00:94:ca:4b:af:97:aa:6f:8b:07:ae:9a:b8:
         30:07:f2:a9:93:f3:49:ed:08:7a:a6:8d:ff:d7:26:71:d3:82:
         f4:39:5b:8a:3d:16:de:b8:80:78:e6:2c:4d:af:17:40:08:ba:
         05:ad:e8:40:5b:28:c8:f2:09:d8:d0:14:24:a9:76:a7:72:b2:
         2d:9f:b2:bf:c0:a3:d9:16:a2:e2:4d:a6:e9:74:28:c4:b9:87:
         e5:e9:18:a4:01:bf:7a:ed:49:f7:3b:0b:c7:b9:fb:2e:53:66:
         ad:fe:99:7b:d5:21:08:b1:02:7a:d1:7d:2d:28:96:40:17:18:
         4a:e3:3e:eb:44:ef:e4:46:d4:03:a9:33:5d:b6:c5:96:c2:96:
         34:b7:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----