Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS49438.roa
File:                     AS49438.roa (raw, json)
Hash identifier:          873lKfo4meRWCCVyEdCHAhM8cazsOlqx+swvHHts1kY=
Subject key identifier:   22:9A:BF:18:E9:EE:E1:F5:D7:34:31:01:09:0E:83:57:0E:C1:FB:7B
Certificate issuer:       /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial:       73DBBEA476BA126FAD01EB72D303369B8B8ABAAC
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS49438.roa
Signing time:             Wed 16 Sep 2026 07:25:22 +0000
ROA not before:           Wed 16 Sep 2026 07:20:22 +0000
ROA not after:            Wed 15 Sep 2027 07:25:22 +0000
asID:                     49438
IP address blocks:        2a00:17f8::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:db:be:a4:76:ba:12:6f:ad:01:eb:72:d3:03:36:9b:8b:8a:ba:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
        Validity
            Not Before: Sep 16 07:20:22 2026 GMT
            Not After : Sep 15 07:25:22 2027 GMT
        Subject: CN=229ABF18E9EEE1F5D7343101090E83570EC1FB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e3:e8:dd:34:04:0a:c3:84:f1:bb:48:3d:de:
                    d9:f4:53:c6:28:fd:fd:ed:68:3b:d1:cb:14:01:54:
                    a2:5b:a3:35:b0:9f:ad:ac:3b:a1:e1:fa:11:53:19:
                    bc:a2:ea:0d:4d:45:f5:80:6e:bc:e3:be:d0:4d:4a:
                    b7:3e:36:17:e3:78:01:12:8b:e9:ce:a9:4b:19:67:
                    91:82:14:82:64:88:a2:b5:d9:0a:c7:66:e2:19:b5:
                    b7:44:13:1d:a4:ca:6a:e7:cd:f3:34:63:a8:d8:22:
                    e9:17:37:75:06:7b:28:9a:c5:a4:48:07:38:68:5d:
                    11:de:bc:57:1e:d9:b9:de:8f:6a:fa:f8:65:2c:fe:
                    b6:35:76:d6:b5:47:92:a3:6b:ef:a1:37:0a:8c:1d:
                    e1:3a:d3:db:a0:c7:2d:be:ce:e8:30:cc:2e:21:fb:
                    5a:1a:6e:66:a4:d6:ad:d0:35:29:f2:cf:11:62:06:
                    5f:ab:75:1f:67:e3:26:6a:de:39:56:2a:c8:ad:09:
                    c6:b9:4c:cb:9c:a7:2f:16:df:0c:13:e9:c2:29:5a:
                    7c:5b:fe:60:38:5a:93:ab:86:4a:0b:db:dc:a6:c1:
                    68:a1:cd:ab:c1:2e:80:3b:e2:e8:2e:19:9b:f9:17:
                    cf:47:96:a9:34:f4:00:37:48:e3:d0:55:2e:98:75:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9A:BF:18:E9:EE:E1:F5:D7:34:31:01:09:0E:83:57:0E:C1:FB:7B
            X509v3 Authority Key Identifier:
                keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS49438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:17f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:9e:1c:87:51:85:38:be:b2:4b:7d:d6:54:be:4b:e4:6a:a7:
         9c:f2:17:6c:06:d3:fe:e3:3a:d1:ea:15:d5:48:df:f8:9d:dc:
         e1:e3:d5:da:26:cf:50:fe:4b:d0:2a:87:73:a1:fd:86:bc:0d:
         53:27:d0:9f:7d:67:8e:e0:cc:d8:1e:0d:f7:14:96:d6:23:25:
         22:fb:52:fd:b4:3d:74:98:d1:9c:50:8f:14:73:c6:ef:56:41:
         f7:f7:fa:16:cc:81:8c:e3:cc:19:f1:64:5c:56:42:6a:4e:dd:
         43:95:ff:a2:14:3c:b2:b9:43:1b:61:f7:02:05:5f:02:09:7c:
         fe:5d:44:83:10:f3:25:9c:4a:c3:b3:1f:2e:c1:e6:39:56:b8:
         2c:95:00:a9:21:33:d8:40:db:ad:c2:bf:0f:a4:e7:31:c7:2a:
         2c:9e:f9:8d:b9:d3:73:d9:fb:ed:70:65:56:51:ee:c7:97:e8:
         0f:96:c3:77:fc:ff:f5:b7:b0:92:3b:6a:d7:59:87:33:35:a9:
         17:14:6f:75:c8:7e:03:e7:ba:87:12:2f:f5:cc:7c:07:4a:0a:
         33:c2:26:46:98:09:9c:96:1c:5e:1d:29:c9:3e:70:4b:4b:4f:
         e8:12:4c:77:b1:ed:de:c3:ed:69:10:9c:2e:47:59:eb:f3:d9:
         c7:f1:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----