Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pFgnYbXiNoWsAl8gnzTSsSnsTho.roa
File:                     pFgnYbXiNoWsAl8gnzTSsSnsTho.roa (raw, json)
Hash identifier:          zZq2fp+HCWwf78BgLpzpvZ+yVoDDRBz0yzstsXEDddc=
Subject key identifier:   A4:58:27:61:B5:E2:36:85:AC:02:5F:20:9F:34:D2:B1:29:EC:4E:1A
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019994BAA120464204A403733125B1506861
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pFgnYbXiNoWsAl8gnzTSsSnsTho.roa
Signing time:             Mon 29 Sep 2025 09:08:02 +0000
ROA not before:           Mon 29 Sep 2025 09:08:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6079
IP address blocks:        2a05:b300::/29 maxlen: 32
                          2a06:1184:11::/48 maxlen: 48
                          2a06:35c3:100::/48 maxlen: 48
                          2a09:17c1:4a::/48 maxlen: 48
                          2a0a:2d06:66::/48 maxlen: 48
                          2a0c:7882:2::/48 maxlen: 48
                          2a0e:15c7:101::/48 maxlen: 48
                          2a0e:1a83:99::/48 maxlen: 48
                          2a0e:c786:122::/48 maxlen: 48
                          2a0e:c787:1000::/48 maxlen: 48
                          2a0e:f600:2a::/48 maxlen: 48
                          2a0f:1200:10::/48 maxlen: 48
                          2a0f:1206:66::/48 maxlen: 48
                          2a0f:1584:6::/48 maxlen: 48
                          2a0f:1e80:1986::/48 maxlen: 48
                          2a0f:3046:85::/48 maxlen: 48
                          2a0f:3047:fe48::/48 maxlen: 48
                          2a0f:31c0::/32 maxlen: 32
                          2a0f:3d80:1312::/48 maxlen: 48
                          2a0f:7d00:100::/48 maxlen: 48
                          2a0f:bc04:1004::/48 maxlen: 48
                          2a0f:da40::/29 maxlen: 32
                          2a0f:de40::/29 maxlen: 32
                          2a0f:dec0::/29 maxlen: 29
                          2a0f:e1c0:1312::/48 maxlen: 48
                          2a0f:e1c7:77::/48 maxlen: 48
                          2a0f:e202:33::/48 maxlen: 48
                          2a0f:e207:fd38::/48 maxlen: 48
                          2a0f:e740::/29 maxlen: 32
                          2a0f:e7c7:b4::/48 maxlen: 48
                          2a0f:ea44:55::/48 maxlen: 48
                          2a0f:ea44:acab::/48 maxlen: 48
                          2a0f:ec00::/29 maxlen: 29
                          2a10:67c2:d6::/48 maxlen: 48
                          2a10:67c5:2::/48 maxlen: 48
                          2a10:6f00::/29 maxlen: 32
                          2a10:7700::/29 maxlen: 32
                          2a12:ac46:77::/48 maxlen: 48
                          2a12:ac46:99::/48 maxlen: 48
                          2a12:ecc0:11::/48 maxlen: 48
                          2a12:ecc0:3e2::/48 maxlen: 48
                          2a13:18c5:11::/48 maxlen: 48
                          2a13:18c6:101::/48 maxlen: 48
                          2a13:18c6:8512::/48 maxlen: 48
                          2a13:8100::/29 maxlen: 32
                          2a13:8c86:88::/48 maxlen: 48
                          2a13:8c86:10a::/48 maxlen: 48
                          2a13:9285:100::/48 maxlen: 48
                          2a13:c900:120::/48 maxlen: 48
                          2a13:e100:323::/48 maxlen: 48
                          2a13:e102:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:94:ba:a1:20:46:42:04:a4:03:73:31:25:b1:50:68:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Sep 29 09:08:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a4582761b5e23685ac025f209f34d2b129ec4e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:e7:20:16:88:ba:98:98:33:f1:cc:ec:63:
                    94:f4:d9:4b:3e:71:24:6e:7f:79:fe:d7:ad:3e:ea:
                    b3:1e:65:e5:d2:05:8b:d0:cf:ba:c8:56:85:b1:cd:
                    dc:ef:c2:b0:0c:f7:fa:e9:4d:f0:1e:b5:39:e0:ae:
