Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219378.roa
File:                     AS219378.roa (raw, json)
Hash identifier:          idnyIOg2MA4gmlwOsPcFlcolVSSF9Res6U9aO16fjQ0=
Subject key identifier:   18:A6:35:EF:2B:75:2C:FF:09:2E:CE:6F:E5:44:61:FE:07:C1:47:8D
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       5FEE8354B6BE5A60A8F5ED3B509BD04996CFCB53
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219378.roa
Signing time:             Tue 23 Jun 2026 02:19:08 +0000
ROA not before:           Tue 23 Jun 2026 02:14:08 +0000
ROA not after:            Tue 22 Jun 2027 02:19:08 +0000
asID:                     219378
IP address blocks:        2a14:7583:efff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Jul 2026 02:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ee:83:54:b6:be:5a:60:a8:f5:ed:3b:50:9b:d0:49:96:cf:cb:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Jun 23 02:14:08 2026 GMT
            Not After : Jun 22 02:19:08 2027 GMT
        Subject: CN=18A635EF2B752CFF092ECE6FE54461FE07C1478D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:57:fc:2a:b0:e4:33:2e:0a:44:73:c0:76:09:
                    ea:bd:69:64:a9:7b:65:83:aa:21:29:de:ba:77:6f:
                    18:58:ab:f8:d3:27:81:dd:9a:a9:84:61:85:31:0e:
                    e6:da:3b:c5:1f:ec:30:bc:ac:77:9b:61:7d:26:3f:
                    4f:b0:79:9a:c4:c4:0e:a5:ec:db:dc:42:dd:2b:cb:
                    c7:99:f3:09:6d:28:b6:6e:60:ae:02:13:cb:d6:ff:
                    85:02:15:e1:39:8b:37:a3:fb:48:13:b5:3d:e8:7a:
                    7f:f1:72:0c:27:fd:ea:ec:80:37:25:04:83:3c:65:
                    97:49:de:60:76:e8:33:a6:60:90:94:31:24:d9:d2:
                    d9:1c:35:82:1a:f7:3a:dc:8f:83:8c:2a:52:15:f5:
                    50:8c:4b:52:23:a8:dc:56:09:88:71:bf:81:d9:9b:
                    89:c3:3b:5b:42:1a:b5:af:1d:e4:ed:b2:eb:d0:bf:
                    1e:3b:5a:6d:3c:ed:f0:ae:e0:47:d2:2a:e7:65:e2:
                    10:9e:c6:3d:13:fb:52:8b:b4:7e:6a:4a:ff:70:d7:
                    d0:41:c5:38:12:80:09:44:2c:3c:0d:70:b5:30:c9:
                    2f:9e:bc:3b:ec:46:ea:45:66:92:2f:fb:72:f0:fa:
                    4a:d5:bf:c6:f3:bc:83:25:fa:f4:c1:e5:e8:ef:94:
                    7a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A6:35:EF:2B:75:2C:FF:09:2E:CE:6F:E5:44:61:FE:07:C1:47:8D
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219378.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:efff::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:1a:10:6e:56:5b:0e:3e:d6:7e:a1:08:26:09:b1:fa:9e:19:
         8c:5b:fb:e8:52:f5:98:e5:e3:22:74:63:53:8f:0c:ec:9c:4f:
         71:e4:00:9c:9e:84:48:4e:94:16:7a:a8:23:a0:17:03:64:ad:
         04:5d:e5:e7:1d:f6:98:b3:02:08:44:34:7a:9d:9b:32:f2:c3:
         76:81:f0:d2:42:22:9e:64:a9:ce:1d:48:6a:f3:0a:1c:1a:7a:
         36:ff:4e:9e:76:c3:7d:10:f5:a6:29:59:d6:d5:f2:2b:1c:6a:
         ca:ea:64:04:33:fc:13:88:e3:1e:63:ba:3f:61:34:a4:31:00:
         e3:52:86:19:de:11:e5:be:c4:e4:06:16:8a:d4:9c:f3:42:e0:
         59:f5:2d:d5:c7:f9:9a:97:11:c2:17:1a:05:c0:21:7a:39:2b:
         68:99:24:b9:8c:56:a5:4c:e7:c5:f9:84:1b:6f:5a:36:41:82:
         59:c0:19:05:d5:43:16:31:1d:b0:d3:a8:a2:28:82:a3:8e:9f:
         7a:4d:79:0c:90:f6:d9:7c:b4:c4:81:d7:da:f4:32:fb:7c:8d:
         07:38:60:cf:b6:ee:ca:b8:3b:58:97:60:8b:ae:75:0c:0c:7a:
         f3:b5:a9:9d:d7:9c:62:1a:0e:d4:a2:4d:dc:83:73:90:9f:40:
         1b:59:b7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----