Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638333a3a2f33322d3438203d3e2030.roa
File:                     326130613a643638333a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          1AoAuE4mRiqziiHkgepF+g+OjuGOS1bv+xQ+rN/5kXU=
Subject key identifier:   5F:29:F1:0F:D5:47:69:BD:43:15:35:7B:1A:3D:69:33:16:3E:27:95
Certificate issuer:       /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial:       1907B0DFD6CE56A92D4E23C25E16F391D307558E
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638333a3a2f33322d3438203d3e2030.roa
Signing time:             Sat 18 Jul 2026 14:25:24 +0000
ROA not before:           Sat 18 Jul 2026 14:20:24 +0000
ROA not after:            Sat 17 Jul 2027 14:25:24 +0000
asID:                     0
IP address blocks:        2a0a:d683::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:07:b0:df:d6:ce:56:a9:2d:4e:23:c2:5e:16:f3:91:d3:07:55:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
        Validity
            Not Before: Jul 18 14:20:24 2026 GMT
            Not After : Jul 17 14:25:24 2027 GMT
        Subject: CN=5F29F10FD54769BD4315357B1A3D6933163E2795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:69:fb:57:9f:25:e6:75:89:b7:76:01:9a:
                    83:cf:60:b3:51:c5:95:74:f5:b3:a3:4f:7e:1b:23:
                    f2:24:a8:26:cf:f2:19:94:14:b3:d3:a6:dc:fd:10:
                    0b:16:86:5d:f5:0e:18:51:b2:c5:ba:0d:b1:8f:9d:
                    39:69:e7:e7:b1:e3:b3:5a:e1:50:75:29:9b:c1:4d:
                    a7:a5:17:f7:08:61:5d:74:f7:9c:53:a9:ec:b0:ef:
                    2f:33:0a:09:7c:eb:16:3d:a4:09:50:4e:83:09:8a:
                    58:7f:6a:25:64:97:00:eb:b8:4f:2d:7e:b2:a9:d8:
                    ed:9c:6f:24:b7:c0:32:e2:40:49:f4:af:90:41:b6:
                    67:34:6a:1d:ea:22:25:ae:ad:b5:ba:4b:d1:4f:ec:
                    6c:3a:0e:3b:36:20:29:36:53:c4:cf:9e:2c:71:7f:
                    50:3a:ab:37:ed:04:8c:e2:55:f9:08:3f:40:49:e8:
                    5d:19:88:4a:00:5b:d4:75:f5:44:bc:11:ee:2f:8f:
                    0d:09:05:28:33:a2:21:e7:72:e7:65:58:b2:31:f6:
                    a1:80:55:4d:e4:7b:47:10:ba:83:68:f3:6e:65:80:
                    06:88:60:82:30:dc:73:38:4a:83:d3:9d:8c:5c:e3:
                    cc:e9:15:11:d1:e3:ea:4e:83:23:db:1f:65:30:b9:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:29:F1:0F:D5:47:69:BD:43:15:35:7B:1A:3D:69:33:16:3E:27:95
            X509v3 Authority Key Identifier:
                keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638333a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:d683::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:a5:6b:7a:b8:0a:7c:4e:e1:b7:dc:ad:01:6b:ee:01:7b:2d:
         05:dc:32:dd:1c:5a:02:60:d5:8d:ea:9c:80:34:94:a3:ab:8a:
         d4:b6:93:22:9e:d9:ca:07:97:d0:e1:1b:66:9e:dc:72:0f:15:
         be:e1:e4:ca:9d:0d:d9:41:18:70:82:53:9b:ba:75:a2:7a:5f:
         47:f3:e9:3f:98:5b:5a:ee:64:21:d2:5e:59:f4:51:48:30:e1:
         6b:61:af:f3:d5:df:f1:4c:ef:10:8c:ae:95:0f:3b:81:f1:33:
         72:2e:70:4d:ea:68:85:c4:74:cb:ee:8e:7f:68:7f:83:25:df:
         26:f6:d0:e8:0e:0d:3c:de:3c:63:b8:84:49:c2:f5:62:be:37:
         52:26:e3:be:7a:7f:49:84:f2:98:6a:36:2f:26:53:41:5d:7a:
         8b:54:83:a5:93:57:7c:02:af:a4:36:78:5c:e1:59:b6:4d:b3:
         22:88:ce:30:01:06:90:6e:cc:35:52:0c:42:ad:ad:4e:25:7c:
         da:7d:66:31:f3:76:b1:4a:3e:75:e3:31:09:35:e6:47:16:6b:
         9a:d0:b8:5e:44:2e:d0:49:03:f0:4f:82:e5:6d:b7:c7:fa:04:
         5f:49:29:cd:3d:3f:46:d0:cf:41:cb:b5:68:dc:a4:44:7c:f2:
         ce:66:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----