Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d9O1ZbAW2CNZZWv90Jt8pW14OgM.roa
File:                     d9O1ZbAW2CNZZWv90Jt8pW14OgM.roa (raw, json)
Hash identifier:          9Q/igSSvicy+uaz1oiXNOi9srP/C2heBicDy8Enec1Y=
Subject key identifier:   77:D3:B5:65:B0:16:D8:23:59:65:6B:FD:D0:9B:7C:A5:6D:78:3A:03
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0199E17CD0CDD8595E5050F3C31F1C7B5B49
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d9O1ZbAW2CNZZWv90Jt8pW14OgM.roa
Signing time:             Tue 14 Oct 2025 06:51:17 +0000
ROA not before:           Tue 14 Oct 2025 06:51:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57043
IP address blocks:        2.57.242.0/24 maxlen: 24
                          45.88.15.0/24 maxlen: 24
                          45.135.182.0/24 maxlen: 24
                          77.81.101.0/24 maxlen: 24
                          89.35.119.0/24 maxlen: 24
                          89.35.129.0/24 maxlen: 24
                          89.37.185.0/24 maxlen: 24
                          89.40.70.0/24 maxlen: 24
                          94.177.13.0/24 maxlen: 24
                          94.177.145.0/24 maxlen: 24
                          103.56.84.0/24 maxlen: 24
                          167.17.40.0/24 maxlen: 24
                          167.17.176.0/24 maxlen: 24
                          167.17.177.0/24 maxlen: 24
                          167.17.178.0/24 maxlen: 24
                          167.17.180.0/24 maxlen: 24
                          167.17.182.0/24 maxlen: 24
                          167.17.191.0/24 maxlen: 24
                          188.208.103.0/24 maxlen: 24
                          188.213.0.0/24 maxlen: 24
                          188.214.107.0/24 maxlen: 24
                          193.124.225.0/24 maxlen: 24
                          194.85.249.0/24 maxlen: 24
                          194.85.251.0/24 maxlen: 24
                          202.71.12.0/24 maxlen: 24
                          202.71.13.0/24 maxlen: 24
                          202.71.15.0/24 maxlen: 24
                          204.77.1.0/24 maxlen: 24
                          206.245.129.0/24 maxlen: 24
                          206.245.131.0/24 maxlen: 24
                          206.245.133.0/24 maxlen: 24
                          206.245.134.0/24 maxlen: 24
                          206.245.157.0/24 maxlen: 24
                          208.123.185.0/24 maxlen: 24
                          208.123.190.0/24 maxlen: 24
                          212.192.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:e1:7c:d0:cd:d8:59:5e:50:50:f3:c3:1f:1c:7b:5b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Oct 14 06:51:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=77d3b565b016d82359656bfdd09b7ca56d783a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:cc:60:11:a2:5b:90:ac:6d:4d:3c:db:78:
                    b5:8f:dd:b5:da:01:a7:b7:8c:66:e6:ee:55:8e:a4:
                    4d:9f:49:10:0f:22:ba:f8:79:19:17:be:f1:7a:a1:
                    cb:47:56:43:63:6f:a0:bd:a1:42:2d:b4:2c:d8:ae:
                    8f:4b:86:7a:8e:a4:fb:6e:2f:d6:3f:0c:21:42:b0:
                    e4:ea:ea:31:0e:5e:b0:02:9a:64:33:2f:3e:45:88:
                    a6:1f:bb:51:0c:29:ee:26:15:80:96:60:8c:cc:e4:
                    72:68:85:66:ec:05:3a:17:02:4d:f3:0e:30:74:fd:
                    d4:23:9a:69:ad:63:46:b3:f7:c9:27:94:9b:17:c9:
                    0e:3b:60:8e:8a:a3:85:9d:df:45:f4:2a:96:20:e0:
                    f9:98:4a:fc:20:3e:92:5c:dc:5e:b8:1c:32:99:92:
                    f3:53:76:17:e6:b8:2f:48:5f:27:6b:a2:04:23:5e:
                    a0:0a:9b:9c:72:ea:a8:74:46:c0:76:d9:ef:9c:03:
                    07:53:d6:1a:f0:55:1d:98:08:76:3f:f7:fa:24:08:
                    c5:98:2e:bf:f4:67:3d:46:9a:42:35:4e:07:39:4c:
                    54:7f:b8:e9:92:3d:e9:f2:d5:23:58:f8:bf:15:e4:
                    72:18:8c:46:77:b2:00:e1:dd:d7:31:e0:64:db:36:
                    ce:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D3:B5:65:B0:16:D8:23:59:65:6B:FD:D0:9B:7C:A5:6D:78:3A:03
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d9O1ZbAW2CNZZWv90Jt8pW14OgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.242.0/24
                  45.88.15.0/24
                  45.135.182.0/24
                  77.81.101.0/24
                  89.35.119.0/24
                  89.35.129.0/24
                  89.37.185.0/24
                  89.40.70.0/24
                  94.177.13.0/24
                  94.177.145.0/24
                  103.56.84.0/24
                  167.17.40.0/24
                  167.17.176.0-167.17.178.255
                  167.17.180.0/24
                  167.17.182.0/24
                  167.17.191.0/24
                  188.208.103.0/24
                  188.213.0.0/24
                  188.214.107.0/24
                  193.124.225.0/24
                  194.85.249.0/24
                  194.85.251.0/24
                  202.71.12.0/23
                  202.71.15.0/24
                  204.77.1.0/24
                  206.245.129.0/24
                  206.245.131.0/24
                  206.245.133.0-206.245.134.255
                  206.245.157.0/24
                  208.123.185.0/24
                  208.123.190.0/24
                  212.192.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:29:5c:e4:2f:dc:cb:a3:64:a4:19:11:84:62:bc:70:39:c2:
         5d:c8:90:3c:49:7e:e1:8c:f9:9d:3e:5f:c7:2d:c0:c0:20:a9:
         6e:2b:13:f7:f2:d2:67:cc:d5:a4:e0:99:56:04:e3:94:e3:f5:
         0b:f2:ae:5d:75:e6:92:87:68:0e:23:98:58:d9:e0:86:55:8a:
         a5:01:95:e4:f9:73:43:83:42:2b:64:6e:e7:5f:59:f5:78:1c:
         c7:8c:c3:80:c8:3a:f8:c3:9e:8e:65:c3:c2:0d:6d:f4:58:b7:
         f3:ec:df:61:d0:d8:65:37:2b:b8:52:c4:11:68:61:a5:a5:b9:
         17:76:33:00:93:0c:93:d4:90:2b:c4:f8:9f:25:5d:97:53:6e:
         9f:6f:31:12:d8:e1:bc:cd:b3:2f:46:65:09:fd:64:39:c7:3a:
         b6:e4:e6:6e:ee:f5:55:6b:a3:e5:c9:4c:24:32:ee:0f:b3:cf:
         e4:5d:0b:20:6d:3f:ef:ac:d6:59:b0:4c:0c:ac:48:78:e4:57:
         17:2e:27:88:99:ef:59:04:86:5e:10:7c:9c:0b:e4:f9:bb:0b:
         70:f4:22:5c:6f:4e:5f:e4:6e:22:4c:56:e3:15:af:3f:75:6e:
         29:26:5b:6b:15:2d:cd:d7:f6:c8:68:85:a8:e8:de:db:e3:8c:
         83:d2:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:46 2025 by rpki-client