Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/EO5i7XgL8HgpGKrrfP_OHTIzESk.roa
File:                     EO5i7XgL8HgpGKrrfP_OHTIzESk.roa (raw, json)
Hash identifier:          kQDD3J3t7/eY+ugPuQ4HzoyTGI45kHmBTVlQHWf2nrs=
Subject key identifier:   10:EE:62:ED:78:0B:F0:78:29:18:AA:EB:7C:FF:CE:1D:32:33:11:29
Certificate issuer:       /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial:       01A0B84E3BC020E2DD0A5D7543C368A5D9A9
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/EO5i7XgL8HgpGKrrfP_OHTIzESk.roa
Signing time:             Sat 19 Sep 2026 06:15:29 +0000
ROA not before:           Sat 19 Sep 2026 06:15:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209978
IP address blocks:        2a06:9801:156a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b8:4e:3b:c0:20:e2:dd:0a:5d:75:43:c3:68:a5:d9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
        Validity
            Not Before: Sep 19 06:15:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=10ee62ed780bf0782918aaeb7cffce1d32331129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:3b:22:98:7a:b0:07:c7:f1:45:bf:4c:42:
                    f5:eb:03:a3:cc:12:4f:26:f2:f3:7d:47:63:97:70:
                    93:e4:7a:a4:48:db:d7:92:9d:1b:54:a4:e1:f6:70:
                    8e:c5:1b:c6:ae:6b:e7:98:43:d9:7e:63:08:d2:04:
                    b1:c5:e2:9c:29:b9:5c:4d:fc:64:fa:65:6d:42:a3:
                    8e:88:4c:8d:3a:fd:dc:6a:87:1e:f4:5d:f6:c2:b3:
                    c5:ea:e1:04:b8:35:38:15:61:8e:8e:63:de:20:09:
                    83:60:43:f5:83:0a:fb:f0:c5:89:4c:16:c9:96:4e:
                    4b:94:f1:03:6b:ec:fc:ff:7f:10:1b:fd:63:0f:9c:
                    ce:4f:b6:41:01:85:12:ae:81:f0:0a:9e:88:00:8b:
                    f8:4b:d0:86:8c:4b:63:78:2e:49:7a:4b:3b:50:a0:
                    45:d2:34:6c:bb:2c:1a:c1:1b:3c:39:06:60:70:b6:
                    ef:58:0b:bb:13:51:ad:97:f4:14:da:2e:67:42:57:
                    45:88:83:b2:74:0c:6d:a1:20:71:ec:1c:3f:54:2d:
                    ef:0d:66:ca:f4:2d:cb:53:97:5d:07:6f:b3:bb:31:
                    e1:17:5b:9d:75:f7:ee:1f:6c:24:25:31:cf:ad:55:
                    6a:ff:c9:78:17:79:5b:de:65:5b:b9:a9:e6:fd:51:
                    0b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EE:62:ED:78:0B:F0:78:29:18:AA:EB:7C:FF:CE:1D:32:33:11:29
            X509v3 Authority Key Identifier:
                keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/EO5i7XgL8HgpGKrrfP_OHTIzESk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9801:156a::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:d1:2c:68:76:a3:48:35:28:fe:76:17:2e:14:c5:df:e4:46:
         77:c8:05:7b:f8:59:b5:e0:64:5d:50:ba:bd:d9:07:1d:d8:c9:
         06:b4:47:a9:73:bf:45:92:c0:4a:18:04:77:a4:c2:30:d5:96:
         f7:c9:c8:75:f6:69:b5:9c:ab:2a:64:cd:cf:98:41:1d:b3:e1:
         70:e7:d4:5d:ab:97:d9:88:f3:55:20:91:4c:a5:d9:e3:f5:25:
         50:8f:3a:bb:c7:eb:51:79:6d:2c:3c:8d:40:1f:85:25:d7:3a:
         3b:74:c3:34:26:0e:06:6d:a8:df:46:b7:90:c2:81:75:76:81:
         a1:9f:ba:d3:3c:70:d5:c2:22:ed:52:24:f6:9d:a7:3a:4b:d1:
         d4:2f:bc:8f:88:71:86:3e:bf:77:c7:6e:54:60:bc:49:8d:09:
         45:e1:38:f7:6a:72:2b:49:39:33:26:7d:83:56:d6:45:cd:24:
         60:22:51:e2:ad:74:db:99:2b:58:1d:40:52:94:8a:f0:0d:bf:
         3c:81:04:1f:94:71:d9:62:fe:9e:a0:b2:68:a5:b8:27:1d:1b:
         9d:db:c4:d7:fa:13:ec:af:a9:ce:1f:5e:f4:4f:a5:9b:a2:95:
         9a:45:8a:58:e3:c5:74:d8:10:73:82:91:5b:4c:a5:e1:ff:5c:
         86:45:d1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----