Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS15830.roa
File:                     AS15830.roa (raw, json)
Hash identifier:          2DAeXkv0yVYQB//h0dGaxS0oAC3WTPGfcBXjrDtH2eU=
Subject key identifier:   69:37:72:A0:3A:34:0B:BC:C0:39:75:A8:5D:5A:68:2D:CE:04:09:09
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       7372A27F6B15914BF67A6DFF0F030E52896EA477
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS15830.roa
Signing time:             Sun 20 Sep 2026 21:15:47 +0000
ROA not before:           Sun 20 Sep 2026 21:10:47 +0000
ROA not after:            Sun 19 Sep 2027 21:15:47 +0000
asID:                     15830
IP address blocks:        84.75.168.0/24 maxlen: 24
                          2a13:9500:15d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:72:a2:7f:6b:15:91:4b:f6:7a:6d:ff:0f:03:0e:52:89:6e:a4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Sep 20 21:10:47 2026 GMT
            Not After : Sep 19 21:15:47 2027 GMT
        Subject: CN=693772A03A340BBCC03975A85D5A682DCE040909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:f9:35:32:a6:aa:26:b5:45:0f:e1:96:d3:
                    b4:06:dc:f7:98:45:16:8a:97:9c:9b:2f:64:09:63:
                    7f:e4:07:44:9c:2d:55:15:9e:0a:12:f6:da:7f:7c:
                    f2:8e:89:67:b0:64:69:a9:c2:6b:83:19:fc:16:e7:
                    f4:f3:06:88:c3:ae:c5:fe:2f:23:11:a5:22:39:89:
                    59:27:a9:c8:68:c8:a0:b2:c9:8b:92:4d:6e:5d:0c:
                    ce:7d:aa:ce:e0:18:ff:81:31:54:8b:1e:3d:fd:8a:
                    72:39:33:ce:4f:8e:9a:b2:5b:de:22:6a:f2:a2:98:
                    65:90:58:c0:c0:42:6b:b3:d8:86:28:9b:d8:00:7a:
                    df:15:19:d1:ae:ec:9d:3d:d6:0e:f2:8b:a8:f1:c5:
                    9b:f8:ef:99:fd:b0:90:89:14:65:82:b1:2a:6a:20:
                    5a:a2:b3:a9:e2:90:b4:28:75:ee:a0:33:2b:63:82:
                    6a:75:e5:51:64:d1:c8:7e:11:cc:1e:7d:78:8f:25:
                    37:17:a5:d0:c0:8d:b3:74:97:a7:d6:ae:e3:f7:40:
                    c7:15:45:61:25:4b:ab:f0:17:dc:3f:ba:e3:13:ee:
                    c7:34:8b:ac:a8:ed:92:1f:98:97:71:69:c1:fb:03:
                    f4:ea:4f:17:e9:df:01:2e:41:87:c2:ef:38:5c:2e:
                    6d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:37:72:A0:3A:34:0B:BC:C0:39:75:A8:5D:5A:68:2D:CE:04:09:09
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS15830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.75.168.0/24
                IPv6:
                  2a13:9500:15d::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:1c:53:84:47:8e:09:37:fb:df:91:74:c3:6d:0f:91:a7:59:
         28:da:9e:7d:d9:e8:3e:3e:35:41:08:68:2c:04:31:c1:3c:c7:
         bd:cd:63:8b:94:d9:7b:02:b3:09:bc:d0:e1:40:23:b4:06:dd:
         4f:e8:20:f4:d4:73:a4:d7:60:00:a3:86:2f:84:e9:58:d9:6b:
         14:5b:3a:c5:e9:f4:dc:73:71:1b:ed:6d:4d:26:38:8f:70:ae:
         20:65:5e:24:8d:f0:eb:a5:36:0a:04:b3:f0:fa:25:9c:1a:10:
         7f:fa:51:6f:1e:21:73:34:62:3b:36:81:b7:53:a5:d2:1e:8d:
         46:ad:4c:b5:b8:03:24:4c:c2:a1:2b:b0:37:ac:fb:e1:0d:0c:
         02:f4:25:b3:0c:f6:75:2a:23:28:8e:04:38:92:da:2d:c4:06:
         5c:cd:db:e8:2b:af:1d:5d:aa:c1:62:cc:8d:a4:16:a9:5b:9b:
         45:68:a8:02:a9:7a:e0:f8:04:22:f2:68:e8:e5:64:1e:27:16:
         03:f6:ab:97:ea:12:13:c7:6f:bc:e6:ee:42:25:69:af:1b:ce:
         91:0b:fd:71:95:06:9a:4e:9f:13:06:e1:1d:75:31:e5:03:05:
         6f:52:d0:3f:23:c2:ed:2f:f0:9b:a9:00:82:c3:39:b6:2c:83:
         f6:5e:a3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----