Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ba9kZpfVYf4WEmKZdgzDbkaFPAw.roa
File:                     ba9kZpfVYf4WEmKZdgzDbkaFPAw.roa (raw, json)
Hash identifier:          F4l4iQ9gHYrgVhQRSCKaVhvf30ybHsTVavJTeT+JfP4=
Subject key identifier:   6D:AF:64:66:97:D5:61:FE:16:12:62:99:76:0C:C3:6E:46:85:3C:0C
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0199F897C284CDFA0D221A011BE079838E25
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ba9kZpfVYf4WEmKZdgzDbkaFPAw.roa
Signing time:             Sat 18 Oct 2025 18:31:59 +0000
ROA not before:           Sat 18 Oct 2025 18:31:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        31.56.4.0/23 maxlen: 23
                          31.56.25.0/24 maxlen: 24
                          31.56.28.0/22 maxlen: 24
                          31.56.29.0/24 maxlen: 24
                          31.56.35.0/24 maxlen: 24
                          31.56.43.0/24 maxlen: 24
                          31.56.47.0/24 maxlen: 24
                          31.56.57.0/24 maxlen: 24
                          31.56.71.0/24 maxlen: 24
                          31.56.80.0/22 maxlen: 22
                          31.56.90.0/23 maxlen: 23
                          31.56.96.0/22 maxlen: 22
                          31.56.100.0/22 maxlen: 22
                          31.56.104.0/22 maxlen: 22
                          31.56.108.0/22 maxlen: 22
                          31.56.114.0/23 maxlen: 24
                          31.56.118.0/23 maxlen: 24
                          31.56.120.0/22 maxlen: 24
                          31.56.180.0/22 maxlen: 24
                          31.56.180.0/23 maxlen: 23
                          31.56.181.0/24 maxlen: 24
                          31.56.188.0/22 maxlen: 24
                          31.56.190.0/23 maxlen: 23
                          31.56.192.0/22 maxlen: 22
                          31.56.192.0/24 maxlen: 24
                          31.56.193.0/24 maxlen: 24
                          31.56.200.0/22 maxlen: 24
                          31.56.208.0/22 maxlen: 24
                          31.56.212.0/22 maxlen: 24
                          31.56.220.0/23 maxlen: 23
                          31.56.220.0/24 maxlen: 24
                          31.56.224.0/23 maxlen: 23
                          31.56.228.0/22 maxlen: 24
                          31.56.230.0/23 maxlen: 23
                          31.56.236.0/22 maxlen: 24
                          31.56.236.0/23 maxlen: 23
                          31.57.12.0/23 maxlen: 24
                          31.57.14.0/23 maxlen: 24
                          31.57.24.0/22 maxlen: 24
                          31.57.25.0/24 maxlen: 24
                          31.57.28.0/22 maxlen: 24
                          31.57.36.0/23 maxlen: 24
                          31.57.38.0/23 maxlen: 23
                          31.57.52.0/22 maxlen: 24
                          31.57.56.0/22 maxlen: 24
                          31.57.60.0/22 maxlen: 24
                          31.57.94.0/23 maxlen: 23
                          31.57.120.0/22 maxlen: 24
                          31.57.120.0/23 maxlen: 23
                          31.57.124.0/22 maxlen: 24
                          31.57.126.0/23 maxlen: 23
                          31.57.132.0/23 maxlen: 23
                          31.57.136.0/21 maxlen: 24
                          31.57.146.0/23 maxlen: 24
                          31.57.168.0/22 maxlen: 24
                          31.57.176.0/21 maxlen: 21
                          31.57.184.0/22 maxlen: 24
                          31.57.186.0/23 maxlen: 23
                          31.57.192.0/22 maxlen: 24
                          31.57.200.0/23 maxlen: 24
                          31.57.200.0/24 maxlen: 24
                          31.57.208.0/20 maxlen: 24
                          31.57.216.0/24 maxlen: 24
                          31.57.217.0/24 maxlen: 24
                          31.57.220.0/24 maxlen: 24
                          31.57.224.0/22 maxlen: 22
                          31.57.232.0/22 maxlen: 24
                          31.57.239.0/24 maxlen: 24
                          31.57.250.0/24 maxlen: 24
                          31.57.251.0/24 maxlen: 24
                          31.57.252.0/22 maxlen: 24
                          31.58.34.0/23 maxlen: 24
                          31.58.50.0/23 maxlen: 24
                          31.58.52.0/22 maxlen: 22
                          31.58.59.0/24 maxlen: 24
                          31.58.64.0/23 maxlen: 24
                          31.58.68.0/22 maxlen: 24
                          31.58.84.0/22 maxlen: 24
                          31.58.152.0/22 maxlen: 24
                          31.58.172.0/22 maxlen: 24
                          31.58.212.0/22 maxlen: 24
                          31.58.220.0/22 maxlen: 22
                          31.58.224.0/22 maxlen: 24
                          31.59.59.0/24 maxlen: 24
