Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4UiTAxPeF4dReWRz1skn_A53VgY.roa
File:                     4UiTAxPeF4dReWRz1skn_A53VgY.roa (raw, json)
Hash identifier:          XGn4dl1ajy9GdSi4NO39g/FTQVZ7QcnSWnUBG7TuD68=
Subject key identifier:   E1:48:93:03:13:DE:17:87:51:79:64:73:D6:C9:27:FC:0E:77:56:06
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019953624F274A25704F844139536F2ED3E5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4UiTAxPeF4dReWRz1skn_A53VgY.roa
Signing time:             Tue 16 Sep 2025 16:36:15 +0000
ROA not before:           Tue 16 Sep 2025 16:36:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        45.135.183.0/24 maxlen: 24
                          103.245.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:53:62:4f:27:4a:25:70:4f:84:41:39:53:6f:2e:d3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Sep 16 16:36:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e148930313de178751796473d6c927fc0e775606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:e5:12:fd:ae:57:f3:97:10:b7:cd:e8:eb:
                    5e:b1:ac:95:7c:81:66:92:bc:4e:78:d8:56:19:16:
                    26:b5:48:b2:a1:ad:9e:f6:b6:bf:0c:52:01:fe:4a:
                    c7:c5:35:a5:34:a9:7e:50:5b:28:f1:3c:61:e3:c1:
                    3d:ab:29:33:7a:17:bf:b3:bd:9c:e3:a6:93:af:55:
                    82:ca:b2:7a:ba:68:00:f4:42:ee:f2:2f:1f:f7:6c:
                    75:ee:94:6f:da:c3:90:a9:2e:d3:a1:19:7d:be:3d:
                    7c:98:a1:cf:43:a0:51:3f:70:a6:20:71:39:09:68:
                    67:70:6c:90:69:a1:b8:87:1e:b6:e9:5f:70:74:ba:
                    33:9b:8b:e3:0c:82:48:fd:c8:c1:57:5c:5f:38:04:
                    70:13:c4:0e:9e:81:ea:de:9d:9f:7e:92:55:a9:d8:
                    53:91:83:e2:db:ae:3e:ee:75:5e:91:82:7b:25:11:
                    02:a7:a0:f8:1d:65:41:2b:7d:42:10:43:cb:70:da:
                    11:36:b9:f1:d5:61:52:a3:9c:90:40:49:93:1c:d1:
                    77:3e:40:43:94:08:2e:70:97:95:5c:90:4c:53:4b:
                    5f:e1:ac:a2:85:5d:28:08:21:52:73:f2:f0:4f:47:
                    e2:ea:3e:46:7d:b1:96:30:ba:f2:fe:35:85:58:eb:
                    2d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:48:93:03:13:DE:17:87:51:79:64:73:D6:C9:27:FC:0E:77:56:06
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4UiTAxPeF4dReWRz1skn_A53VgY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.183.0/24
                  103.245.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:30:57:db:0b:64:f8:65:6e:2c:b4:36:11:bd:04:44:73:c6:
         c2:cb:32:58:6a:8e:ef:ed:06:5a:34:9b:2b:f8:36:56:75:fe:
         56:9d:1b:aa:58:d7:4b:a7:73:68:a0:26:11:68:a1:26:d6:b6:
         18:31:0d:83:0a:7f:b7:34:ee:33:0d:8b:86:07:53:77:8c:e3:
         8d:5c:34:fd:b6:1c:90:24:de:2b:a0:eb:71:de:89:14:15:af:
         c0:b5:ce:94:8d:05:0a:c7:6d:12:41:a6:1e:f1:26:02:8e:aa:
         bb:3b:ec:05:fd:1f:48:30:48:5c:63:85:f6:a5:e0:c5:23:ff:
         ab:d6:99:79:09:00:38:bf:f4:89:f7:b3:ba:8b:bc:6c:22:ea:
         07:7b:f3:a1:df:27:19:cb:c9:e7:0f:df:37:78:71:7f:bc:90:
         bc:6a:92:65:8d:18:68:89:03:c7:23:0f:02:aa:be:89:50:b9:
         9a:1d:48:c5:a3:b1:88:7a:38:db:fb:f1:66:18:13:47:ca:e6:
         e3:63:56:3c:e0:4c:19:4d:d3:34:f9:8d:7c:f9:b4:5e:39:61:
         c8:d7:ea:4d:25:72:bc:f7:bb:04:45:5e:41:52:3e:23:3b:5e:
         8c:32:f0:ea:dd:36:20:43:85:75:45:6e:10:41:a5:86:b2:38:
         3f:92:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:43 2025 by rpki-client