Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lUScd1q-8HJMFWgaC4Wtuksyggk.roa
File:                     lUScd1q-8HJMFWgaC4Wtuksyggk.roa (raw, json)
Hash identifier:          103Kp33DDjoa2BV5Lil0r1FAOGUyGyN57pD3Hr/Bqz4=
Subject key identifier:   95:44:9C:77:5A:BE:F0:72:4C:15:68:1A:0B:85:AD:BA:4B:32:82:09
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       01983CF8589C1D5F6872CD9FBC8608149EB8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lUScd1q-8HJMFWgaC4Wtuksyggk.roa
Signing time:             Thu 24 Jul 2025 15:06:05 +0000
ROA not before:           Thu 24 Jul 2025 15:06:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3320
IP address blocks:        206.245.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3c:f8:58:9c:1d:5f:68:72:cd:9f:bc:86:08:14:9e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jul 24 15:06:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=95449c775abef0724c15681a0b85adba4b328209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:55:93:d3:dc:a6:a8:7a:27:4a:5d:cb:6a:
                    a5:fe:66:15:6b:d5:e5:68:6a:52:8e:b9:0a:dd:1b:
                    24:bb:03:8c:d3:45:d3:a1:e6:4c:f8:8c:3a:4d:43:
                    16:c1:44:d1:7f:89:57:51:b7:29:e2:36:43:ea:6d:
                    dd:e3:7d:71:5a:9c:4b:40:c1:ed:d3:24:ee:53:ba:
                    b1:28:31:8a:03:7b:b7:db:8b:17:ae:2d:37:a9:43:
                    35:fe:13:86:24:02:09:14:39:da:78:20:6a:9a:bb:
                    d7:df:34:84:7c:9f:40:a2:f7:73:52:cf:bd:3b:0f:
                    2e:79:cf:87:d1:35:ca:d1:fd:15:d0:20:09:a9:3a:
                    24:ea:ca:09:aa:4c:32:24:5b:09:33:ab:f2:c9:14:
                    67:32:9d:ab:27:3f:9f:4b:e6:6c:7f:56:8f:54:41:
                    70:11:db:ed:5a:d0:88:d3:5d:00:1e:81:16:4c:4b:
                    f1:75:46:d5:c7:d7:e9:f3:68:60:fc:08:76:4d:44:
                    9e:b5:a0:07:2a:5b:8e:8b:3d:88:3c:6a:48:69:29:
                    d8:be:00:ba:71:55:5b:77:b0:b0:5f:ff:d0:18:b9:
                    0d:a0:90:7b:5b:df:e3:40:67:68:b7:03:bc:59:e2:
                    a8:23:bb:d9:bf:dc:28:f3:ae:c2:b0:e0:41:a5:5c:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:44:9C:77:5A:BE:F0:72:4C:15:68:1A:0B:85:AD:BA:4B:32:82:09
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lUScd1q-8HJMFWgaC4Wtuksyggk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.245.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:18:0e:8e:21:39:5f:36:b6:70:2f:3b:f6:99:01:72:a8:72:
         54:76:a2:b9:32:f4:94:ae:96:22:65:1d:2e:ee:a4:cf:19:eb:
         72:2e:db:f4:bd:9a:43:2e:a8:f9:cd:90:88:de:b0:53:36:32:
         b0:54:0f:21:9d:87:3a:eb:6b:76:8e:36:a2:f2:e6:0b:21:d5:
         0b:40:72:c8:42:9f:3c:b2:b8:f1:d8:ff:1e:d2:41:57:5e:36:
         1a:6a:d4:7d:a4:e3:04:8d:c2:3b:9e:6c:3a:1a:87:50:22:d1:
         fa:bf:0b:f9:20:6c:c0:35:37:3f:40:76:ba:86:6c:5b:ac:0c:
         9f:b2:8b:f4:0c:cd:60:54:cc:b3:8c:ae:ad:df:af:73:7f:d0:
         28:c9:08:02:d6:bd:d9:90:ce:b5:8a:94:02:a7:61:bb:ce:b2:
         8e:e0:28:5a:cb:1f:a6:30:62:75:93:c4:95:e7:7c:4c:78:00:
         28:ef:70:0f:a2:6b:74:6c:98:d9:8b:77:bc:e1:f4:f7:18:9c:
         ba:36:d8:a1:bb:38:31:81:f2:61:f0:98:3a:1e:3d:15:28:56:
         b0:de:04:08:3a:27:a9:d6:4c:8d:6e:bd:51:a0:57:bc:ce:02:
         b8:1d:f2:0a:6d:db:da:66:76:e8:3c:f9:ce:4f:83:04:ad:ea:
         8b:fd:53:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZg8+FicHV9ocs2fvIYIFJ64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwNzI0MTUwNjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTQ0OWM3NzVhYmVmMDcyNGMxNTY4MWEwYjg1YWRiYTRiMzI4MjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXRVk9Pcpqh6J0pdy2ql/mYVa9Xl
aGpSjrkK3RskuwOM00XToeZM+Iw6TUMWwUTRf4lXUbcp4jZD6m3d431xWpxLQMHt
0yTuU7qxKDGKA3u324sXri03qUM1/hOGJAIJFDnaeCBqmrvX3zSEfJ9AovdzUs+9
Ow8uec+H0TXK0f0V0CAJqTok6soJqkwyJFsJM6vyyRRnMp2rJz+fS+Zsf1aPVEFw
EdvtWtCI010AHoEWTEvxdUbVx9fp82hg/Ah2TUSetaAHKluOiz2IPGpIaSnYvgC6
cVVbd7CwX//QGLkNoJB7W9/jQGdotwO8WeKoI7vZv9wo867CsOBBpVxf4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJVEnHdavvByTBVoGguFrbpLMoIJMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvbFVTY2QxcS04SEpNRldnYUM0V3R1a3N5Z2drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWeMA0G
CSqGSIb3DQEBCwUAA4IBAQAkGA6OITlfNrZwLzv2mQFyqHJUdqK5MvSUrpYiZR0u
7qTPGetyLtv0vZpDLqj5zZCI3rBTNjKwVA8hnYc662t2jjai8uYLIdULQHLIQp88
srjx2P8e0kFXXjYaatR9pOMEjcI7nmw6GodQItH6vwv5IGzANTc/QHa6hmxbrAyf
sov0DM1gVMyzjK6t369zf9AoyQgC1r3ZkM61ipQCp2G7zrKO4Chayx+mMGJ1k8SV
53xMeAAo73APomt0bJjZi3e84fT3GJy6NtihuzgxgfJh8Jg6Hj0VKFaw3gQIOiep
1kyNbr1RoFe8zgK4HfIKbdvaZnboPPnOT4MEreqL/VMe
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:16:16 2025 by rpki-client