Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/gBo-R92ImstxPprBT8xyf5PF5ro.roa
File:                     gBo-R92ImstxPprBT8xyf5PF5ro.roa (raw, json)
Hash identifier:          ehOcdXMKXxl7qAMxAdqS/EYhNRFgKFvDwqQoTowHqqE=
Subject key identifier:   80:1A:3E:47:DD:88:9A:CB:71:3E:9A:C1:4F:CC:72:7F:93:C5:E6:BA
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       01A06AEB4C5DC2427D95DAF9CA584F839CF0
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/gBo-R92ImstxPprBT8xyf5PF5ro.roa
Signing time:             Fri 04 Sep 2026 05:36:40 +0000
ROA not before:           Fri 04 Sep 2026 05:36:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147281
IP address blocks:        46.233.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6a:eb:4c:5d:c2:42:7d:95:da:f9:ca:58:4f:83:9c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Sep  4 05:36:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=801a3e47dd889acb713e9ac14fcc727f93c5e6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:40:45:65:15:b2:1e:69:99:64:c0:df:75:
                    cb:61:0e:29:13:84:74:c3:82:78:68:87:2c:65:af:
                    9c:eb:b5:98:c9:54:b5:db:38:fe:6e:11:a9:33:d0:
                    82:87:f9:1c:63:ea:4d:a0:d5:e1:46:c4:ff:fe:19:
                    58:ae:da:27:6e:97:14:c1:42:f3:7b:03:2f:78:a5:
                    e1:7f:56:90:b2:ee:5a:cb:67:2a:55:19:7f:02:ee:
                    3d:ed:40:87:f3:22:ab:cc:b4:80:ed:3e:b2:bb:d5:
                    e2:bf:d3:f7:20:cc:ed:98:04:f1:00:25:50:ac:63:
                    6e:a6:5d:51:52:16:0d:dc:8d:a6:96:94:72:17:5d:
                    9f:6b:c7:1c:d5:23:c5:eb:32:dd:43:b7:74:0f:59:
                    5b:fd:22:a8:d3:55:ad:db:14:7a:cd:3c:5d:2c:dd:
                    1a:f2:1f:bc:ed:35:da:63:44:3a:c6:e7:2f:aa:e1:
                    c5:9b:60:b7:23:73:5d:93:d4:67:82:c1:55:2e:39:
                    b3:9c:5a:63:d7:4b:45:9d:db:4e:5e:41:29:c3:47:
                    5f:25:a1:4c:2c:69:04:8c:8d:96:bd:fc:68:a7:bf:
                    51:e3:bd:5f:f5:69:dc:80:f1:88:c2:5e:55:fb:97:
                    42:45:41:3b:9c:e7:e1:25:d3:21:4b:d8:67:09:da:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1A:3E:47:DD:88:9A:CB:71:3E:9A:C1:4F:CC:72:7F:93:C5:E6:BA
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/gBo-R92ImstxPprBT8xyf5PF5ro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.233.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:ec:13:02:d6:6c:1c:62:49:dd:97:85:1c:9b:60:ad:5a:
         59:7b:85:14:fb:74:9b:e6:dc:ea:15:04:d5:6b:0e:e9:3f:d5:
         78:59:dd:e9:b8:f7:66:0e:9b:54:1b:82:68:af:d4:01:36:04:
         fb:ea:b8:b3:0d:67:35:72:1d:85:4b:e4:08:78:81:37:16:95:
         20:c3:3f:6b:28:68:93:d6:79:56:6d:3c:ec:a9:cf:ed:91:0a:
         ba:7b:7e:59:48:92:e1:cf:30:b5:84:80:cd:a8:4a:91:bc:7e:
         06:e0:c8:c3:9f:b6:8f:d2:cc:71:32:95:45:1c:01:67:bc:e4:
         2d:fb:8b:35:e8:ed:10:e1:47:61:c3:a9:e5:5c:2e:db:00:1b:
         02:b6:5a:d3:f8:8e:af:c8:90:33:f3:b3:11:70:b9:36:b9:9c:
         4e:23:11:d5:33:e6:16:40:61:19:57:74:88:c7:c1:08:da:55:
         54:51:ce:7d:f9:02:25:50:96:5c:a8:a9:b9:9c:04:c5:c6:e3:
         0a:b1:e4:45:e8:aa:74:ee:82:62:ff:fa:2c:77:b1:20:0a:a4:
         a0:1d:4b:b0:49:dd:59:a1:8e:15:97:4b:3f:4f:e3:5e:54:8a:
         1e:54:87:34:a4:78:e0:d1:b7:43:2f:ab:df:8a:04:4f:ba:29:
         3b:b0:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:21:57 2026 by rpki-client