Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa
File:                     9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa (raw, json)
Hash identifier:          zTkYPMu8h5Z/txGXaV3nKQYC/0+0sqJF536VnkSLAUQ=
Subject key identifier:   F4:C6:1F:6D:D1:2D:2E:3B:44:BA:8A:B8:07:53:9C:3C:62:00:B4:35
Certificate issuer:       /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial:       0199E1ABD3A6FCA1BADADFB1D66D4B99867A
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa
Signing time:             Tue 14 Oct 2025 07:42:38 +0000
ROA not before:           Tue 14 Oct 2025 07:42:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48045
IP address blocks:        46.46.64.0/18 maxlen: 18
                          94.240.128.0/22 maxlen: 22
                          94.240.132.0/24 maxlen: 24
                          94.240.133.0/24 maxlen: 24
                          94.240.134.0/23 maxlen: 23
                          94.240.144.0/20 maxlen: 20
                          2a09:65c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:e1:ab:d3:a6:fc:a1:ba:da:df:b1:d6:6d:4b:99:86:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
        Validity
            Not Before: Oct 14 07:42:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f4c61f6dd12d2e3b44ba8ab807539c3c6200b435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:27:0c:77:9f:2e:a6:b6:be:01:a2:06:57:
                    0a:9a:dc:13:6a:f5:65:84:62:79:ab:6b:00:a1:9c:
                    32:98:41:18:a1:8a:fc:35:ca:38:a3:51:4e:a5:b4:
                    97:e3:c2:63:4a:06:70:40:41:95:5c:db:dc:c5:36:
                    9a:4c:e4:35:1f:ca:ff:b7:db:b4:54:52:50:3f:d8:
                    d1:9d:20:8f:f6:d4:b8:e0:02:73:bc:c3:4e:d2:2f:
                    1f:7d:bd:da:51:9b:4c:00:2a:98:e7:45:cb:33:01:
                    0e:c1:cb:2a:ef:22:d6:e4:23:49:ff:05:bb:d2:39:
                    93:b2:22:5c:8b:b7:8a:ef:f9:c2:76:f7:83:7a:76:
                    9f:81:98:46:86:8a:bf:2c:fb:7d:7c:e8:98:ea:03:
                    af:e8:4f:e8:48:a6:67:45:49:a8:25:92:75:d0:30:
                    cd:a2:be:69:e8:c6:58:79:c4:9e:45:7e:48:e7:84:
                    b6:a2:ea:0e:11:bd:fe:6b:8c:6c:c6:73:79:df:41:
                    7f:2f:04:b4:d8:19:2a:a0:68:e5:96:9f:15:b4:f5:
                    c4:85:5b:7f:d7:61:2f:b8:d0:38:61:4c:fa:c5:b1:
                    a3:97:d0:11:f3:dc:01:73:ed:7c:e6:de:4e:49:63:
                    99:73:7d:11:74:5d:d5:10:18:2e:ac:09:11:d2:c5:
                    70:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C6:1F:6D:D1:2D:2E:3B:44:BA:8A:B8:07:53:9C:3C:62:00:B4:35
            X509v3 Authority Key Identifier:
                keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.46.64.0/18
                  94.240.128.0/21
                  94.240.144.0/20
                IPv6:
                  2a09:65c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:01:7b:33:dd:45:09:c1:e6:a2:70:f7:9d:c8:7e:4e:7f:dc:
         cc:64:30:a9:15:e0:0c:b9:71:cb:d6:7c:c4:00:1d:86:23:98:
         ab:d7:9c:e4:ed:91:0a:e6:89:27:f6:da:c7:92:d1:a0:55:07:
         cf:f5:75:ce:92:c8:57:71:65:05:45:aa:dd:95:f3:d1:67:ce:
         7c:62:af:47:51:92:6f:22:59:0e:b7:28:21:61:f2:3e:59:a0:
         02:ba:65:e5:71:12:86:65:7c:1f:61:e1:f4:2a:3c:7b:f6:31:
         e3:35:1a:bd:41:ed:7c:83:45:e3:f5:24:d9:3d:53:ba:39:97:
         7e:96:47:1c:6f:c5:21:47:c3:21:7e:04:24:48:9b:05:f5:89:
         bb:8d:c7:e1:80:f7:a7:ae:8a:df:58:99:b7:b9:8c:84:94:c3:
         3f:14:54:02:17:15:0e:df:70:36:b3:77:d4:79:c7:74:f7:a5:
         d7:ec:f0:f3:1d:a2:2c:c4:03:e8:0a:94:8e:50:f2:da:49:85:
         ff:e0:47:35:ee:e7:7f:7d:7c:b6:37:44:28:f8:c7:16:ca:d8:
         19:1a:04:26:12:fa:af:30:37:f7:79:82:77:d1:57:b3:91:d3:
         91:8e:6e:5f:a1:a9:9c:6c:8e:78:3a:5b:6b:e9:6c:1a:b0:86:
         a9:a6:6f:d7
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZnhq9Om/KG62t+x1m1LmYZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5
YzBjODAwHhcNMjUxMDE0MDc0MjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGM2MWY2ZGQxMmQyZTNiNDRiYThhYjgwNzUzOWMzYzYyMDBiNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGQnDHefLqa2vgGiBlcKmtwTavVl
hGJ5q2sAoZwymEEYoYr8Nco4o1FOpbSX48JjSgZwQEGVXNvcxTaaTOQ1H8r/t9u0
VFJQP9jRnSCP9tS44AJzvMNO0i8ffb3aUZtMACqY50XLMwEOwcsq7yLW5CNJ/wW7
0jmTsiJci7eK7/nCdveDenafgZhGhoq/LPt9fOiY6gOv6E/oSKZnRUmoJZJ10DDN
or5p6MZYecSeRX5I54S2ouoOEb3+a4xsxnN530F/LwS02BkqoGjllp8VtPXEhVt/
12EvuNA4YUz6xbGjl9AR89wBc+185t5OSWOZc30RdF3VEBgurAkR0sVwpwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFPTGH23RLS47RLqKuAdTnDxiALQ1MB8GA1UdIwQY
MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt
MDQxYWIzMDJjMmY5LzEvOU1ZZmJkRXRManRFdW9xNEIxT2NQR0lBdERVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2QtMDQxYWIzMDJjMmY5
LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGLi5AAwQD
XvCAAwQEXvCQMA0EAgACMAcDBQAqCWXAMA0GCSqGSIb3DQEBCwUAA4IBAQA8AXsz
3UUJweaicPedyH5Of9zMZDCpFeAMuXHL1nzEAB2GI5ir15zk7ZEK5okn9trHktGg
VQfP9XXOkshXcWUFRardlfPRZ858Yq9HUZJvIlkOtyghYfI+WaACumXlcRKGZXwf
YeH0Kjx79jHjNRq9Qe18g0Xj9STZPVO6OZd+lkccb8UhR8MhfgQkSJsF9Ym7jcfh
gPenrorfWJm3uYyElMM/FFQCFxUO33A2s3fUecd096XX7PDzHaIsxAPoCpSOUPLa
SYX/4Ec17ud/fXy2N0Qo+McWytgZGgQmEvqvMDf3eYJ30VezkdORjm5foamcbI54
Oltr6WwasIappm/X
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:51 2025 by rpki-client