Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/9J4WhJU8xeDrSSOcg_wxEbasVbk.roa
File:                     9J4WhJU8xeDrSSOcg_wxEbasVbk.roa (raw, json)
Hash identifier:          BemndY3hRh+XxhZrf5Kkuo7O8IjD5PRmJSBt4L95bOo=
Subject key identifier:   F4:9E:16:84:95:3C:C5:E0:EB:49:23:9C:83:FC:31:11:B6:AC:55:B9
Certificate issuer:       /CN=3897a129e360703a802fd28d910bfa84da3029a0
Certificate serial:       019D10B6344311F2C2B4C5BF827E75BC2466
Authority key identifier: 38:97:A1:29:E3:60:70:3A:80:2F:D2:8D:91:0B:FA:84:DA:30:29:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OJehKeNgcDqAL9KNkQv6hNowKaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/9J4WhJU8xeDrSSOcg_wxEbasVbk.roa
Signing time:             Sat 21 Mar 2026 14:04:29 +0000
ROA not before:           Sat 21 Mar 2026 14:04:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214269
IP address blocks:        2001:67c:77c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OJehKeNgcDqAL9KNkQv6hNowKaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:10:b6:34:43:11:f2:c2:b4:c5:bf:82:7e:75:bc:24:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3897a129e360703a802fd28d910bfa84da3029a0
        Validity
            Not Before: Mar 21 14:04:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f49e1684953cc5e0eb49239c83fc3111b6ac55b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:b9:77:44:07:b6:a3:13:9e:a6:ed:11:12:
                    8d:1e:f1:e7:2d:70:e5:ad:55:f9:c4:00:63:c5:c9:
                    88:e0:8a:b8:32:10:38:fc:e0:a4:da:f8:fa:7a:13:
                    d9:8b:a9:ec:34:86:c3:52:f3:f3:5a:a9:50:af:8a:
                    2f:4a:0c:1b:e1:80:01:d3:a1:b0:b2:8b:d8:ba:44:
                    f8:63:fc:0c:f2:e5:6b:d7:07:1b:2a:1e:99:9a:b3:
                    5e:75:b0:0d:c0:32:b9:73:a4:ab:7b:13:a7:e2:3e:
                    a1:73:15:32:7b:db:33:82:b3:d6:35:08:24:4b:69:
                    87:15:e8:da:90:0e:41:60:e3:77:6e:0b:74:34:63:
                    47:9e:95:dc:7d:01:82:4c:a8:af:8e:55:f7:f8:b2:
                    a0:9a:df:ed:c7:3f:85:ff:c9:2d:6c:3b:a6:49:96:
                    ed:af:58:6c:d5:8c:98:f8:d3:7f:b3:8e:05:9a:48:
                    22:50:14:cf:3e:c8:59:1d:30:41:15:eb:d4:2d:cb:
                    86:ab:c7:87:5a:0e:40:4e:83:8b:06:5f:4d:59:cb:
                    b6:c8:5e:9a:ba:ab:8b:70:d4:e9:c3:fd:45:1d:c8:
                    5d:0a:c6:09:8d:34:88:07:45:fe:50:43:26:0d:36:
                    a7:98:d1:ea:28:b4:9c:43:41:fb:44:18:e1:4d:e2:
                    2a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9E:16:84:95:3C:C5:E0:EB:49:23:9C:83:FC:31:11:B6:AC:55:B9
            X509v3 Authority Key Identifier:
