Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203837.roa
File:                     AS203837.roa (raw, json)
Hash identifier:          ht1q352ycLVoBy8eenFb9TGrnm/Xqmjnqztw27JNQuI=
Subject key identifier:   E1:E4:13:21:16:9D:A1:36:FB:26:80:03:86:58:64:D1:10:1F:D6:67
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       6B5D9FB34852A5A1344C20426EB0649AA48845C8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203837.roa
Signing time:             Thu 15 Oct 2026 15:49:37 +0000
ROA not before:           Thu 15 Oct 2026 15:44:37 +0000
ROA not after:            Thu 14 Oct 2027 15:49:37 +0000
asID:                     203837
IP address blocks:        2a14:7580:ffe1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 13:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5d:9f:b3:48:52:a5:a1:34:4c:20:42:6e:b0:64:9a:a4:88:45:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Oct 15 15:44:37 2026 GMT
            Not After : Oct 14 15:49:37 2027 GMT
        Subject: CN=E1E41321169DA136FB268003865864D1101FD667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:7b:6e:51:5f:6e:90:64:4b:9c:f6:3b:23:
                    26:90:20:cf:44:1c:10:ec:4c:df:fa:64:2c:93:e5:
                    cb:30:34:06:aa:71:af:f0:9f:3e:a4:66:5e:c8:19:
                    fb:16:ca:0d:39:37:e0:d4:de:c7:39:d8:0c:2c:57:
                    74:bc:2f:99:7c:02:d2:bf:bf:d0:44:4c:aa:08:4b:
                    03:d5:13:67:e4:23:19:72:23:1c:50:0b:20:bf:7c:
                    20:55:2d:ce:c7:87:87:3f:d4:3b:59:e8:ff:3e:7c:
                    0b:9c:77:61:8e:b4:41:75:50:c8:8c:b3:a7:52:9d:
                    18:87:2f:0e:79:56:6b:e8:71:5e:10:4c:e1:ca:91:
                    a0:bb:c7:98:40:be:00:49:31:9c:93:12:a0:c3:ae:
                    10:69:17:4c:87:6b:a2:1e:c8:e2:52:6b:25:a6:4e:
                    e2:58:4a:1f:b9:d1:dc:26:91:27:82:5c:18:25:af:
                    5e:8b:fb:fc:7a:c6:ff:3c:97:82:ca:47:72:ee:fc:
                    86:ff:f0:1c:40:75:ce:82:32:af:95:6e:1f:f7:ba:
                    42:c3:08:11:94:16:37:10:b1:15:5f:95:2e:e2:91:
                    27:05:bb:98:d2:e6:4b:c8:61:6a:7d:ee:3c:07:f4:
                    a5:1b:84:39:e4:b7:bb:86:2c:10:55:ae:11:76:60:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E4:13:21:16:9D:A1:36:FB:26:80:03:86:58:64:D1:10:1F:D6:67
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ffe1::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:4f:6e:aa:5a:42:21:7b:98:12:87:79:1c:81:60:2f:59:bb:
         21:04:f1:86:f7:ef:00:ca:fe:17:5a:67:07:a1:01:f2:bc:04:
         7e:21:b9:b3:04:71:5b:ea:79:38:c2:67:7b:a4:2c:0e:62:78:
         40:bc:1c:23:9d:09:f4:1c:48:c8:9d:f7:89:aa:07:21:9f:a5:
         e4:68:ca:61:c0:05:57:0d:b9:62:e4:f3:42:a8:3e:8d:af:d4:
         29:1c:89:d6:16:c3:7f:1b:02:08:4a:3d:d9:7a:be:98:e6:52:
         03:24:53:ff:4b:a0:3a:5a:4e:5a:e0:6f:d1:32:9c:d8:9b:a2:
         ea:0f:f8:37:51:f0:4d:07:f6:07:1f:16:b0:17:ee:cc:83:a7:
         2d:dc:c9:16:0f:cc:a9:fe:24:45:e1:d0:88:b0:1c:e0:40:4b:
         55:12:ce:e5:06:a2:5b:a7:85:23:14:3f:a7:15:46:06:8a:18:
         fa:79:2e:8c:b7:f3:1a:bb:97:f0:14:bd:ee:f4:60:3f:c7:52:
         66:46:9f:7b:5c:7c:0d:f3:2b:88:34:4b:1e:aa:6b:91:51:ac:
         84:44:c7:9c:2a:a5:0a:98:c2:bd:e0:07:aa:17:b4:e8:d1:a0:
         ac:e8:a7:63:71:d8:54:da:27:3c:ab:d6:7d:fa:a8:ee:e7:1d:
         0d:88:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----