Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5ZTJIsVlYBbN8QE0psP3eruCJE8.roa
File:                     5ZTJIsVlYBbN8QE0psP3eruCJE8.roa (raw, json)
Hash identifier:          Wqzy3xo9cCno52L7iKUirVfI5PFJbyhq8GDcxsARVoM=
Subject key identifier:   E5:94:C9:22:C5:65:60:16:CD:F1:01:34:A6:C3:F7:7A:BB:82:24:4F
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0199A07FA165727F6A57E836C9E483128074
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5ZTJIsVlYBbN8QE0psP3eruCJE8.roa
Signing time:             Wed 01 Oct 2025 15:59:02 +0000
ROA not before:           Wed 01 Oct 2025 15:59:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     13347
IP address blocks:        167.17.32.0/21 maxlen: 21
                          167.17.41.0/24 maxlen: 24
                          167.17.42.0/23 maxlen: 23
                          167.17.44.0/23 maxlen: 23
                          167.17.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:a0:7f:a1:65:72:7f:6a:57:e8:36:c9:e4:83:12:80:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Oct  1 15:59:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e594c922c5656016cdf10134a6c3f77abb82244f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:91:86:85:3a:cd:46:79:81:7a:54:d9:54:
                    58:b3:d2:fb:a4:6a:ba:ca:53:a2:f5:e2:04:67:68:
                    36:70:ba:38:41:89:64:89:d6:ea:06:da:fd:01:a4:
                    84:6a:f3:aa:09:e8:47:03:bf:7e:28:96:3d:b9:ee:
                    4c:a2:a3:cc:10:db:dc:26:40:26:05:10:ba:23:bf:
                    0f:a4:ba:a7:45:d5:01:9a:e5:60:eb:19:12:b2:33:
                    bd:96:1e:4f:62:ba:1e:f6:09:28:29:6e:76:5e:8a:
                    db:65:50:41:e5:c2:53:94:33:d4:84:53:7e:ff:e2:
                    1c:52:b6:2b:42:c9:01:2d:9d:d5:9b:07:9c:96:40:
                    e3:cf:e8:41:0f:2e:b0:9d:40:96:c4:f9:03:32:7e:
                    18:d6:87:98:69:09:51:c8:15:d8:4f:37:54:5e:84:
                    80:5a:13:5c:c1:47:ef:68:43:e2:16:08:1f:ed:9f:
                    7c:cf:86:fa:af:04:9a:41:4c:5d:89:66:50:62:5e:
                    70:48:08:d1:c6:87:25:db:33:10:a9:ff:d6:10:34:
                    a6:5b:f4:61:2d:a5:05:55:53:3d:a7:a7:16:94:9d:
                    b7:9f:b9:96:6e:db:53:a4:cd:28:0b:8e:70:14:5e:
                    68:fc:69:e3:fa:a4:72:d2:12:62:6c:20:bf:2e:08:
                    14:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:94:C9:22:C5:65:60:16:CD:F1:01:34:A6:C3:F7:7A:BB:82:24:4F
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5ZTJIsVlYBbN8QE0psP3eruCJE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.17.32.0/21
                  167.17.41.0-167.17.46.255

    Signature Algorithm: sha256WithRSAEncryption
         53:d1:7a:6e:90:bf:e8:11:3a:95:cd:41:96:4d:b6:e7:66:b7:
         58:a5:8c:a8:08:f3:6c:05:e3:3c:44:c1:9e:f5:22:52:51:6a:
         c0:50:36:5c:bb:ce:0b:6d:d9:95:6e:6f:eb:8c:d9:5d:f1:ac:
         10:69:a3:95:9e:af:7e:a2:b0:02:7d:5e:cf:67:cc:8a:65:ef:
         63:44:76:db:09:a0:a4:f1:59:64:1a:fa:ce:45:d8:e7:40:7b:
         43:84:66:b3:99:86:cb:2a:aa:df:ff:51:19:97:a4:64:6f:31:
         da:de:c9:e8:f9:8f:a6:ec:31:7c:b7:c6:e4:64:49:70:36:04:
         6b:aa:3b:19:92:ff:58:30:9a:71:44:7e:7b:62:69:92:a3:c4:
         a3:8d:e7:90:94:c5:87:38:09:56:31:09:3c:9a:3d:b5:de:87:
         65:19:39:06:f8:2d:a5:52:36:4b:e4:75:b2:8d:39:94:21:8c:
         1f:b0:11:8f:31:f1:fb:6b:10:92:59:ec:e0:f0:27:01:84:50:
         05:67:53:a3:00:d2:7f:c9:b8:cc:bd:e9:43:fc:0a:d7:f7:18:
         7f:31:81:25:26:2f:28:7f:f6:a8:67:ff:99:75:29:71:5c:13:
         12:d7:98:cb:02:18:90:e7:de:62:88:2a:86:65:d2:ce:09:fc:
         12:56:66:c9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZmgf6Flcn9qV+g2yeSDEoB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUxMDAxMTU1OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTk0YzkyMmM1NjU2MDE2Y2RmMTAxMzRhNmMzZjc3YWJiODIyNDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVeRhoU6zUZ5gXpU2VRYs9L7pGq6
ylOi9eIEZ2g2cLo4QYlkidbqBtr9AaSEavOqCehHA79+KJY9ue5MoqPMENvcJkAm
BRC6I78PpLqnRdUBmuVg6xkSsjO9lh5PYroe9gkoKW52XorbZVBB5cJTlDPUhFN+
/+IcUrYrQskBLZ3VmweclkDjz+hBDy6wnUCWxPkDMn4Y1oeYaQlRyBXYTzdUXoSA
WhNcwUfvaEPiFggf7Z98z4b6rwSaQUxdiWZQYl5wSAjRxocl2zMQqf/WEDSmW/Rh
LaUFVVM9p6cWlJ23n7mWbttTpM0oC45wFF5o/Gnj+qRy0hJibCC/LggUNwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOWUySLFZWAWzfEBNKbD93q7giRPMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNVpUSklzVmxZQmJOOFFFMHBzUDNlcnVDSkU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDpxEgMAwD
BACnESkDBACnES4wDQYJKoZIhvcNAQELBQADggEBAFPRem6Qv+gROpXNQZZNtudm
t1iljKgI82wF4zxEwZ71IlJRasBQNly7zgtt2ZVub+uM2V3xrBBpo5Wer36isAJ9
Xs9nzIpl72NEdtsJoKTxWWQa+s5F2OdAe0OEZrOZhssqqt//URmXpGRvMdreyej5
j6bsMXy3xuRkSXA2BGuqOxmS/1gwmnFEfntiaZKjxKON55CUxYc4CVYxCTyaPbXe
h2UZOQb4LaVSNkvkdbKNOZQhjB+wEY8x8ftrEJJZ7ODwJwGEUAVnU6MA0n/JuMy9
6UP8Ctf3GH8xgSUmLyh/9qhn/5l1KXFcExLXmMsCGJDn3mKIKoZl0s4J/BJWZsk=
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:44 2025 by rpki-client