Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152320.roa
File:                     AS152320.roa (raw, json)
Hash identifier:          25EFkw67RzQpCPTJwJL8K5Osw0tKyjKFgdKH5vDt+dA=
Subject key identifier:   A1:5C:8E:DA:9A:4C:0E:E0:FB:0E:79:E4:58:69:B5:94:9D:8F:7F:D6
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       1DA09760EBA735F7D6F2CFDE0485B7D721C2687F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152320.roa
Signing time:             Mon 31 Aug 2026 13:27:16 +0000
ROA not before:           Mon 31 Aug 2026 13:22:16 +0000
ROA not after:            Mon 30 Aug 2027 13:27:16 +0000
asID:                     152320
IP address blocks:        84.75.202.0/23 maxlen: 24
                          2a13:9500:1ce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a0:97:60:eb:a7:35:f7:d6:f2:cf:de:04:85:b7:d7:21:c2:68:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Aug 31 13:22:16 2026 GMT
            Not After : Aug 30 13:27:16 2027 GMT
        Subject: CN=A15C8EDA9A4C0EE0FB0E79E45869B5949D8F7FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:48:86:72:ec:9e:88:df:a8:b6:a4:52:8b:
                    e8:73:af:34:96:23:b9:85:c7:e2:35:88:35:58:a8:
                    55:82:54:9f:c4:21:19:6c:c5:ab:f5:49:86:ca:91:
                    2f:1f:3a:bc:6e:3e:2c:b4:36:8e:d6:c5:bf:76:24:
                    ea:cf:b7:5e:a0:c7:85:c0:5e:dd:24:e8:3e:6f:12:
                    83:55:51:f4:93:a6:6c:e6:26:a6:8a:d6:5d:92:c3:
                    fc:db:65:6d:ae:ed:9e:6e:6f:a2:38:04:cd:bd:da:
                    4a:03:b9:87:81:ba:e8:5e:cb:c0:ba:ba:7e:8d:16:
                    c8:61:fd:e1:08:13:7f:21:c9:2a:a6:10:42:7b:73:
                    f4:bb:13:6f:d2:8b:48:d8:c8:ce:f8:fa:48:a5:7d:
                    fa:17:2b:14:55:f1:8f:39:c0:79:d8:fb:b8:b8:7c:
                    57:54:16:b5:43:8f:5d:89:fa:37:84:43:b6:c3:39:
                    41:0c:09:ca:9d:bb:11:61:0f:b8:aa:c1:27:e8:b2:
                    fa:64:13:9c:de:ad:d0:86:af:9a:5d:0d:14:d6:a9:
                    38:7c:b5:7b:18:33:ba:a8:68:dd:bd:f1:6a:e0:8a:
                    11:f9:0f:50:f1:0d:40:9b:0f:db:ce:5f:4c:1d:73:
                    83:25:28:61:b8:83:4c:35:3c:34:aa:b0:40:a3:f7:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5C:8E:DA:9A:4C:0E:E0:FB:0E:79:E4:58:69:B5:94:9D:8F:7F:D6
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152320.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.75.202.0/23
                IPv6:
                  2a13:9500:1ce::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:d7:f8:eb:e7:59:01:ff:9a:de:4c:4d:4b:4d:71:75:28:12:
         ad:ec:30:e9:a3:d8:c1:f8:85:72:01:33:1f:11:f0:ba:64:00:
         02:fc:ca:2f:13:12:1a:eb:c6:00:3d:90:36:52:9b:78:14:c9:
         9b:f1:08:86:ae:01:4f:e5:74:a7:69:6e:76:69:e4:6a:cb:0a:
         f1:01:7d:4d:3e:cc:b6:ea:7f:04:27:d5:30:43:94:04:27:5b:
         45:a4:ab:db:83:b3:82:cb:55:a5:2a:00:6a:8c:52:37:47:ae:
         98:5a:65:48:f1:d4:66:54:e3:7c:ec:d2:44:1f:63:e8:a1:01:
         0e:7c:e9:ca:e8:8a:f4:45:15:fc:e2:b8:53:16:dc:aa:4b:dc:
         d6:56:c8:36:aa:53:59:ae:bf:f8:a4:a5:1b:7c:7b:20:d0:b2:
         3d:ac:7e:71:62:eb:72:b7:ee:69:1a:7e:e2:e1:f7:ab:c3:51:
         72:46:5c:07:b9:fa:38:2a:b6:96:6f:25:d8:57:c8:65:4b:68:
         d7:14:81:b1:42:2b:13:91:e3:60:3f:7c:be:72:ea:f3:84:dc:
         7e:45:80:e4:79:bc:26:b9:71:13:4d:b2:72:64:4a:6a:98:3f:
         5e:b4:22:4c:87:cf:17:29:e7:9b:b1:35:71:b5:4e:76:0c:26:
         14:b8:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----