Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Rtc3Ar-jjziOyqqBNdxAvyME2c0.roa
File:                     Rtc3Ar-jjziOyqqBNdxAvyME2c0.roa (raw, json)
Hash identifier:          pbBerJyfKL6fX+jOS9tPfzWqkUauE1K+Qw2lZXnrDY4=
Subject key identifier:   46:D7:37:02:BF:A3:8F:38:8E:CA:AA:81:35:DC:40:BF:23:04:D9:CD
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019D2A0B9FE559771D4BF48E92239EB6DE0E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Rtc3Ar-jjziOyqqBNdxAvyME2c0.roa
Signing time:             Thu 26 Mar 2026 12:08:18 +0000
ROA not before:           Thu 26 Mar 2026 12:08:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200546
IP address blocks:        2a05:35c0:6::/48 maxlen: 48
                          2a05:35c0:11::/48 maxlen: 48
                          2a06:1180:1f3::/48 maxlen: 48
                          2a06:1180:1000::/48 maxlen: 48
                          2a06:1180:12bb::/48 maxlen: 48
                          2a06:1181:100::/48 maxlen: 48
                          2a09:17c0:8743::/48 maxlen: 48
                          2a09:17c1:ad::/48 maxlen: 48
                          2a09:17c1:ca::/48 maxlen: 48
                          2a09:17c1:f3::/48 maxlen: 48
                          2a09:17c7:fc3a::/48 maxlen: 48
                          2a0a:2d04:9825::/48 maxlen: 48
                          2a0a:2d06:103::/48 maxlen: 48
                          2a0a:2d06:1312::/48 maxlen: 48
                          2a0a:2d07:fc3e::/48 maxlen: 48
                          2a0c:7881:98dd::/48 maxlen: 48
                          2a0c:7886:b::/48 maxlen: 48
                          2a0c:7886:55::/48 maxlen: 48
                          2a0c:7886:1b3::/48 maxlen: 48
                          2a0c:7886:7b8a::/48 maxlen: 48
                          2a0c:7886:bbdf::/48 maxlen: 48
                          2a0e:15c0:abbc::/48 maxlen: 48
                          2a0e:15c7:11::/48 maxlen: 48
                          2a0e:15c7:d4::/48 maxlen: 48
                          2a0e:1a80:10::/48 maxlen: 48
                          2a0e:f600::/48 maxlen: 48
                          2a0e:f600:13::/48 maxlen: 48
                          2a0e:f601:1312::/48 maxlen: 48
                          2a0e:f603:33::/48 maxlen: 48
                          2a0e:f603:acab::/48 maxlen: 48
                          2a0f:1584:5::/48 maxlen: 48
                          2a0f:3047::/48 maxlen: 48
                          2a0f:7d00:32ba::/48 maxlen: 48
                          2a0f:7d06:77::/48 maxlen: 48
                          2a0f:7d06:88::/48 maxlen: 48
                          2a0f:7d06:ad98::/48 maxlen: 48
                          2a0f:e1c1:33::/48 maxlen: 48
                          2a0f:e202:11::/48 maxlen: 48
                          2a0f:e6c6:55::/48 maxlen: 48
                          2a0f:e7c6:55::/48 maxlen: 48
                          2a0f:e847:2::/48 maxlen: 48
                          2a0f:ea44:22::/48 maxlen: 48
                          2a10:67c2:3::/48 maxlen: 48
                          2a12:ac44:8426::/48 maxlen: 48
                          2a12:ecc0:158::/48 maxlen: 48
                          2a12:ecc0:34a::/48 maxlen: 48
                          2a13:8c86:22::/48 maxlen: 48
                          2a13:c900:130::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:0b:9f:e5:59:77:1d:4b:f4:8e:92:23:9e:b6:de:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Mar 26 12:08:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=46d73702bfa38f388ecaaa8135dc40bf2304d9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:38:d7:1b:f1:a3:b6:ce:6a:06:6c:6b:a0:e1:
                    ba:9f:44:3a:0b:fa:ea:82:9a:2b:7f:3d:32:ad:81:
                    37:b1:85:c9:3a:c7:12:35:43:8c:ad:19:fa:a7:4c:
                    c8:a6:b8:63:a2:35:74:c9:3d:6d:f6:5b:0e:bf:e8:
