Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EV9LX1OQ_kumiVCO_RWXbLFcQ5s.roa
File:                     EV9LX1OQ_kumiVCO_RWXbLFcQ5s.roa (raw, json)
Hash identifier:          r7TO3aOIJN2p12sA2kDb1EeHW3zAAwOMW1Rmfa/6xPM=
Subject key identifier:   11:5F:4B:5F:53:90:FE:4B:A6:89:50:8E:FD:15:97:6C:B1:5C:43:9B
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       01997A1732D0C2AD099BF8D1FC0E27BD9F2A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EV9LX1OQ_kumiVCO_RWXbLFcQ5s.roa
Signing time:             Wed 24 Sep 2025 04:59:24 +0000
ROA not before:           Wed 24 Sep 2025 04:59:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42960
IP address blocks:        151.242.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:7a:17:32:d0:c2:ad:09:9b:f8:d1:fc:0e:27:bd:9f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Sep 24 04:59:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=115f4b5f5390fe4ba689508efd15976cb15c439b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:77:31:8b:96:e0:16:6a:e1:97:e0:4b:7a:ec:
                    b4:a1:91:4b:fd:ed:50:53:97:cd:3c:9d:b4:1b:24:
                    fd:71:0f:3f:72:7c:d3:05:ba:ba:40:cc:7a:90:06:
                    0c:b1:dc:24:4d:05:cd:a0:6b:0f:42:d7:51:d4:f5:
                    0f:f4:e8:a3:ae:17:37:90:b3:45:da:9c:ad:d7:4d:
                    6a:9e:2a:69:fa:1b:8c:76:b5:a7:40:35:9a:aa:d4:
                    31:4e:9d:b4:47:51:0b:58:2d:93:67:c3:c4:e4:1a:
                    f2:28:66:08:c3:1a:e1:3b:11:f4:ea:d7:c9:ac:aa:
                    0e:ca:49:98:73:4a:64:43:03:c5:82:e9:f3:3c:27:
                    e0:c8:b2:cc:d5:69:6e:35:86:70:bb:0b:34:39:cc:
                    6e:9d:4c:b3:67:91:57:54:7c:8b:ae:67:54:a1:9f:
                    2f:63:1b:ce:0c:6f:5f:11:b3:d4:ca:b3:28:9b:91:
                    37:72:d6:2f:18:04:c4:56:5a:7a:24:ff:67:15:21:
                    c8:60:3e:41:40:62:14:14:72:80:84:de:5d:3a:66:
                    30:de:75:2a:b1:88:da:63:54:ac:36:52:73:1b:0d:
                    76:49:0e:27:71:ce:cf:b2:11:11:ee:bf:ee:1e:1d:
                    e4:27:34:cd:99:ef:6f:6e:f0:9f:54:39:d2:af:d0:
                    4f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5F:4B:5F:53:90:FE:4B:A6:89:50:8E:FD:15:97:6C:B1:5C:43:9B
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EV9LX1OQ_kumiVCO_RWXbLFcQ5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.242.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:21:9b:00:35:6d:fa:29:3e:7b:7e:75:5b:21:6e:ce:bb:74:
         af:62:c7:1f:ec:35:87:58:47:a8:8f:b4:aa:ff:b5:d4:7e:45:
         4d:8d:94:7a:d7:9e:a5:43:6c:a3:12:3d:0c:11:87:43:d0:ea:
         e4:14:2e:4a:2b:26:73:65:e7:7f:e6:bf:75:35:36:51:59:fb:
         ce:8d:9e:1d:9f:a4:50:d2:49:fe:4c:52:9f:91:30:8d:23:62:
         fb:fd:13:9f:53:ed:1a:e6:93:af:0e:1c:7a:1a:62:06:b4:bd:
         81:af:9b:6e:d1:b6:a5:7e:99:74:0f:7e:e6:15:bf:03:5d:24:
         57:4c:f0:f0:25:df:1b:07:30:13:af:21:5f:56:06:20:5d:5c:
         6e:c6:96:f5:11:bd:a5:e6:dd:6b:0c:01:e5:d1:b8:0a:35:fa:
         52:61:b7:c2:7d:05:e0:ad:07:8d:e8:9f:e9:72:ea:73:87:47:
         db:c1:69:ad:2f:93:80:63:be:0b:17:83:54:28:46:ec:ba:b2:
         98:79:9b:9b:0f:49:8a:ff:fe:06:3a:0b:c4:e8:7a:eb:10:67:
         8d:cb:b6:89:51:5a:06:35:68:42:dc:bb:a8:e8:42:94:cd:5b:
         ff:fd:83:9b:89:82:3c:7d:e7:13:30:21:70:3c:9f:cc:3e:e9:
         96:d7:6b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:14 2025 by rpki-client