                keyid:38:97:A1:29:E3:60:70:3A:80:2F:D2:8D:91:0B:FA:84:DA:30:29:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJehKeNgcDqAL9KNkQv6hNowKaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/9J4WhJU8xeDrSSOcg_wxEbasVbk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:77c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:be:31:53:2c:97:a2:9d:b3:b9:48:71:5f:ea:66:89:74:a3:
         b9:38:c8:b8:53:7c:c3:14:8d:d7:04:db:67:da:10:9a:35:ba:
         ea:83:74:b7:66:ce:a5:1f:19:be:d6:56:79:81:2f:ac:0f:0b:
         a6:fb:b8:25:f8:36:9d:07:97:29:6f:73:80:34:5f:e8:bb:84:
         72:7e:29:1e:4a:64:dd:7b:e9:e9:3f:6b:6a:0d:df:e6:99:d1:
         51:1f:8e:02:c8:a9:8a:e7:93:72:d5:7c:b8:98:9b:60:04:ef:
         f1:b8:9f:14:c2:2a:89:22:8c:f5:e2:75:5e:ee:a4:c1:b6:81:
         ac:ab:2a:fb:44:f2:46:de:b5:3c:9a:02:c0:69:90:67:b4:1a:
         9c:38:e6:ba:65:69:d2:09:dc:7e:a4:1e:b8:4f:8d:23:df:da:
         32:26:b8:b0:ad:56:37:3d:71:c4:c4:e0:1d:3d:9c:e6:42:99:
         4b:a1:41:b7:ff:8a:4f:b7:f8:69:d6:c0:0f:34:83:44:39:db:
         82:c7:f7:55:46:d6:bb:d3:ac:c7:08:80:c3:19:d6:6b:b1:bc:
         18:99:a2:10:b8:86:0f:d8:d8:54:a7:3f:5a:22:9a:8b:71:5a:
         78:96:64:94:49:5c:13:59:3f:63:df:6f:01:46:2e:82:93:e1:
         15:7b:fd:27
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ0QtjRDEfLCtMW/gn51vCRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OTdhMTI5ZTM2MDcwM2E4MDJmZDI4ZDkxMGJmYTg0ZGEz
MDI5YTAwHhcNMjYwMzIxMTQwNDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDllMTY4NDk1M2NjNWUwZWI0OTIzOWM4M2ZjMzExMWI2YWM1NWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDC5d0QHtqMTnqbtERKNHvHnLXDl
rVX5xABjxcmI4Iq4MhA4/OCk2vj6ehPZi6nsNIbDUvPzWqlQr4ovSgwb4YAB06Gw
sovYukT4Y/wM8uVr1wcbKh6ZmrNedbANwDK5c6SrexOn4j6hcxUye9szgrPWNQgk
S2mHFejakA5BYON3bgt0NGNHnpXcfQGCTKivjlX3+LKgmt/txz+F/8ktbDumSZbt
r1hs1YyY+NN/s44FmkgiUBTPPshZHTBBFevULcuGq8eHWg5AToOLBl9NWcu2yF6a
uquLcNTpw/1FHchdCsYJjTSIB0X+UEMmDTanmNHqKLScQ0H7RBjhTeIqfQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPSeFoSVPMXg60kjnIP8MRG2rFW5MB8GA1UdIwQY
MBaAFDiXoSnjYHA6gC/SjZEL+oTaMCmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0plaEtlTmdjRHFBTDlLTmtRdjZoTm93S2FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82NzlmOTgtNmRmNi00Y2MwLWJkMmEt
ZjU0M2QyMjZlYzg0LzEvOUo0V2hKVTh4ZURyU1NPY2dfd3hFYmFzVmJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82NzlmOTgtNmRmNi00Y2MwLWJkMmEtZjU0M2QyMjZlYzg0
LzEvT0plaEtlTmdjRHFBTDlLTmtRdjZoTm93S2FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAd8
MA0GCSqGSIb3DQEBCwUAA4IBAQB+vjFTLJeinbO5SHFf6maJdKO5OMi4U3zDFI3X
BNtn2hCaNbrqg3S3Zs6lHxm+1lZ5gS+sDwum+7gl+DadB5cpb3OANF/ou4Ryfike
SmTde+npP2tqDd/mmdFRH44CyKmK55Ny1Xy4mJtgBO/xuJ8UwiqJIoz14nVe7qTB
toGsqyr7RPJG3rU8mgLAaZBntBqcOOa6ZWnSCdx+pB64T40j39oyJriwrVY3PXHE
xOAdPZzmQplLoUG3/4pPt/hp1sAPNINEOduCx/dVRta706zHCIDDGdZrsbwYmaIQ
uIYP2NhUpz9aIpqLcVp4lmSUSVwTWT9j328BRi6Ck+EVe/0n
-----END CERTIFICATE-----