Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E-21jym4aOSMlWw3UaC0-3XFTJE.roa
File:                     E-21jym4aOSMlWw3UaC0-3XFTJE.roa (raw, json)
Hash identifier:          OL2DPdd2+qrVwLJmRwdKpmK9dI3Ve9QrZ4jVc6T9lGQ=
Subject key identifier:   13:ED:B5:8F:29:B8:68:E4:8C:95:6C:37:51:A0:B4:FB:75:C5:4C:91
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019EB5C9F97A77374E7E2ABD80EBB0E52A05
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E-21jym4aOSMlWw3UaC0-3XFTJE.roa
Signing time:             Thu 11 Jun 2026 08:26:12 +0000
ROA not before:           Thu 11 Jun 2026 08:26:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198487
IP address blocks:        31.57.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:c9:f9:7a:77:37:4e:7e:2a:bd:80:eb:b0:e5:2a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jun 11 08:26:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13edb58f29b868e48c956c3751a0b4fb75c54c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:4d:3a:5f:d7:d9:e1:b3:16:ce:45:e3:a2:
                    b7:46:72:dd:1b:04:5c:5b:23:03:b4:f3:29:a2:63:
                    ca:03:78:4e:d2:7e:a8:c4:56:c1:c5:d9:d3:59:7d:
                    42:30:f1:72:f3:16:75:d9:8c:b5:94:16:24:5e:2b:
                    5a:62:80:90:bd:4a:5c:a8:75:8e:ab:cc:ce:4d:a7:
                    4a:a6:4f:6b:f3:d0:dc:f7:52:00:8a:19:77:2a:cd:
                    a7:02:4b:c2:c0:41:52:1c:3f:ac:d3:05:77:32:16:
                    1c:e1:32:75:67:f5:11:ff:6e:56:10:1f:48:18:32:
                    32:26:6a:95:e0:d9:a1:f1:d2:06:19:be:fd:30:ed:
                    86:31:2a:5f:0b:51:04:40:82:b7:9b:3f:05:99:5f:
                    a3:0a:20:68:30:26:c8:35:12:b4:32:30:7f:61:e1:
                    3e:85:e4:03:2f:33:57:bb:f7:ac:f3:08:07:3b:c6:
                    b5:40:b2:91:47:d7:54:ce:38:56:c8:5a:32:9a:c3:
                    83:d6:8c:5b:22:d4:56:32:fe:cc:b2:f4:fc:c6:9f:
                    66:e8:fd:18:6d:bf:ac:96:0a:13:cf:c2:8f:1f:9e:
                    6d:75:d8:76:c6:d5:6a:16:fb:13:fc:48:c5:38:4f:
                    ac:49:91:d2:c0:16:7e:94:28:6d:7d:9d:3c:b7:9c:
                    73:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:ED:B5:8F:29:B8:68:E4:8C:95:6C:37:51:A0:B4:FB:75:C5:4C:91
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E-21jym4aOSMlWw3UaC0-3XFTJE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:03:44:3e:ac:1b:0f:c7:b7:6e:54:49:10:1d:3f:f4:c6:72:
         3b:0b:5c:62:2d:06:ab:73:c0:39:9d:44:31:59:68:ec:05:5d:
         d4:1b:3e:ba:87:4b:7d:42:4e:3c:c1:d6:55:8e:b4:7c:e2:d9:
         a6:02:01:3a:90:e5:81:ef:17:c3:91:87:4b:1b:56:b2:c5:82:
         24:18:ba:f3:fb:7d:f7:25:4c:41:73:4b:ad:b0:1a:14:55:f1:
         f4:86:1f:47:d2:63:ba:39:06:98:ec:1e:3e:ef:ca:6c:c6:84:
         4e:11:22:eb:5d:7c:23:96:bb:11:3f:0d:5c:e9:e3:31:09:00:
         a6:1b:3d:79:75:89:c6:1c:71:cc:1a:08:62:8e:03:a5:6d:99:
         d9:2c:1f:ce:57:20:bf:16:cb:85:af:41:6c:79:6b:32:09:80:
         b7:41:e2:4d:9b:a2:c4:de:80:56:ad:4f:b3:ad:f7:67:3e:97:
         b9:4b:be:e8:aa:6a:94:4b:a3:01:8c:f7:f9:6e:69:fa:5f:66:
         7f:ca:81:5f:a1:09:b0:3c:09:47:a4:1a:f4:05:ed:7b:a2:17:
         13:6d:f8:cf:e8:9f:0d:fa:af:28:9d:5b:31:70:7f:1a:e7:c0:
         bf:c8:d6:01:02:7a:cb:01:f8:51:96:9d:ed:4a:6f:64:2e:a1:
         f1:2a:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:27 2026 by rpki-client