Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36322e302f32342d3234203d3e20323132323338.roa
File:                     36322e3134312e36322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          PPNA7P9CiS8XJH4Q/EvsAC++fdcMz/hUQFup/n6n6/8=
Subject key identifier:   7A:F2:59:EB:C7:B4:FE:01:E6:3C:E5:2D:2B:6B:29:E8:20:91:6C:B9
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       1CD8016B9FE579C8604D2B071AA53367D7A42270
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36322e302f32342d3234203d3e20323132323338.roa
Signing time:             Wed 04 Jun 2025 08:07:22 +0000
ROA not before:           Wed 04 Jun 2025 08:02:22 +0000
ROA not after:            Wed 03 Jun 2026 08:07:22 +0000
asID:                     212238
IP address blocks:        62.141.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 18:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d8:01:6b:9f:e5:79:c8:60:4d:2b:07:1a:a5:33:67:d7:a4:22:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: Jun  4 08:02:22 2025 GMT
            Not After : Jun  3 08:07:22 2026 GMT
        Subject: CN=7AF259EBC7B4FE01E63CE52D2B6B29E820916CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:f0:d4:62:41:78:e0:46:06:8b:54:ee:7e:
                    fa:79:55:d6:69:19:19:25:4c:6b:c7:a3:40:af:1d:
                    06:36:42:bd:94:91:4a:2f:da:a6:46:e3:ec:73:1e:
                    5c:e6:f8:16:0f:84:47:19:7d:87:5e:4b:e0:11:d6:
                    5b:4b:d0:6b:e4:ce:e0:a7:6d:be:37:2f:0f:ae:df:
                    2c:14:6f:8e:4f:6e:03:f7:2f:1a:a7:83:df:8b:7b:
                    9f:94:c8:81:70:78:7b:cf:9c:dc:b1:71:27:07:d9:
                    a0:b0:1f:ec:7b:a7:df:43:3f:5e:2c:08:52:f3:32:
                    a8:41:f1:5f:7a:d7:15:c0:47:22:9b:36:63:49:78:
                    f8:bd:67:66:c7:d4:66:01:ed:7d:8b:63:35:8f:46:
                    38:c5:bb:e3:21:fb:6c:81:5c:79:83:04:0d:de:b3:
                    05:c8:7d:fc:d7:98:95:a6:6c:5b:f8:5c:09:6d:40:
                    35:3a:2e:b3:3f:57:bb:45:97:61:6a:87:d7:97:7c:
                    e3:a6:63:2f:a6:35:aa:8f:0d:a6:f3:25:78:27:48:
                    17:48:a3:5f:72:57:5b:6a:18:c5:9d:bc:a4:47:a6:
                    fb:24:38:cd:8f:41:45:48:dd:13:80:9d:08:dc:40:
                    f5:4d:df:64:31:24:af:0a:3a:73:7b:d5:ab:5d:42:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F2:59:EB:C7:B4:FE:01:E6:3C:E5:2D:2B:6B:29:E8:20:91:6C:B9
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36322e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.141.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:90:1f:89:c7:3d:24:9d:17:b1:45:4f:8a:9a:1f:c4:3c:4b:
         23:e7:7e:5e:e2:75:ab:6d:61:83:a8:0a:ba:cb:52:0b:cb:e5:
         45:4d:cd:a2:63:4c:39:8d:f9:ea:dd:3b:7b:7f:6b:f5:56:22:
         8c:f5:d3:f2:6e:de:57:aa:14:50:8d:ff:b2:d4:19:3b:03:eb:
         27:f5:c9:eb:69:ea:b2:5b:6d:6b:79:1d:0e:7d:65:f4:9c:d6:
         a2:b2:6f:3b:8b:08:cd:cc:9d:e5:e0:96:d5:28:01:e2:6e:70:
         6a:7f:64:7b:1c:1a:b4:95:41:50:72:9d:94:d3:41:ee:00:1a:
         ea:04:2e:a1:2c:7e:7e:bc:63:0e:c8:ba:e6:17:fc:df:79:bc:
         81:87:8a:6d:34:6f:cf:4b:02:df:c8:fd:7b:04:0d:7d:97:f5:
         cc:59:01:79:43:78:dd:46:52:79:1e:8c:a2:ec:78:c6:b2:12:
         01:44:a0:3a:5e:6d:44:26:1b:55:6f:68:fa:76:26:19:b4:82:
         6b:af:a4:8f:4d:80:1b:a0:74:80:05:fa:0e:db:f0:ad:af:4d:
         95:e1:e9:02:b4:4f:9b:0d:63:a9:88:3a:99:22:f9:47:03:ec:
         29:e8:63:83:3b:8f:fe:fa:56:95:78:9a:6a:f1:8b:5f:15:ed:
         d5:9b:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:21:15 2025 by rpki-client