Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216296.roa
File:                     AS216296.roa (raw, json)
Hash identifier:          dTGi3+oaS2Sk2/q1Lv0+nCZkQ7gmgtYjFbaPSWqQt9k=
Subject key identifier:   D0:1D:04:A4:BD:28:63:9C:34:BC:8E:0E:E8:BC:46:9D:1C:29:CB:83
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       55E73C03CC80866261E59D72B591D66EEF512A94
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216296.roa
Signing time:             Sun 19 Apr 2026 21:23:12 +0000
ROA not before:           Sun 19 Apr 2026 21:18:12 +0000
ROA not after:            Sun 18 Apr 2027 21:23:12 +0000
asID:                     216296
IP address blocks:        2a14:7585:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Apr 2026 13:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e7:3c:03:cc:80:86:62:61:e5:9d:72:b5:91:d6:6e:ef:51:2a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Apr 19 21:18:12 2026 GMT
            Not After : Apr 18 21:23:12 2027 GMT
        Subject: CN=D01D04A4BD28639C34BC8E0EE8BC469D1C29CB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:7e:eb:70:68:09:15:14:c7:97:d4:85:db:
                    12:0f:4d:fa:a8:ef:ca:bf:d8:cd:47:13:a9:c8:b5:
                    02:85:39:a9:70:4b:f6:06:a4:87:9d:96:3d:66:e9:
                    b9:a6:ce:e1:a5:49:19:59:91:dd:03:8d:26:48:d3:
                    42:5b:ff:76:cb:de:29:c0:ee:5d:d6:60:25:9e:35:
                    6c:c9:f7:fd:f6:7a:88:43:66:4c:b6:cf:af:c6:a6:
                    8f:10:f7:f3:01:cb:1a:98:25:66:d4:2b:c5:9b:80:
                    13:b0:f9:00:3b:d4:7e:4b:7c:d5:48:cc:79:e0:2e:
                    fe:ab:fd:94:b3:92:82:b4:4b:c0:6f:19:ef:3d:97:
                    27:78:1b:dd:4e:98:2b:cd:13:ef:f9:06:82:67:b1:
                    cb:ca:6d:c6:4a:81:7e:c0:bf:e7:17:7f:b7:4c:17:
                    75:fe:d8:ed:de:85:85:10:45:c0:02:54:c6:51:e6:
                    7b:a7:90:94:63:82:96:ec:17:98:84:d0:82:10:3c:
                    14:1d:b1:4b:71:36:04:36:d2:8d:b4:e3:ab:64:a9:
                    ec:4d:07:de:43:51:73:fb:f6:00:56:d2:b8:a3:08:
                    ab:96:49:dd:38:eb:7c:05:1e:78:e2:6f:46:48:bf:
                    d2:80:2d:da:0d:64:16:30:f7:42:7c:f1:9b:35:e8:
                    be:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1D:04:A4:BD:28:63:9C:34:BC:8E:0E:E8:BC:46:9D:1C:29:CB:83
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216296.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7585:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:58:77:1e:d0:0f:35:74:10:4b:90:89:7d:18:bf:22:a8:25:
         ec:db:cf:4a:b7:0a:06:59:11:69:de:c9:35:b9:8a:32:9a:70:
         93:54:6e:aa:5b:69:55:88:8f:8d:c6:65:37:8e:e0:41:12:74:
         cf:77:e8:a1:96:8c:5e:2e:08:4f:d3:3e:5b:43:59:92:de:60:
         7d:0c:f3:b2:1a:ae:d5:fc:22:ab:cf:68:3e:0d:10:31:1d:cc:
         79:6d:e4:69:a0:03:59:9d:e3:74:fe:19:2e:57:e5:f3:aa:8a:
         c2:11:2e:68:a9:cb:a8:d2:b1:a2:b9:f9:fb:6c:ed:b0:a8:4b:
         ed:04:05:53:38:e9:87:a0:70:df:60:db:39:ed:c6:b7:6a:77:
         66:d7:23:0b:19:0a:d5:52:2e:90:ae:26:19:34:22:a2:76:72:
         23:85:e1:31:ee:e9:0a:0f:ff:7e:d0:73:69:20:1c:18:13:82:
         7c:1f:17:fd:e1:bd:76:94:87:ae:24:4f:23:24:11:e3:d8:be:
         83:ee:06:83:1c:74:8b:ec:8b:04:3b:d3:6d:14:22:68:cc:a2:
         0f:75:45:cb:6a:98:7a:67:68:af:99:6c:28:f9:1f:1f:6f:03:
         28:bd:fd:f5:8c:ee:f8:ba:2f:40:d0:3e:38:7a:3b:ef:72:98:
         4d:cc:39:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----