                          31.59.76.0/22 maxlen: 24
                          31.59.96.0/22 maxlen: 22
                          31.59.112.0/22 maxlen: 22
                          31.59.136.0/21 maxlen: 24
                          31.59.144.0/21 maxlen: 24
                          31.59.160.0/21 maxlen: 24
                          31.59.224.0/22 maxlen: 22
                          31.59.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:f8:97:c2:84:cd:fa:0d:22:1a:01:1b:e0:79:83:8e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Oct 18 18:31:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6daf646697d561fe16126299760cc36e46853c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:85:24:6a:b5:7c:48:42:9c:1f:63:a2:0e:
                    81:b9:67:01:1c:f6:d2:f6:0e:55:8d:ed:9b:21:29:
                    09:87:44:75:97:83:5c:12:5a:55:b3:e9:49:e3:9e:
                    73:6e:35:83:2e:96:a7:5b:37:d8:52:e9:27:84:04:
                    5e:c7:c1:46:49:2f:2e:72:b1:8e:1a:c1:55:ab:c4:
                    f3:b3:c3:d4:30:31:61:ac:0d:c1:e1:cf:b9:1b:f1:
                    4f:3a:af:4a:c9:0d:78:df:b9:d1:94:49:19:25:ca:
                    18:3a:2e:c9:74:ee:39:53:8f:88:3a:de:52:d5:03:
                    86:4f:26:0e:60:5d:52:b6:aa:c6:16:79:98:61:35:
                    64:1c:42:b4:39:dc:26:0d:56:6c:30:7b:d4:f2:1d:
                    eb:73:60:08:f2:65:6b:5a:e8:17:10:50:51:71:ac:
                    03:67:73:6e:56:72:28:a3:a9:14:51:5c:0b:ec:99:
                    c4:9b:61:3b:a0:59:cf:b7:85:20:10:db:01:e2:3d:
                    40:c3:3b:12:a3:bb:05:4f:71:02:ee:86:7c:85:1e:
                    1c:ba:06:61:97:f5:d8:05:ca:fa:b4:63:de:ac:36:
                    a1:fc:9b:49:a5:04:57:02:cd:7d:85:87:f8:75:85:
                    ee:fc:79:df:f7:eb:12:77:05:2e:2e:50:50:fb:96:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AF:64:66:97:D5:61:FE:16:12:62:99:76:0C:C3:6E:46:85:3C:0C
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ba9kZpfVYf4WEmKZdgzDbkaFPAw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.4.0/23
                  31.56.25.0/24
                  31.56.28.0/22
                  31.56.35.0/24
                  31.56.43.0/24
                  31.56.47.0/24
                  31.56.57.0/24
                  31.56.71.0/24
                  31.56.80.0/22
                  31.56.90.0/23
                  31.56.96.0/20
                  31.56.114.0/23
                  31.56.118.0-31.56.123.255
                  31.56.180.0/22
                  31.56.188.0-31.56.195.255
                  31.56.200.0/22
                  31.56.208.0/21
                  31.56.220.0/23
                  31.56.224.0/23
                  31.56.228.0/22
                  31.56.236.0/22
                  31.57.12.0/22
                  31.57.24.0/21
                  31.57.36.0/22
                  31.57.52.0-31.57.63.255
                  31.57.94.0/23
                  31.57.120.0/21
                  31.57.132.0/23
                  31.57.136.0/21
                  31.57.146.0/23
                  31.57.168.0/22
                  31.57.176.0-31.57.187.255
                  31.57.192.0/22
                  31.57.200.0/23
                  31.57.208.0-31.57.227.255
                  31.57.232.0/22
                  31.57.239.0/24
                  31.57.250.0-31.57.255.255
                  31.58.34.0/23
                  31.58.50.0-31.58.55.255
                  31.58.59.0/24
                  31.58.64.0/23
                  31.58.68.0/22
                  31.58.84.0/22
                  31.58.152.0/22
                  31.58.172.0/22
                  31.58.212.0/22
                  31.58.220.0-31.58.227.255
                  31.59.59.0/24
                  31.59.76.0/22
                  31.59.96.0/22
                  31.59.112.0/22
                  31.59.136.0-31.59.151.255
                  31.59.160.0/21
                  31.59.224.0/22
                  31.59.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:35:a8:e1:31:9d:0f:04:de:af:e3:53:aa:9a:7e:ec:86:50:
         74:bb:87:e4:90:78:24:04:eb:f4:0a:00:a9:dc:ef:0b:4d:4d:
         5c:0d:7d:60:bf:8a:a8:82:e9:2c:2d:d0:56:2f:fa:1b:57:72:
         fb:ae:04:0d:98:be:fb:9e:be:1e:60:0d:04:65:80:92:29:af:
         65:77:98:68:3b:1b:09:e7:ec:df:e4:3c:b8:1b:ac:eb:b0:95:
         2d:5a:4c:62:69:02:85:c9:12:cc:45:65:9f:26:ca:b3:45:ef:
         bb:ab:ca:c9:21:46:1b:cc:69:18:28:ff:98:88:d7:51:a4:7d:
         2d:86:93:f6:63:68:4e:10:69:4f:63:e8:6d:15:4e:29:2c:08:
         3e:5d:55:83:1b:62:a7:00:7c:67:a2:ce:82:77:cc:d1:75:4a:
         4e:7c:cb:e3:d3:e8:81:82:20:1a:bd:6c:bc:45:df:62:d7:15:
         58:d2:97:2a:88:d5:49:4c:da:00:df:40:9e:5b:67:73:99:23:
         90:8f:3e:0c:fd:29:1d:e8:97:5f:06:79:83:e1:ec:6a:bd:78:
         f7:54:94:f0:0c:c2:be:2d:25:c8:91:7c:57:82:14:e8:e4:2e:
         3e:7e:d0:02:a6:a0:18:a7:ed:11:52:02:f9:de:b8:59:34:a1:
         e3:66:dc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:46 2025 by rpki-client