Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/326130323a313334383a3a2f33322d3332203d3e203531303539.roa
File:                     326130323a313334383a3a2f33322d3332203d3e203531303539.roa (raw, json)
Hash identifier:          Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=
Subject key identifier:   25:B6:8F:A6:24:73:69:A4:46:DE:84:0C:52:B3:F3:FE:AF:97:EC:D8
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       697CBE72E31C2759B86B261C1ACD43ABDB64D83E
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/326130323a313334383a3a2f33322d3332203d3e203531303539.roa
Signing time:             Tue 11 Aug 2026 11:05:44 +0000
ROA not before:           Tue 11 Aug 2026 11:00:44 +0000
ROA not after:            Tue 10 Aug 2027 11:05:44 +0000
asID:                     51059
IP address blocks:        2a02:1348::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7c:be:72:e3:1c:27:59:b8:6b:26:1c:1a:cd:43:ab:db:64:d8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Aug 11 11:00:44 2026 GMT
            Not After : Aug 10 11:05:44 2027 GMT
        Subject: CN=25B68FA6247369A446DE840C52B3F3FEAF97ECD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:81:f8:86:a7:bc:0c:f3:e4:80:7f:6d:4c:
                    2d:0d:41:64:be:7b:c0:5a:00:8f:7f:ce:94:fc:06:
                    bf:28:45:a8:da:00:97:a7:69:75:27:d9:bc:2f:87:
                    1e:e3:65:f6:03:86:9d:d8:77:1f:b9:25:99:ca:cc:
                    13:85:fa:07:aa:ad:bb:fd:e9:0c:cd:63:e8:f2:88:
                    6f:dc:1f:df:06:46:ec:f9:1e:99:70:82:d2:e0:91:
                    4d:49:1b:bb:4e:eb:11:fc:bd:8d:cf:ff:97:ce:5e:
                    3c:2a:a0:17:37:52:7b:52:4f:45:70:ed:4b:44:39:
                    1e:97:44:bb:d4:f0:5b:5c:be:fa:15:68:66:e8:62:
                    6c:1a:42:05:db:d8:9b:96:b9:65:65:ec:78:e7:50:
                    6f:82:64:f1:40:d3:d7:4f:b6:b7:8d:49:49:b9:ea:
                    0d:05:e4:aa:4a:a9:13:f5:af:2f:8f:67:17:d4:9f:
                    2c:0d:d8:4c:1c:37:8b:07:97:f0:47:2c:83:71:f2:
                    5e:b8:48:8b:0d:9d:b5:1c:9c:66:c0:8e:cf:d4:f3:
                    18:e9:8d:3b:7d:7b:5c:0f:04:eb:27:75:1f:15:92:
                    1b:98:db:0d:d5:05:27:a2:a9:1f:0c:29:39:b2:e7:
                    cc:6c:1d:af:79:45:4f:6a:27:e0:81:5b:0a:04:f2:
                    16:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B6:8F:A6:24:73:69:A4:46:DE:84:0C:52:B3:F3:FE:AF:97:EC:D8
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/326130323a313334383a3a2f33322d3332203d3e203531303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:1348::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:62:a3:eb:c0:8a:e5:d4:0d:e8:34:dc:c0:c3:52:e5:24:66:
         0e:5b:b5:5a:f8:a7:04:d6:82:23:d2:f5:03:28:c8:8a:41:02:
         ea:d4:67:6a:4f:02:06:0a:46:57:29:c1:49:fe:d3:6d:37:6b:
         d4:f6:23:09:28:00:84:ea:6f:83:39:9c:6e:83:48:4a:02:91:
         11:fb:ee:8c:69:c9:d7:6c:2f:2d:32:6f:ac:f0:22:14:37:b8:
         88:8d:99:25:d5:97:1d:56:8d:2c:15:f7:c8:f0:e6:e8:38:40:
         ca:21:75:6e:9e:a9:14:db:65:68:3f:11:00:11:be:cb:43:ca:
         cf:b8:99:53:55:92:f9:45:48:98:b4:75:81:f1:2b:9c:17:ed:
         bf:b3:75:fb:42:af:fe:ab:a8:c7:ae:e1:09:cd:22:ed:48:2b:
         d6:03:7a:c6:ee:fa:26:2e:d1:32:0a:85:57:69:6e:79:c7:5f:
         90:34:4e:d6:36:d2:fb:df:b5:dc:2c:6b:5d:72:ba:d4:b1:dd:
         6d:83:9f:93:4a:b4:96:07:84:9d:cc:17:c8:9e:ed:42:e2:19:
         1b:69:9b:09:3a:c6:c7:35:1c:86:c4:92:1f:da:4b:e5:31:a5:
         d5:0d:b1:d8:8b:84:3d:25:11:23:c9:ae:c8:7a:69:93:13:50:
         c1:d8:3c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----