Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LmykzobOm4ZoWkfYQKQ87bb2UYI.roa
File:                     LmykzobOm4ZoWkfYQKQ87bb2UYI.roa (raw, json)
Hash identifier:          18G0tzCZeEKE15/EY4Lb950WlR4zuZ5hHxXPdjicv9Y=
Subject key identifier:   2E:6C:A4:CE:86:CE:9B:86:68:5A:47:D8:40:A4:3C:ED:B6:F6:51:82
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019855E15F2E9EEC9FB9A29FC4D7B2B51E9D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LmykzobOm4ZoWkfYQKQ87bb2UYI.roa
Signing time:             Tue 29 Jul 2025 11:11:30 +0000
ROA not before:           Tue 29 Jul 2025 11:11:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211881
IP address blocks:        94.183.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:55:e1:5f:2e:9e:ec:9f:b9:a2:9f:c4:d7:b2:b5:1e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jul 29 11:11:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2e6ca4ce86ce9b86685a47d840a43cedb6f65182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:bb:78:98:53:7d:56:40:6b:be:ca:f6:7a:
                    78:4f:a7:6b:21:3b:c9:58:3a:00:3b:d8:c9:5c:fd:
                    17:78:54:ae:a0:5a:24:74:9f:26:d8:e1:a3:b3:25:
                    0a:51:84:19:b4:89:c0:3d:21:99:fe:c8:36:d5:34:
                    85:7d:0c:23:df:d5:a1:7b:c8:0f:8b:d2:fd:1b:d2:
                    e5:6d:9c:b0:3b:d8:1d:72:21:47:ce:13:ac:ca:22:
                    8e:22:bb:32:ee:f0:45:fa:10:ab:3c:af:59:a6:e1:
                    82:86:fb:e1:00:f8:06:17:03:74:25:42:76:c7:02:
                    2f:91:87:09:bd:b3:30:da:4c:5d:1a:9f:95:fa:ad:
                    e2:ae:bd:03:66:55:07:80:6f:ed:e1:8e:5a:d7:ac:
                    d2:b4:1d:85:9d:a2:17:49:a9:cd:a3:32:2c:e5:0b:
                    29:7f:26:0e:20:4d:4d:de:19:37:2e:8b:1a:e6:6b:
                    1a:3a:b7:aa:9e:81:df:0f:f8:b7:85:7a:b5:e4:5e:
                    41:06:a1:0e:d0:25:cc:18:b8:17:71:5a:f5:8d:cd:
                    b4:4a:f8:6e:7d:88:db:47:da:d5:fe:14:e7:0a:e7:
                    c6:de:26:7f:a7:58:94:9d:d9:1e:83:97:d5:1e:7d:
                    8e:a1:e2:c9:f9:32:71:15:e4:df:cc:e6:73:8d:07:
                    16:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6C:A4:CE:86:CE:9B:86:68:5A:47:D8:40:A4:3C:ED:B6:F6:51:82
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LmykzobOm4ZoWkfYQKQ87bb2UYI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.183.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:cb:8a:7a:5a:30:41:32:06:d9:84:a4:3e:6b:82:14:db:be:
         6c:4b:f1:f1:6f:57:a9:bb:80:e0:40:89:39:dc:05:2e:0d:f2:
         a6:9d:e7:78:48:7f:4b:77:b5:cc:8a:84:e8:65:53:b8:d0:32:
         e7:c8:2c:f2:1f:63:8c:88:71:91:58:bc:5e:5b:a8:8f:6f:ea:
         9f:12:d7:44:14:20:e2:43:a9:67:ce:ff:ee:6a:ea:d9:62:f2:
         e4:ca:c5:ef:95:ed:ca:42:b4:43:91:02:68:de:7c:ba:d7:41:
         33:e3:7f:0c:4c:6a:9f:03:41:da:12:c8:b1:f1:72:05:52:9e:
         e1:c0:4a:60:06:cc:74:e5:15:be:b9:bf:da:9d:c4:29:7e:55:
         8f:55:39:96:8e:e5:05:92:02:32:24:4d:0d:be:00:6a:02:50:
         a8:6b:c5:7d:71:34:46:07:18:c8:73:37:14:86:9b:a4:76:f1:
         83:0a:94:df:0a:14:25:a5:1f:89:4c:8e:65:e9:c3:2d:70:0c:
         3c:e4:0b:c3:41:5b:e9:a8:18:1b:16:54:8e:56:30:28:15:37:
         69:71:8e:27:93:cf:e0:e6:26:26:e1:a7:81:18:91:a8:62:0e:
         35:9f:42:a9:a7:42:95:d5:18:9f:e3:c3:40:0d:47:0e:1c:b0:
         b5:02:4c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:18:51 2025 by rpki-client