Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210376.roa
File:                     AS210376.roa (raw, json)
Hash identifier:          ATVhqyignKltfaPO5HG0iGt/shr14gKv9cpQ+s2/Sds=
Subject key identifier:   83:86:40:CA:26:D8:9F:8D:B8:A9:8B:20:9F:DB:56:98:6D:F9:15:D8
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       71B40DF94C7B6B5F97B0E766E8E66C0614A04B2F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210376.roa
Signing time:             Fri 25 Jul 2025 08:07:46 +0000
ROA not before:           Fri 25 Jul 2025 08:02:46 +0000
ROA not after:            Fri 24 Jul 2026 08:07:46 +0000
asID:                     210376
IP address blocks:        2a0f:85c1:29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b4:0d:f9:4c:7b:6b:5f:97:b0:e7:66:e8:e6:6c:06:14:a0:4b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Jul 25 08:02:46 2025 GMT
            Not After : Jul 24 08:07:46 2026 GMT
        Subject: CN=838640CA26D89F8DB8A98B209FDB56986DF915D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:8c:ba:9e:ed:9b:7e:e5:12:cc:ee:22:94:
                    fa:90:78:cf:79:a1:2f:47:77:b8:8d:72:45:b7:df:
                    c1:58:7a:b8:37:f8:f5:b0:44:f8:b3:08:8a:7f:0a:
                    0b:8f:58:aa:71:19:3f:d2:1c:cd:b4:08:05:71:2d:
                    a4:ef:e2:bd:74:e2:4e:80:e3:df:eb:0e:1b:a4:ce:
                    72:ee:85:bc:27:68:33:04:91:1a:77:92:ad:f4:61:
                    ca:bc:14:93:0d:95:61:3e:50:8b:1a:bf:b8:e6:1f:
                    2d:71:38:0f:73:5a:56:7c:33:52:ae:c9:f5:3a:6f:
                    a3:46:52:b5:60:26:7f:fd:0d:0d:ce:59:44:18:47:
                    9b:a0:4a:cb:65:6e:98:7d:32:b7:91:d7:89:cb:ef:
                    fc:9f:7c:5e:9b:75:61:6f:5e:bc:0d:c9:7e:d1:a8:
                    e3:35:1c:25:b6:26:dd:de:1f:48:87:53:c9:e5:90:
                    ee:24:f0:b0:95:da:f5:8f:fa:46:20:56:b3:2d:50:
                    cd:ac:e7:db:f2:df:09:cf:b2:3c:97:7e:26:09:f7:
                    71:36:4f:cb:9b:02:9d:ce:e7:d6:89:8b:3f:7c:aa:
                    8a:5a:0c:ea:f0:e7:20:89:fe:0d:02:5b:0f:3e:de:
                    7c:4b:f0:49:51:c6:14:54:5c:88:0b:c2:7a:33:2f:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:86:40:CA:26:D8:9F:8D:B8:A9:8B:20:9F:DB:56:98:6D:F9:15:D8
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210376.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:29::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:c1:b9:ec:31:99:89:7a:ed:53:6f:82:0b:f9:c4:b9:a8:1c:
         31:01:21:84:23:4b:c3:e8:92:06:74:ce:50:ff:2b:ff:5f:f8:
         ad:22:8d:61:31:6f:d7:0c:b9:89:a6:5d:da:b6:21:8f:09:b6:
         57:e0:4d:b5:0a:44:40:9d:2c:6d:70:18:d4:ca:d9:f5:15:1b:
         0f:bd:28:36:34:1b:a1:83:c9:5a:82:66:c9:b9:5f:0c:2d:24:
         22:7c:da:85:e8:3f:9c:df:5d:f7:f0:1b:30:8f:13:4f:59:1b:
         f0:8e:1c:6b:7f:f4:0a:1a:90:21:76:90:d4:1e:14:7e:ae:3c:
         c2:92:bb:9c:09:14:3b:e1:26:a9:7a:a4:da:4d:e1:22:e3:ca:
         5c:9e:ee:96:45:b9:80:a6:38:0a:30:b6:36:91:98:2f:bb:18:
         32:7b:ef:c3:e2:f3:3a:be:2a:e8:32:00:4e:7f:b7:34:8e:3c:
         4b:24:8e:75:0a:c1:e6:01:20:dd:e6:96:49:dd:78:c4:33:a0:
         53:2c:52:75:a2:20:39:d7:f1:c0:64:21:a6:87:49:d1:b0:7f:
         25:06:b2:b3:a5:46:a9:b8:11:73:84:d1:d3:2e:3c:ed:9f:e7:
         f4:e5:5e:07:00:b7:40:21:66:32:dc:c3:cf:cb:75:5f:07:c8:
         b8:60:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:21:20 2025 by rpki-client