Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202147.roa
File:                     AS202147.roa (raw, json)
Hash identifier:          /7aUZMmCPx5tgh/qcyrPClBQJRVTAsYk5DJedK0jqQw=
Subject key identifier:   C0:50:F3:86:0F:05:62:F5:B6:A3:1E:F7:9A:C9:2C:06:CA:50:F9:7B
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       0F6747BB89837FF61A3A2239442FAD69F94FAED1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202147.roa
Signing time:             Wed 28 Jan 2026 10:26:57 +0000
ROA not before:           Wed 28 Jan 2026 10:21:57 +0000
ROA not after:            Wed 27 Jan 2027 10:26:57 +0000
asID:                     202147
IP address blocks:        2a14:7581:ff0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:67:47:bb:89:83:7f:f6:1a:3a:22:39:44:2f:ad:69:f9:4f:ae:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Jan 28 10:21:57 2026 GMT
            Not After : Jan 27 10:26:57 2027 GMT
        Subject: CN=C050F3860F0562F5B6A31EF79AC92C06CA50F97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:89:0a:3f:29:ed:31:8e:97:0d:20:4b:7c:
                    37:bc:4d:6c:2d:3c:4b:b1:d4:f2:8f:ed:eb:bc:cd:
                    44:0c:a7:86:68:d1:b0:a2:c6:82:17:8a:ea:59:eb:
                    03:7a:b9:bd:89:36:df:76:db:a2:3b:b1:37:48:6a:
                    c9:c6:d5:32:fd:b5:96:06:aa:ab:31:c7:ba:7e:9b:
                    4d:71:48:32:7e:31:df:24:5f:2f:69:d7:a6:44:15:
                    dc:64:e6:02:5f:f6:3b:8f:5f:e3:be:ad:7c:42:c7:
                    7f:16:19:26:8e:2a:46:91:20:39:75:bc:82:76:c2:
                    dc:4e:9a:54:36:05:17:73:95:79:dd:0d:70:5a:af:
                    7d:d3:83:44:eb:b3:77:bb:2b:16:5e:c9:a6:a9:37:
                    06:15:3b:81:19:9e:6b:77:9a:37:23:ce:88:2e:03:
                    49:08:6c:11:f0:73:4c:f1:b0:04:6a:27:e0:44:36:
                    37:35:8f:10:fe:7f:ae:fe:13:74:16:a4:5b:de:fa:
                    44:59:22:56:9a:58:d4:36:8d:f3:f0:fd:db:c7:41:
                    bb:1f:14:d2:0e:6b:b2:bd:fe:ae:f1:d3:2f:a9:2f:
                    a7:60:a5:15:66:f8:9e:59:90:df:56:ef:6d:0c:3d:
                    60:6c:f7:d1:cf:87:0b:0e:b0:2e:f8:31:d7:19:0a:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:50:F3:86:0F:05:62:F5:B6:A3:1E:F7:9A:C9:2C:06:CA:50:F9:7B
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202147.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:ff0::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:3c:0a:09:3d:3d:0c:f5:2e:4d:6b:1f:f0:a7:f9:10:f7:99:
         3e:5a:e1:fb:99:22:c9:aa:0e:84:94:2d:56:ea:3c:10:35:91:
         67:e7:80:68:a1:a0:d2:22:e5:3c:9c:bf:ab:ae:ea:72:8b:57:
         0d:28:b3:70:0c:36:41:35:cf:e5:56:06:e8:fe:7d:a6:f6:dd:
         ee:c9:6e:bc:96:a7:37:c1:76:88:7a:9e:e0:c9:41:4a:23:e3:
         d3:ed:6d:9d:b5:eb:f2:3a:e3:f5:22:2e:4b:90:ca:e1:f8:4b:
         56:73:ca:10:23:08:83:91:7e:ea:55:a6:c3:f1:c2:da:dc:a2:
         6a:e9:b7:f7:14:f5:48:de:60:8c:de:2d:4e:98:be:2b:54:38:
         5a:28:6f:5e:e7:7e:ab:15:fa:44:94:47:47:b5:c2:78:90:ac:
         6d:32:72:70:fa:dc:89:b5:7b:98:f2:66:26:59:9e:62:ca:21:
         48:7c:69:e5:f5:ff:5b:63:fa:ff:26:fe:b9:f7:3f:7b:db:de:
         19:68:54:a6:b5:2a:16:3a:23:76:73:cf:db:8c:a4:ae:0e:8a:
         86:1d:40:73:cf:08:c6:80:db:7f:3d:b3:a6:48:d3:b4:9f:f3:
         c8:d2:24:fd:93:04:c0:36:1a:7a:7a:9a:69:71:54:cb:e6:08:
         a2:4d:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----