Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3138352e322e3230362e302f32342d3234203d3e203531303539.roa
File:                     3138352e322e3230362e302f32342d3234203d3e203531303539.roa (raw, json)
Hash identifier:          vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=
Subject key identifier:   C4:85:32:96:F7:CC:74:01:0A:69:F3:C5:03:8E:EE:18:9E:F0:35:50
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       036AC2A09AD6108B1F8A21CF0A1B4A83EB3942A9
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3138352e322e3230362e302f32342d3234203d3e203531303539.roa
Signing time:             Tue 11 Aug 2026 11:05:44 +0000
ROA not before:           Tue 11 Aug 2026 11:00:44 +0000
ROA not after:            Tue 10 Aug 2027 11:05:44 +0000
asID:                     51059
IP address blocks:        185.2.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 11:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6a:c2:a0:9a:d6:10:8b:1f:8a:21:cf:0a:1b:4a:83:eb:39:42:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Aug 11 11:00:44 2026 GMT
            Not After : Aug 10 11:05:44 2027 GMT
        Subject: CN=C4853296F7CC74010A69F3C5038EEE189EF03550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:89:be:eb:43:d7:cf:71:a2:04:97:8d:f7:
                    69:5b:85:b1:e5:03:35:e7:c0:2e:04:82:06:72:11:
                    1b:82:23:cf:d0:29:3a:56:6f:00:44:da:a3:da:bd:
                    b0:19:2b:d2:c1:9e:6d:00:d1:04:6e:fa:2b:e5:e7:
                    8a:bb:cc:10:26:6f:06:a4:36:7b:a4:c4:9c:8a:0a:
                    29:45:89:79:5c:cf:36:3f:89:dc:c4:e8:f2:70:63:
                    7d:54:54:96:6c:0b:c3:21:31:48:40:99:67:3f:1f:
                    66:06:66:fe:e7:84:28:cb:d2:3a:85:d3:b4:5e:c9:
                    e8:88:b4:e9:49:d0:34:21:11:64:24:f0:a4:ac:f6:
                    80:d2:1d:51:a8:d7:59:d4:98:e1:9e:4e:4f:34:19:
                    2f:2f:2b:00:55:84:55:9c:b1:46:11:39:7c:2d:9c:
                    01:1b:8c:3f:6a:f5:d3:c9:2c:e9:f7:ef:a6:37:1e:
                    43:9d:e1:6c:c4:27:b2:ab:85:17:45:5b:99:23:50:
                    fc:56:8a:e2:ba:d8:de:e3:fb:e4:3f:fd:47:a4:40:
                    16:ee:3f:50:86:af:67:8c:0f:72:c7:fd:43:e7:7b:
                    e7:01:ee:8a:88:9e:97:24:f3:da:d7:f2:7a:38:81:
                    8f:34:63:0b:1b:55:4a:0c:47:0c:30:d0:fa:7c:e1:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:85:32:96:F7:CC:74:01:0A:69:F3:C5:03:8E:EE:18:9E:F0:35:50
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3138352e322e3230362e302f32342d3234203d3e203531303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.2.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d2:f0:10:d9:78:0b:9f:99:21:13:b0:f6:56:d5:b3:58:75:
         a6:96:e5:39:6d:d3:d2:2c:6c:54:9d:f5:bf:1e:d3:19:ae:08:
         06:25:c0:eb:1e:8a:2d:b4:95:7b:24:d1:86:b4:f4:42:ea:10:
         08:b5:17:50:b1:f9:0a:d7:39:eb:99:b1:80:df:97:19:9c:09:
         28:a3:96:1a:56:30:3a:37:a8:b1:9b:2e:1d:1e:8f:df:1f:51:
         05:7c:1a:2c:a1:cb:be:a2:99:a6:37:db:38:aa:6a:94:ae:a8:
         56:fc:0a:d0:14:b7:5c:16:6a:51:80:97:27:b6:07:0b:d1:eb:
         3b:c2:f6:b0:f9:37:43:2d:d5:0b:1f:f0:6a:72:82:e0:da:c7:
         24:36:77:8c:27:20:05:e9:30:1d:d1:c2:ad:74:7d:85:43:89:
         aa:10:83:15:18:c5:86:c7:b3:64:2c:b3:33:e3:2d:09:fb:7f:
         f8:ff:51:f0:fd:b8:a4:f7:40:3a:8a:8d:f2:ed:ba:68:bc:09:
         91:97:9d:17:f6:a2:c2:dd:d5:21:25:11:30:40:51:49:8f:aa:
         1b:64:3f:48:ed:1e:a9:ac:30:c8:4d:ca:2d:bd:2c:e6:59:ad:
         7d:8c:fd:fa:da:3e:fe:6f:5b:b9:69:be:0f:38:9e:9b:09:82:
         e7:71:b3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----