Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/pz5iKSS3DjXvuOKM5710xrPbd3k.roa
File:                     pz5iKSS3DjXvuOKM5710xrPbd3k.roa (raw, json)
Hash identifier:          BAQauhMx2S4URlRz7DXain/wmvSRTTI+4gS0hRToEQ8=
Subject key identifier:   A7:3E:62:29:24:B7:0E:35:EF:B8:E2:8C:E7:BD:74:C6:B3:DB:77:79
Certificate issuer:       /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial:       01987B996D87163581D14830DEC63941786A
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/pz5iKSS3DjXvuOKM5710xrPbd3k.roa
Signing time:             Tue 05 Aug 2025 18:58:29 +0000
ROA not before:           Tue 05 Aug 2025 18:58:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43278
IP address blocks:        2a06:1301:4350::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:99:6d:87:16:35:81:d1:48:30:de:c6:39:41:78:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
        Validity
            Not Before: Aug  5 18:58:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a73e622924b70e35efb8e28ce7bd74c6b3db7779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:98:25:67:e9:f2:e4:24:f4:ce:da:20:b2:
                    e3:a9:fb:77:27:d2:75:d0:dd:d7:08:78:d2:01:33:
                    65:81:3c:43:26:58:10:19:5d:5a:d2:0f:c6:44:02:
                    b4:f5:39:e6:75:24:9a:e3:b4:9a:90:86:95:35:41:
                    e0:48:76:a6:0a:ae:ad:41:d0:df:67:16:55:5f:c3:
                    aa:4f:1f:c2:17:5b:c8:54:6a:6b:c4:ea:b1:78:47:
                    60:7e:a0:b0:56:c2:68:a2:59:2e:96:73:8e:4b:ef:
                    76:53:20:b1:24:21:00:d9:69:ee:19:9e:ca:f6:ff:
                    a3:20:08:50:5c:8e:e8:3a:66:12:5f:3c:6c:29:0c:
                    7d:73:8c:6e:2a:4d:ab:2d:ea:66:82:b3:58:87:a9:
                    66:c1:5d:66:cb:79:5a:20:19:54:2f:f2:7a:f3:51:
                    7a:ab:4d:45:e1:1b:83:cc:ed:a0:a3:63:cf:ae:7b:
                    16:cb:3f:5c:ce:60:fb:2b:a5:db:2d:c6:75:28:3d:
                    5a:31:ba:be:f0:ec:a0:90:e0:6f:b9:cc:66:ad:6c:
                    d3:a8:14:28:3f:f7:95:72:fb:b0:d5:ad:25:8d:b1:
                    be:99:8c:48:31:ad:3b:e6:88:37:e9:d7:59:4c:70:
                    7a:e4:69:30:ea:01:fe:2b:d1:11:eb:41:60:13:e4:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3E:62:29:24:B7:0E:35:EF:B8:E2:8C:E7:BD:74:C6:B3:DB:77:79
            X509v3 Authority Key Identifier:
                keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/pz5iKSS3DjXvuOKM5710xrPbd3k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1301:4350::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:d9:98:b3:15:98:30:4e:e1:c3:a7:c9:9b:56:74:dc:c9:a7:
         6c:1c:93:87:76:6e:d2:22:11:78:cc:0a:65:eb:49:8f:f7:82:
         29:2c:47:db:df:d7:11:b2:68:ba:fb:d2:98:7b:b8:c7:d2:7e:
         6d:df:09:08:4e:77:f5:31:07:2a:79:c8:87:de:2e:de:18:d6:
         8d:ef:f1:20:52:f9:4d:ce:1b:db:54:9a:e4:20:25:88:69:12:
         6e:15:13:56:a7:ff:e3:57:a1:8e:e9:0f:0f:8e:e3:8d:d4:66:
         c6:2d:25:65:df:c2:30:c8:ad:bf:48:68:d5:4b:3e:7a:86:a8:
         b6:12:5e:76:bc:39:45:dd:f5:b8:9a:a9:e9:c2:b0:5e:b6:c9:
         64:44:33:25:3b:c4:37:7a:ae:86:6a:26:df:54:38:c1:be:ac:
         76:85:07:ac:65:dd:58:8c:e2:1c:05:8f:44:ef:27:d1:85:04:
         b8:12:49:ed:e1:73:c4:50:2f:e5:ad:75:86:8d:91:3a:a2:b0:
         b9:ba:4f:70:1d:08:f3:ed:ce:7e:60:7c:b7:90:d8:36:e4:af:
         17:3a:ed:de:8e:4a:fb:3f:a3:8a:ac:c3:61:44:99:c3:ce:91:
         66:ad:d6:d7:ab:50:8b:18:36:93:08:e1:42:1f:c5:aa:98:c6:
         60:c8:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:33:02 2025 by rpki-client