Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9p0e21PPwClQhR8iBB2xbF-CuDk.roa
File:                     9p0e21PPwClQhR8iBB2xbF-CuDk.roa (raw, json)
Hash identifier:          MI2+LYOGvvwCozPNQQLAh/lhQDCmhLzwrtUdymYZS5o=
Subject key identifier:   F6:9D:1E:DB:53:CF:C0:29:50:85:1F:22:04:1D:B1:6C:5F:82:B8:39
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       01999FDAD7A5FD383F85DEDB9ECE27B45392
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9p0e21PPwClQhR8iBB2xbF-CuDk.roa
Signing time:             Wed 01 Oct 2025 12:59:03 +0000
ROA not before:           Wed 01 Oct 2025 12:59:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     147060
IP address blocks:        151.246.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:9f:da:d7:a5:fd:38:3f:85:de:db:9e:ce:27:b4:53:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Oct  1 12:59:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f69d1edb53cfc02950851f22041db16c5f82b839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:88:79:f0:f9:1c:66:fc:20:3f:ee:d8:91:
                    a9:ba:b4:18:a3:7d:7a:d2:0e:ee:e5:62:db:f3:d9:
                    43:a0:5b:9c:2f:c4:ed:27:e9:d0:97:04:61:eb:cc:
                    e9:f9:29:62:5f:87:ce:91:09:41:2a:df:92:20:80:
                    22:c9:6a:6a:0d:d0:55:10:2b:02:d5:9e:25:c6:4f:
                    43:29:ff:c2:01:40:07:ec:29:4f:f6:1f:9c:10:92:
                    72:e2:95:15:10:86:3f:f0:29:96:7d:54:86:98:cd:
                    84:11:20:f9:14:f6:9b:d3:36:a6:b9:dc:f3:09:44:
                    d7:7d:b2:0c:b1:0e:e8:2f:66:d1:1e:5b:4a:92:62:
                    d4:88:ba:e6:71:47:e8:0f:f1:76:09:3e:9e:fd:1c:
                    8e:98:7a:a7:ea:57:6a:4a:b6:d9:66:d4:4a:c2:21:
                    f5:c6:a3:89:aa:09:ed:6f:4b:f0:ee:c1:09:62:62:
                    2d:dc:7e:b6:51:c6:24:b4:47:ef:16:88:9e:30:b6:
                    2f:10:01:b0:41:51:a9:3e:bf:ce:ce:41:1d:d0:ed:
                    56:f5:80:ab:90:46:2c:9e:a5:28:eb:27:bf:89:fb:
                    99:49:66:52:5f:9c:31:34:9e:3b:8f:9f:83:30:d1:
                    82:2b:24:1c:3a:d3:bc:5c:64:ad:2e:ed:dc:3f:0c:
                    3f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9D:1E:DB:53:CF:C0:29:50:85:1F:22:04:1D:B1:6C:5F:82:B8:39
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9p0e21PPwClQhR8iBB2xbF-CuDk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.246.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f8:31:d8:09:e7:75:dc:bb:8b:05:69:b3:28:d7:54:d5:24:
         a1:42:06:95:96:19:99:cd:c0:25:2e:ce:ac:e9:19:0d:a2:07:
         7e:34:73:dc:ab:28:4e:3c:1b:3c:88:25:5d:94:cf:bd:b4:9b:
         1c:50:87:28:2b:1a:75:57:d6:48:24:41:55:24:8a:40:b8:20:
         55:ae:46:60:08:1b:88:fe:93:45:d7:f9:bf:1f:51:3c:d6:a1:
         fd:b0:17:ae:8c:f3:97:7d:3b:7c:5b:5c:16:bc:26:e3:7a:6c:
         bc:66:f2:e6:ba:3f:ac:bb:7b:e9:16:54:e7:7f:b7:9d:f6:b1:
         86:71:2e:ef:9e:1d:af:25:e9:fe:0f:23:1d:47:9c:c6:45:7d:
         f6:e0:a7:1f:f2:48:60:a0:f5:8f:67:ba:eb:42:de:9c:a2:8e:
         d1:dd:f9:f8:0f:a2:fb:85:7c:8d:d4:f2:5c:82:88:ba:e1:fc:
         0e:0a:d4:6c:b7:3a:d7:2f:8c:8f:db:95:9c:5b:f0:99:83:69:
         b5:01:62:da:69:59:54:fe:d7:d6:9c:74:65:21:c9:53:e8:3e:
         8e:cb:7c:0f:87:46:79:f6:44:6c:fa:bd:6c:8a:82:4e:90:0b:
         42:9f:98:78:01:8d:aa:7c:4c:d1:7e:e3:12:07:5b:d5:40:e8:
         59:0c:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:16 2025 by rpki-client