Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3235312e302f32342d3234203d3e20313336373837.roa
File:                     34352e38352e3235312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          ThO9ZFFkrLK0WiURr/Y3gVnwyWwnS+BI/az1/K2lU0w=
Subject key identifier:   9C:36:64:0D:55:B7:1E:8C:FA:DA:83:4C:8F:87:49:B2:B9:60:EB:45
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       419DE81969F63935CCAF009DE31199BAC90E994C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3235312e302f32342d3234203d3e20313336373837.roa
Signing time:             Wed 30 Jul 2025 14:46:59 +0000
ROA not before:           Wed 30 Jul 2025 14:41:59 +0000
ROA not after:            Wed 29 Jul 2026 14:46:59 +0000
asID:                     136787
IP address blocks:        45.85.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9d:e8:19:69:f6:39:35:cc:af:00:9d:e3:11:99:ba:c9:0e:99:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Jul 30 14:41:59 2025 GMT
            Not After : Jul 29 14:46:59 2026 GMT
        Subject: CN=9C36640D55B71E8CFADA834C8F8749B2B960EB45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3b:c1:11:00:15:54:01:b6:34:c3:11:fa:b4:
                    cd:aa:f3:f7:da:dc:2d:01:7c:a9:8c:63:5d:af:e6:
                    2f:dd:77:3c:57:56:74:72:54:58:35:1f:8e:ae:99:
                    c0:58:2a:29:20:0f:34:c4:61:55:7b:0f:b0:c5:6b:
                    c3:75:e6:75:2b:da:a5:10:6b:df:37:3b:b3:b9:87:
                    a6:9f:85:95:34:c0:74:da:1e:fc:71:b2:e4:67:fd:
                    e0:f0:14:0b:01:53:43:61:6d:f0:db:77:65:d9:fc:
                    84:5a:ec:24:fc:34:4c:6a:35:32:44:59:a5:ec:a6:
                    06:3c:2e:72:f1:d6:1b:0a:21:d7:05:3c:3a:c3:b5:
                    82:b1:c6:61:f9:ed:e2:44:89:a9:5d:05:be:e5:57:
                    67:e6:8e:37:fc:aa:91:eb:57:f9:46:93:e5:bf:82:
                    6e:85:cb:b0:a9:9f:af:4a:93:c2:20:c2:88:23:a4:
                    6e:be:7c:95:c5:72:6d:be:ea:06:55:84:cc:f5:55:
                    8c:26:5a:b1:57:1d:44:a7:a4:42:f1:ba:14:36:60:
                    95:ff:76:65:a0:04:27:d0:7a:0a:f8:12:f8:fb:09:
                    be:2d:57:c4:92:b0:46:25:0c:28:76:a1:89:6c:1f:
                    7b:ec:91:02:4a:d2:bb:75:b5:97:25:52:93:cb:3a:
                    69:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:36:64:0D:55:B7:1E:8C:FA:DA:83:4C:8F:87:49:B2:B9:60:EB:45
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3235312e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ac:76:01:55:7e:e8:a7:0b:25:df:43:cb:ef:a9:76:7c:c5:
         90:22:e7:1e:e9:0e:3f:78:0f:47:9d:4b:d3:6a:b0:a1:c7:15:
         7d:fb:ba:ae:af:0c:e0:6c:56:3b:c9:49:f0:7f:9a:be:bb:0c:
         33:4c:a3:86:4d:92:95:27:d1:9a:3f:4f:fd:59:73:d4:31:d8:
         f5:e1:d5:48:59:43:a6:43:c2:68:a0:b2:87:3e:5b:e1:78:59:
         86:ed:72:10:83:1b:29:3a:56:d3:0e:b6:71:0e:55:7b:3e:6f:
         51:31:2d:85:e6:7f:b7:20:de:db:3a:d9:b3:52:e9:a8:ca:f9:
         08:84:23:bc:51:4f:41:93:b6:81:a7:bc:84:37:3f:de:c6:6e:
         44:af:0e:a8:11:52:fc:52:88:51:d0:06:2f:a6:66:ec:c9:99:
         c4:b0:af:01:5b:18:3c:bf:0c:4b:45:d5:8a:64:ed:22:88:b5:
         09:f8:bb:08:ae:f1:d7:aa:54:da:00:0a:fc:8a:28:75:8e:56:
         0d:a3:fd:67:e4:48:32:51:00:4f:a0:a9:fc:eb:eb:7d:61:47:
         e4:56:dd:ad:46:86:44:c2:cc:58:ca:04:33:af:45:b4:9c:57:
         9b:57:98:72:6f:de:16:68:d7:c0:06:83:d1:0a:91:72:fd:47:
         2a:ae:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:14 2025 by rpki-client