                    f6:bc:f4:f5:92:2f:b5:10:5d:91:4d:0d:34:2b:af:
                    ee:cc:3d:88:ba:0c:c4:cf:c0:38:37:97:46:b1:5f:
                    e6:80:09:19:1c:a8:15:ea:5d:49:7e:c6:c9:1e:b1:
                    ff:6b:38:fb:35:47:48:32:f2:f6:49:4e:74:42:74:
                    fe:ae:fd:8a:5e:fb:b7:e9:49:b2:81:f6:9d:17:f7:
                    4b:41:b6:24:7c:3c:f7:83:77:8e:c7:f8:e8:af:93:
                    dc:76:bd:f6:33:63:d4:6a:23:29:7f:22:05:fd:81:
                    48:25:fe:57:2e:eb:1a:f4:15:59:91:18:05:6f:7f:
                    69:fa:e7:ef:e0:d4:13:8d:5e:55:e0:97:05:1e:ec:
                    2b:8e:88:df:ec:88:c4:61:28:65:c3:fa:1c:d2:2d:
                    81:0e:7d:c1:1a:04:26:50:c0:b3:29:0a:4f:f4:18:
                    89:0d:be:14:38:53:d0:a7:5f:f3:2c:d3:29:0b:87:
                    60:b6:27:68:1e:14:ae:38:8b:68:0e:53:17:83:63:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D7:37:02:BF:A3:8F:38:8E:CA:AA:81:35:DC:40:BF:23:04:D9:CD
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Rtc3Ar-jjziOyqqBNdxAvyME2c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:35c0:6::/48
                  2a05:35c0:11::/48
                  2a06:1180:1f3::/48
                  2a06:1180:1000::/48
                  2a06:1180:12bb::/48
                  2a06:1181:100::/48
                  2a09:17c0:8743::/48
                  2a09:17c1:ad::/48
                  2a09:17c1:ca::/48
                  2a09:17c1:f3::/48
                  2a09:17c7:fc3a::/48
                  2a0a:2d04:9825::/48
                  2a0a:2d06:103::/48
                  2a0a:2d06:1312::/48
                  2a0a:2d07:fc3e::/48
                  2a0c:7881:98dd::/48
                  2a0c:7886:b::/48
                  2a0c:7886:55::/48
                  2a0c:7886:1b3::/48
                  2a0c:7886:7b8a::/48
                  2a0c:7886:bbdf::/48
                  2a0e:15c0:abbc::/48
                  2a0e:15c7:11::/48
                  2a0e:15c7:d4::/48
                  2a0e:1a80:10::/48
                  2a0e:f600::/48
                  2a0e:f600:13::/48
                  2a0e:f601:1312::/48
                  2a0e:f603:33::/48
                  2a0e:f603:acab::/48
                  2a0f:1584:5::/48
                  2a0f:3047::/48
                  2a0f:7d00:32ba::/48
                  2a0f:7d06:77::/48
                  2a0f:7d06:88::/48
                  2a0f:7d06:ad98::/48
                  2a0f:e1c1:33::/48
                  2a0f:e202:11::/48
                  2a0f:e6c6:55::/48
                  2a0f:e7c6:55::/48
                  2a0f:e847:2::/48
                  2a0f:ea44:22::/48
                  2a10:67c2:3::/48
                  2a12:ac44:8426::/48
                  2a12:ecc0:158::/48
                  2a12:ecc0:34a::/48
                  2a13:8c86:22::/48
                  2a13:c900:130::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:30:7a:02:9f:d4:79:8b:be:19:ba:41:b0:d8:df:2d:e1:f6:
         ba:ef:7b:7e:82:0d:65:e4:41:76:b5:2a:2d:47:db:7b:17:fe:
         22:c7:e6:02:75:69:3c:23:a7:2c:de:4b:6e:0f:c1:8d:c7:e5:
         c6:67:4f:f8:05:2b:7f:0b:e9:a9:93:7e:3d:81:50:ca:af:2b:
         99:e8:22:46:a9:d8:f7:84:6e:10:59:78:da:f8:37:dd:ff:0c:
         71:1f:2f:99:8d:21:4f:11:5c:6b:b2:fe:a7:c9:fe:01:9f:b4:
         1e:40:6f:22:62:e1:8e:13:bc:8e:b1:77:a6:41:22:82:97:67:
         e3:1f:6e:67:ec:e7:11:c7:85:73:cb:28:15:4c:48:fb:58:1e:
         64:ad:e1:d1:62:ee:2f:1a:fb:6b:fd:20:ea:0c:71:5e:96:43:
         4f:be:e4:8e:08:80:30:ed:91:ed:ce:21:3c:8e:2c:86:9c:7a:
         ae:de:7e:36:da:19:16:83:0c:37:78:b3:2a:2a:13:a4:89:05:
         df:73:db:15:e0:92:48:84:66:1b:a6:6e:08:0e:6d:56:16:89:
         da:df:53:6c:0f:fd:b7:bf:ed:02:04:f6:d4:14:51:02:29:2b:
         c5:c1:1b:8b:7b:4f:09:23:a9:10:5c:99:3c:92:0d:88:80:ff:
         20:4a:d3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----