Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/dzp90agq2vvBJsLkpxE0l28RmS0.roa
File:                     dzp90agq2vvBJsLkpxE0l28RmS0.roa (raw, json)
Hash identifier:          TkQPgCCuKHshtjm85sZCsOI0GrifQVYAf/Ejb921RBY=
Subject key identifier:   77:3A:7D:D1:A8:2A:DA:FB:C1:26:C2:E4:A7:11:34:97:6F:11:99:2D
Certificate issuer:       /CN=919d1279a586fa6998bac29e4a762d69c647913f
Certificate serial:       01A067465F9921A063751F88A6E83D1F48E7
Authority key identifier: 91:9D:12:79:A5:86:FA:69:98:BA:C2:9E:4A:76:2D:69:C6:47:91:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kZ0SeaWG-mmYusKeSnYtacZHkT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/dzp90agq2vvBJsLkpxE0l28RmS0.roa
Signing time:             Thu 03 Sep 2026 12:37:40 +0000
ROA not before:           Thu 03 Sep 2026 12:37:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214608
IP address blocks:        212.47.41.0/24 maxlen: 24
                          2a06:afc0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kZ0SeaWG-mmYusKeSnYtacZHkT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:67:46:5f:99:21:a0:63:75:1f:88:a6:e8:3d:1f:48:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919d1279a586fa6998bac29e4a762d69c647913f
        Validity
            Not Before: Sep  3 12:37:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=773a7dd1a82adafbc126c2e4a71134976f11992d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:92:a8:34:9e:d5:3f:1c:0d:48:24:02:b3:0f:
                    f4:7a:ef:fa:5a:21:d8:10:ff:7c:82:32:19:9e:5a:
                    46:35:9c:80:4f:39:38:97:3a:2b:d0:05:23:9d:54:
                    21:76:be:43:33:09:86:91:70:3b:14:ef:97:8c:ff:
                    e4:d3:04:62:03:45:0b:28:b5:15:ba:74:f4:aa:5b:
                    e0:21:a8:78:ed:6c:34:f5:63:df:bd:99:e8:bc:b4:
                    95:fd:09:d0:f6:82:ea:2c:04:4f:49:5f:fb:ef:ed:
                    58:52:8b:19:f1:0c:a4:a8:7c:54:85:47:22:1b:28:
                    84:35:29:ec:c8:5c:68:15:f9:70:4c:85:25:0c:54:
                    71:b5:da:07:35:69:10:1e:9e:16:3d:db:7b:ef:05:
                    0f:e5:78:30:e3:b1:32:a8:58:59:5b:75:66:1d:bb:
                    89:c0:0f:94:ea:9b:bc:c9:76:4c:af:18:d2:10:ad:
                    b7:12:72:4f:76:95:77:00:16:28:03:37:01:70:d6:
                    cf:53:4c:dc:bd:32:2f:4f:9e:b5:bc:8f:ef:cd:34:
                    8a:4c:c0:a8:05:4d:d0:2c:5f:0d:2b:cd:61:38:08:
                    82:42:86:c3:14:6d:a3:67:18:f9:dc:98:97:20:ba:
                    fa:4b:31:05:31:d3:64:ba:e8:e9:17:59:b0:28:df:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3A:7D:D1:A8:2A:DA:FB:C1:26:C2:E4:A7:11:34:97:6F:11:99:2D
            X509v3 Authority Key Identifier:
                keyid:91:9D:12:79:A5:86:FA:69:98:BA:C2:9E:4A:76:2D:69:C6:47:91:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZ0SeaWG-mmYusKeSnYtacZHkT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/dzp90agq2vvBJsLkpxE0l28RmS0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.47.41.0/24
                IPv6:
                  2a06:afc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         41:37:26:f3:33:5a:24:14:3a:8b:e5:b7:31:ca:aa:6c:13:0f:
         1f:5d:69:3e:03:82:03:ae:a3:82:d3:d4:a5:2a:83:76:a1:67:
         ca:dc:c0:b6:c2:cb:3c:2e:27:66:75:78:60:a6:d8:61:b9:a3:
         c0:75:b8:7f:d1:b8:a5:fa:0c:7c:c9:e9:f0:26:2d:9a:0a:d8:
         f5:5a:53:15:68:05:0a:e6:61:07:12:4a:37:c4:5c:58:6d:8c:
         9e:2f:37:c5:6f:6e:98:76:4e:60:12:07:a6:97:72:be:1e:f4:
         3c:26:46:ad:f1:52:dc:45:e1:10:12:f2:c9:ea:ed:98:b9:2d:
         20:70:21:86:a7:42:bd:50:35:92:e1:ea:8e:5b:f4:fe:a4:1d:
         1d:5f:69:77:7c:00:f4:5c:a3:4f:5a:a0:e3:67:f2:70:e3:67:
         51:5c:4e:25:3a:2a:a2:15:ed:9d:3e:36:a9:45:2a:4f:15:e9:
         a6:a0:60:e0:8d:68:9f:ff:4d:3b:3c:34:95:2b:93:45:7e:c1:
         cd:19:52:d0:9f:4a:dc:c8:63:a4:a0:05:12:83:90:d5:dd:ca:
         e6:5c:2f:05:3f:37:ec:2b:0c:7b:9b:21:96:de:fd:6d:0b:e3:
         07:0d:d5:27:67:84:2b:35:67:61:a3:f2:a3:3c:bc:5f:c3:f4:
         39:87:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----