Route Origin Authorization

$ rpki-client -vvvf rpki.multacom.com/repo/MCOMCA/1/3138352e37372e3232342e302f32322d3234203d3e203335393136.roa
File:                     3138352e37372e3232342e302f32322d3234203d3e203335393136.roa (raw, json)
Hash identifier:          GYQ39POHYBMy7dix/79xPPN+mAtKYEZG+fKPKXJMaNk=
Subject key identifier:   F3:1B:B4:19:0C:AE:E5:3C:42:78:B2:A2:7E:35:C7:81:FB:29:59:8B
Certificate issuer:       /CN=f827056c07ea5582db063b6af62f8f3076237cd7
Certificate serial:       165EC0A6178B66ABD0D0B47C1420CE4905FEF2A2
Authority key identifier: F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/1/3138352e37372e3232342e302f32322d3234203d3e203335393136.roa
Signing time:             Thu 17 Sep 2026 19:16:57 +0000
ROA not before:           Thu 17 Sep 2026 19:11:57 +0000
ROA not after:            Thu 16 Sep 2027 19:16:57 +0000
asID:                     35916
IP address blocks:        185.77.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5e:c0:a6:17:8b:66:ab:d0:d0:b4:7c:14:20:ce:49:05:fe:f2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f827056c07ea5582db063b6af62f8f3076237cd7
        Validity
            Not Before: Sep 17 19:11:57 2026 GMT
            Not After : Sep 16 19:16:57 2027 GMT
        Subject: CN=F31BB4190CAEE53C4278B2A27E35C781FB29598B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:41:52:e1:48:e1:27:87:f3:af:16:3f:66:
                    78:23:45:a4:1e:00:bd:3c:f6:12:47:41:0b:73:2c:
                    ea:67:fb:06:72:9d:fd:42:a9:05:f5:42:d5:5a:01:
                    7b:9e:06:94:eb:da:75:37:d2:bd:04:6a:6b:5c:06:
                    64:c1:fb:56:51:8b:79:95:f1:a6:49:a0:dd:42:18:
                    f6:1b:4a:2e:01:a4:34:8a:7f:18:5f:b4:f8:96:80:
                    64:bc:16:fd:eb:21:fb:52:e0:03:b9:46:55:e3:05:
                    55:a8:bc:86:7e:9b:ee:b5:20:00:3d:bd:9f:bb:e9:
                    b2:e1:9e:85:6f:89:e2:b6:2f:68:5b:db:32:4e:b2:
                    b3:a6:78:5f:8e:98:42:dc:6b:36:d2:45:39:66:dd:
                    46:05:8b:36:82:ad:d1:71:4b:28:94:f2:99:6d:12:
                    6d:8f:32:1d:4f:1c:f9:1b:3f:0e:b4:b4:0a:fa:e0:
                    b5:6a:f1:5f:11:67:c7:51:bc:9d:f8:39:a3:af:0c:
                    99:63:50:26:1a:ee:37:88:d9:64:8d:e5:41:b4:e0:
                    28:50:54:75:06:2e:d0:14:7d:74:9b:b9:f8:ef:4c:
                    1b:fe:93:ba:57:99:60:27:58:54:81:6e:e0:eb:81:
                    37:79:fd:a3:63:94:8a:a1:9d:76:df:a0:94:31:45:
                    c4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1B:B4:19:0C:AE:E5:3C:42:78:B2:A2:7E:35:C7:81:FB:29:59:8B
            X509v3 Authority Key Identifier:
                keyid:F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/1/3138352e37372e3232342e302f32322d3234203d3e203335393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:cf:a5:6e:c2:17:c3:9e:0b:75:e2:27:fa:e2:c8:f8:4a:ab:
         e2:56:16:df:36:69:9a:07:18:10:14:59:37:26:95:71:7c:41:
         87:af:7a:09:ed:82:4f:26:7d:41:16:75:80:d5:fc:cf:15:43:
         b5:8c:9b:49:b0:1b:6a:c2:fe:24:ef:53:ae:9e:e2:21:2d:96:
         ed:1e:b5:41:47:db:39:0e:49:d2:c3:ad:df:e8:47:02:bc:cb:
         a5:27:df:e1:52:d5:da:a6:60:ad:e8:bf:82:7c:27:1f:42:c9:
         59:4d:e8:3f:b9:82:ac:76:18:f8:b5:b0:18:07:8f:5c:25:cc:
         9b:ab:9d:da:fd:96:31:c1:b3:d3:93:a1:51:8f:cc:40:f5:10:
         07:79:d9:10:8f:d4:2e:42:8f:46:f1:0f:b6:3d:7d:39:66:2e:
         d8:b4:fa:44:83:1c:93:24:60:6d:1c:ae:9f:a8:86:0f:da:4d:
         29:09:4c:58:b8:28:7a:75:c9:89:51:e5:96:e0:bd:2a:3d:61:
         c7:d6:93:92:55:44:ea:e1:64:46:f2:90:04:7c:c1:3c:44:80:
         da:69:b7:89:04:2c:a3:c1:bc:c9:7f:66:8f:70:c5:1f:9f:b7:
         c6:f7:42:c7:1f:83:0f:dc:85:c9:71:1d:21:81:cf:00:a8:42:
         57:50:09:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----