Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31312e302f32342d3234203d3e203232333633.roa
File:                     33312e362e31312e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier:          DEKcEMYT/mit08PsdruDuG40yy/4jW5YdtS+GL0S91s=
Subject key identifier:   3B:88:FD:86:1A:74:FD:9F:E3:EB:AD:F5:3F:64:83:79:88:F4:B6:F3
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       40ED50539D5927A1EC92FCDBFE2095D39351A2E0
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31312e302f32342d3234203d3e203232333633.roa
Signing time:             Mon 04 Aug 2025 06:54:13 +0000
ROA not before:           Mon 04 Aug 2025 06:49:13 +0000
ROA not after:            Mon 03 Aug 2026 06:54:13 +0000
asID:                     22363
IP address blocks:        31.6.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ed:50:53:9d:59:27:a1:ec:92:fc:db:fe:20:95:d3:93:51:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Aug  4 06:49:13 2025 GMT
            Not After : Aug  3 06:54:13 2026 GMT
        Subject: CN=3B88FD861A74FD9FE3EBADF53F64837988F4B6F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:d2:bb:b7:9f:72:9c:6e:6f:cb:9f:2e:44:
                    c8:15:ae:31:c6:e0:34:c4:b8:cd:ae:dc:17:cd:c7:
                    8f:24:22:cb:e5:6a:df:55:67:df:ee:e0:8e:d9:87:
                    09:cc:55:17:04:9d:e9:25:7e:80:6d:ac:08:6b:e9:
                    39:da:52:4e:3b:02:3b:4a:03:c0:5b:e2:58:62:05:
                    7a:d1:d9:10:a9:b7:65:2b:59:da:d4:68:8a:2b:1e:
                    2e:34:39:54:b9:f9:18:b9:40:21:49:36:3a:6b:60:
                    93:ea:c5:0b:12:59:21:9c:5e:12:5c:1b:b6:be:8b:
                    43:0c:3f:fc:f4:26:06:96:5d:ee:57:ce:35:f5:00:
                    59:64:ce:66:a0:b9:ee:f7:75:cc:c3:18:f6:4b:ba:
                    ed:40:b9:99:95:d3:85:e6:41:69:1a:5d:01:8d:df:
                    a4:df:d6:5a:03:bc:e5:f4:5c:6c:df:ea:b6:62:35:
                    dc:c3:41:9a:0f:10:91:b0:08:8f:51:24:4b:9c:a3:
                    1a:40:68:e1:17:03:32:0c:fe:8f:b8:ea:fb:89:ee:
                    c2:94:98:6f:39:c3:ba:2f:95:4c:e6:f6:ea:76:cb:
                    e5:ce:27:a3:29:06:20:8d:ea:7f:95:2b:c2:04:2f:
                    bf:c8:63:9c:67:31:6d:1a:85:74:05:34:8a:be:19:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:88:FD:86:1A:74:FD:9F:E3:EB:AD:F5:3F:64:83:79:88:F4:B6:F3
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31312e302f32342d3234203d3e203232333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:1a:0c:81:ba:23:08:a7:85:e0:24:e3:30:e6:8b:5f:3d:eb:
         4e:46:7b:51:8d:5e:77:0a:12:3f:cd:ee:6f:f2:a4:6d:99:6c:
         69:e5:f0:ed:0e:c2:bc:43:54:df:36:b2:72:16:9f:97:46:e2:
         9d:ff:cf:4a:e8:97:c5:42:0c:83:ad:85:78:e2:8a:fe:64:e0:
         d9:67:e9:b3:72:37:dd:de:9b:0f:90:3e:13:65:b7:ef:51:9e:
         1f:25:49:40:35:03:40:08:0a:09:73:df:31:ca:fa:6d:23:db:
         b0:7b:08:80:6f:68:de:72:55:a7:fa:7f:81:fd:d5:c4:f6:68:
         4c:5b:03:ba:c4:a9:9f:6c:7d:b9:f2:0f:31:69:b9:78:b6:70:
         e0:a2:2c:b8:b9:5f:9a:73:33:52:22:d2:6c:e3:c3:47:4d:b2:
         7d:50:14:1a:00:d9:ed:f7:9e:e0:57:e0:86:0a:70:75:78:5d:
         49:61:a1:fa:b3:66:21:0f:d7:aa:c2:a8:ca:96:b1:bb:1a:83:
         0c:5b:7f:a8:1c:f9:04:c5:db:0c:a7:74:f7:8f:41:81:4b:31:
         34:83:89:19:1f:8c:1f:9c:31:e4:32:32:28:23:77:f6:53:a6:
         68:05:4e:a0:f7:cb:d9:39:69:3b:50:20:70:96:c3:df:9d:0d:
         b1:8c:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:54:35 2025 by rpki-client