Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3138352e322e3230352e302f32342d3234203d3e203531303539.roa
File:                     3138352e322e3230352e302f32342d3234203d3e203531303539.roa (raw, json)
Hash identifier:          TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=
Subject key identifier:   C5:45:06:30:87:E9:41:3C:D0:24:B5:78:0C:57:30:FE:D4:E9:63:36
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       67576235D0102881233ACAE5D96799C469D3E1A4
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3138352e322e3230352e302f32342d3234203d3e203531303539.roa
Signing time:             Tue 11 Aug 2026 11:05:44 +0000
ROA not before:           Tue 11 Aug 2026 11:00:44 +0000
ROA not after:            Tue 10 Aug 2027 11:05:44 +0000
asID:                     51059
IP address blocks:        185.2.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 11:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:57:62:35:d0:10:28:81:23:3a:ca:e5:d9:67:99:c4:69:d3:e1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Aug 11 11:00:44 2026 GMT
            Not After : Aug 10 11:05:44 2027 GMT
        Subject: CN=C545063087E9413CD024B5780C5730FED4E96336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:6c:08:5b:e0:51:f6:09:40:bc:69:0c:3f:
                    03:74:4a:5a:3f:be:65:a1:3a:dd:96:18:ff:ad:15:
                    aa:0b:b6:47:a8:37:d5:eb:70:c0:7c:99:3b:5d:7a:
                    b4:e2:90:63:08:bd:a0:71:96:14:da:b4:4d:a4:25:
                    41:7b:e7:dd:98:4c:99:90:f9:68:56:7a:c7:69:4f:
                    f8:09:12:4e:6b:f5:d6:22:30:6c:2d:d5:c3:2b:69:
                    d5:6f:9a:97:6d:f1:b2:36:e0:32:61:08:f3:17:8c:
                    90:bc:6e:5a:55:07:25:9e:50:c6:1a:4b:29:a3:25:
                    14:a9:6c:6c:68:15:e5:5c:72:22:6e:03:3c:65:1f:
                    0c:27:4f:84:74:53:db:cd:84:35:ec:10:4f:81:d9:
                    30:31:d3:9b:bb:77:9e:2c:76:57:89:c7:4e:d2:fd:
                    07:a8:ef:36:83:66:b3:ca:3a:f7:01:5c:d2:c3:ea:
                    56:6b:d6:9e:b7:a3:a6:26:25:34:a3:40:c6:f6:35:
                    0a:30:54:57:7a:8c:51:ba:59:e8:00:67:b5:37:14:
                    96:d5:71:59:f8:66:b1:54:6e:24:90:e5:2c:23:03:
                    77:69:4f:7b:49:69:3c:7b:8d:c9:5f:43:4d:75:16:
                    c6:48:2e:17:d2:56:30:07:0c:6d:11:b1:d4:9f:32:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:45:06:30:87:E9:41:3C:D0:24:B5:78:0C:57:30:FE:D4:E9:63:36
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3138352e322e3230352e302f32342d3234203d3e203531303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.2.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:33:6b:c6:db:95:15:95:4b:44:e1:ad:3a:67:93:ff:f4:dd:
         87:8c:51:c6:c4:e9:c7:19:3f:6a:52:48:4b:3c:79:8e:5b:7a:
         e7:fd:7f:2a:87:47:1c:f9:22:aa:6c:28:6e:c2:61:93:9f:19:
         db:4d:c7:3d:f8:7a:9b:a0:55:60:3d:53:4f:ba:80:4c:6a:7a:
         50:80:bc:a1:66:4e:4b:3b:5b:70:79:e6:1a:e3:7a:f8:a4:de:
         35:bb:c8:1a:88:93:2b:3b:1b:94:cb:21:ae:52:91:e3:82:de:
         48:5e:37:ac:34:2b:98:a3:ab:85:c8:1e:c9:b2:96:6b:f6:42:
         2d:9b:ea:c0:4c:2f:39:4d:de:74:b8:ec:1e:41:2f:fc:ad:ba:
         a6:3a:76:87:80:3b:06:41:ed:e5:f0:b5:16:48:92:9c:8f:55:
         1f:b4:9b:56:c4:c8:78:f5:6d:34:92:f5:8f:18:25:57:9e:39:
         00:4c:d2:47:b8:dd:36:48:8a:11:95:38:15:d7:a5:7d:8d:f7:
         90:bd:c0:44:00:4e:34:50:08:24:49:2a:5f:07:e8:98:1b:35:
         fc:04:d5:f1:6b:c2:2a:ce:b7:66:3e:bb:fa:65:97:46:f9:db:
         e0:80:44:c4:34:e2:70:ff:8b:69:29:0c:45:8b:46:fc:ea:ed:
         7d:25:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----