Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/vbSkw4Arzq8j_A_7_eTb9Uhr9yk.roa
File:                     vbSkw4Arzq8j_A_7_eTb9Uhr9yk.roa (raw, json)
Hash identifier:          xhwOdLfAiXhH5IfFXepqmzE3AX5XcEJOZ9p2seaEDJE=
Subject key identifier:   BD:B4:A4:C3:80:2B:CE:AF:23:FC:0F:FB:FD:E4:DB:F5:48:6B:F7:29
Certificate issuer:       /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial:       01985FDD8242A91CCC36374B0A065F1FD8A9
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/vbSkw4Arzq8j_A_7_eTb9Uhr9yk.roa
Signing time:             Thu 31 Jul 2025 09:43:28 +0000
ROA not before:           Thu 31 Jul 2025 09:43:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213541
IP address blocks:        89.184.0.0/21 maxlen: 24
                          89.184.30.0/24 maxlen: 24
                          89.184.31.0/24 maxlen: 24
                          193.222.251.0/24 maxlen: 24
                          193.223.69.0/24 maxlen: 24
                          193.223.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5f:dd:82:42:a9:1c:cc:36:37:4b:0a:06:5f:1f:d8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
        Validity
            Not Before: Jul 31 09:43:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bdb4a4c3802bceaf23fc0ffbfde4dbf5486bf729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5f:75:10:87:18:a6:87:66:3d:34:27:c9:2e:
                    f4:72:92:dd:c2:2e:ff:bd:16:7a:18:aa:84:1e:08:
                    99:b8:64:ed:fa:41:eb:c0:b4:d0:d8:82:e7:ec:38:
                    f8:17:c3:9a:1f:2d:bb:bb:e7:2f:61:f0:5d:57:60:
                    51:a1:d4:bf:de:97:7c:3f:41:65:9a:ed:a3:aa:84:
                    90:1a:35:55:02:ae:9c:2c:2b:d4:fa:0e:8d:20:0d:
                    1d:b0:1b:d1:85:0a:2e:c3:27:28:2d:3c:70:18:e9:
                    3f:7f:84:c9:e4:97:11:63:e6:90:c8:7f:0b:eb:cb:
                    2a:e2:d5:8b:a1:52:10:8f:6a:e4:d8:e9:04:52:cc:
                    d9:0f:22:39:b0:58:ed:43:ec:bb:b0:39:aa:3d:64:
                    f4:6c:ed:ba:ca:55:51:74:c1:6f:1c:d6:39:9a:f1:
                    69:4c:97:8b:03:b1:db:97:6a:cb:cf:4c:72:64:22:
                    5e:d8:d1:08:96:71:63:f9:64:00:b7:ef:b9:fe:95:
                    cf:1c:cd:22:8a:89:a5:25:a5:39:91:a2:75:53:14:
                    c5:cb:70:a1:50:2c:53:22:ab:5d:d8:c4:c5:2a:c4:
                    75:2b:2b:9c:a6:a3:d1:d2:73:6f:8b:09:26:3c:f6:
                    a1:51:00:6f:29:5d:c4:f9:b1:87:f6:32:b1:de:f4:
                    df:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B4:A4:C3:80:2B:CE:AF:23:FC:0F:FB:FD:E4:DB:F5:48:6B:F7:29
            X509v3 Authority Key Identifier:
                keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/vbSkw4Arzq8j_A_7_eTb9Uhr9yk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.184.0.0/21
                  89.184.30.0/23
                  193.222.251.0/24
                  193.223.69.0/24
                  193.223.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:1d:c7:c4:1b:a2:86:74:80:15:14:7d:b6:4e:a1:a3:0c:
         fc:11:e9:4f:00:10:36:55:a9:e2:ce:46:74:d7:57:61:4a:62:
         79:9f:46:57:ff:a2:7e:9d:c6:cb:8f:80:de:45:db:c6:2d:65:
         d1:04:43:51:27:57:75:ed:dd:db:ab:f6:d2:10:8b:c7:07:f7:
         4b:8c:f7:da:fd:a9:0b:6d:94:87:eb:27:da:c4:24:4a:1e:9d:
         fd:91:6a:b4:d0:c2:61:29:34:9a:e6:88:25:af:3c:5c:94:ea:
         1a:d7:c6:f6:cd:db:ac:71:6d:db:a2:d6:fd:11:e3:09:33:f6:
         23:fc:75:bb:0e:15:08:81:e7:cf:6c:0e:55:c0:09:ab:2f:3e:
         3c:8e:78:48:af:5c:bc:2d:32:9b:88:99:a6:8f:d6:e7:d0:fe:
         42:84:57:ff:8a:1c:69:a0:2c:17:33:08:18:d9:d7:e0:69:5e:
         e6:d6:17:11:3e:4c:52:75:62:c7:9a:ca:62:ce:3a:fd:11:05:
         55:e2:e2:cc:c7:a8:fa:e1:c5:a1:a7:8a:d7:cf:ef:4b:c9:0e:
         63:33:50:47:72:18:9d:7b:a2:4b:4c:44:24:77:46:1a:51:a1:
         de:f1:29:30:57:41:71:e6:92:1e:c7:1a:6c:b5:df:b8:90:08:
         c4:8f:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:00 2025 by rpki-client