                    4e:35:f6:05:28:a6:f5:74:3a:37:66:cf:5a:cc:82:
                    2b:f4:77:f9:c2:cb:ac:4d:a4:fe:de:c1:57:11:86:
                    6d:31:8e:82:56:22:74:b1:e1:3c:65:07:5d:85:df:
                    b2:5e:5c:d0:c1:b8:ce:67:b3:c4:5c:83:e2:8e:71:
                    6a:1f:a3:d9:16:6c:51:3e:05:a7:4f:cf:c9:ec:cc:
                    d1:9c:36:dd:8b:a2:e6:19:df:c5:bd:8d:fb:3b:16:
                    ef:57:c4:5b:80:80:71:fa:be:7c:12:1f:4f:94:42:
                    ce:c2:0d:35:f3:01:92:e3:59:79:ba:ce:cc:31:bb:
                    68:be:9b:6e:8d:ae:50:64:8e:75:74:8d:bb:d5:0d:
                    c0:95:55:24:91:58:d1:f0:18:c2:35:f8:6a:db:8f:
                    ef:c4:49:f7:a6:6d:bc:1f:a8:a0:50:79:8a:a4:21:
                    a4:2b:b6:80:d2:18:4e:65:36:08:1a:6a:ee:2f:6d:
                    ba:f9:1a:ca:24:4c:91:06:e7:f1:73:f8:6a:11:9f:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:58:27:61:B5:E2:36:85:AC:02:5F:20:9F:34:D2:B1:29:EC:4E:1A
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pFgnYbXiNoWsAl8gnzTSsSnsTho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:b300::/29
                  2a06:1184:11::/48
                  2a06:35c3:100::/48
                  2a09:17c1:4a::/48
                  2a0a:2d06:66::/48
                  2a0c:7882:2::/48
                  2a0e:15c7:101::/48
                  2a0e:1a83:99::/48
                  2a0e:c786:122::/48
                  2a0e:c787:1000::/48
                  2a0e:f600:2a::/48
                  2a0f:1200:10::/48
                  2a0f:1206:66::/48
                  2a0f:1584:6::/48
                  2a0f:1e80:1986::/48
                  2a0f:3046:85::/48
                  2a0f:3047:fe48::/48
                  2a0f:31c0::/32
                  2a0f:3d80:1312::/48
                  2a0f:7d00:100::/48
                  2a0f:bc04:1004::/48
                  2a0f:da40::/29
                  2a0f:de40::/29
                  2a0f:dec0::/29
                  2a0f:e1c0:1312::/48
                  2a0f:e1c7:77::/48
                  2a0f:e202:33::/48
                  2a0f:e207:fd38::/48
                  2a0f:e740::/29
                  2a0f:e7c7:b4::/48
                  2a0f:ea44:55::/48
                  2a0f:ea44:acab::/48
                  2a0f:ec00::/29
                  2a10:67c2:d6::/48
                  2a10:67c5:2::/48
                  2a10:6f00::/29
                  2a10:7700::/29
                  2a12:ac46:77::/48
                  2a12:ac46:99::/48
                  2a12:ecc0:11::/48
                  2a12:ecc0:3e2::/48
                  2a13:18c5:11::/48
                  2a13:18c6:101::/48
                  2a13:18c6:8512::/48
                  2a13:8100::/29
                  2a13:8c86:88::/48
                  2a13:8c86:10a::/48
                  2a13:9285:100::/48
                  2a13:c900:120::/48
                  2a13:e100:323::/48
                  2a13:e102:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:12:f0:3b:af:7e:e0:b7:e2:82:50:60:e3:b7:cc:cf:14:cd:
         95:44:e9:06:b6:e9:09:63:5f:f7:b9:ea:a1:48:e9:c6:84:10:
         0f:fc:f8:b2:d7:99:da:3c:21:49:aa:bf:c0:cf:42:b1:03:41:
         ac:88:f1:91:43:6f:e6:52:9e:ac:75:b9:bf:83:1b:41:ac:83:
         66:99:63:e7:5d:c7:42:1c:f9:40:34:c7:5a:08:87:34:47:0f:
         f8:68:7a:ac:07:f2:40:50:b3:bc:56:5b:3f:c8:d3:24:7c:83:
         79:75:3b:39:ca:83:e5:69:1d:a5:c4:50:4a:24:5c:cd:55:42:
         26:74:37:a6:ad:60:a0:97:ae:c1:bc:c5:0c:e9:4b:38:61:32:
         3c:08:d6:3e:c3:f0:60:87:36:f9:6b:87:40:1c:ae:21:10:d7:
         70:25:f7:da:41:b1:06:4e:5e:fa:20:f8:12:14:4c:47:b5:5f:
         54:f8:37:c3:7b:30:9c:b1:83:16:36:23:86:06:07:6f:70:3b:
         40:7e:0e:da:a4:b9:21:6e:8b:a4:4b:b9:fb:1a:8c:2e:5e:a6:
         1f:47:bc:55:b2:9b:db:70:46:2a:cf:23:04:e9:ac:55:75:23:
         ca:0d:23:18:ed:8e:a8:42:2a:71:b0:92:ab:d5:8d:db:86:d6:
         0e:c1:d6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----