Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TVCrcaqJuzyJIXJJ2fzvGbKCQs8.roa
File:                     TVCrcaqJuzyJIXJJ2fzvGbKCQs8.roa (raw, json)
Hash identifier:          uWX9QG6oRx9dx+xZ2Z/G6LMVw3EHD0C99gGbP9c3Wc0=
Subject key identifier:   4D:50:AB:71:AA:89:BB:3C:89:21:72:49:D9:FC:EF:19:B2:82:42:CF
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       019D25B1C141C61D7A65F7B59D33343E2F69
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TVCrcaqJuzyJIXJJ2fzvGbKCQs8.roa
Signing time:             Wed 25 Mar 2026 15:51:39 +0000
ROA not before:           Wed 25 Mar 2026 15:51:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     402306
IP address blocks:        2.27.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:b1:c1:41:c6:1d:7a:65:f7:b5:9d:33:34:3e:2f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Mar 25 15:51:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d50ab71aa89bb3c89217249d9fcef19b28242cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:d2:28:a7:19:bf:e0:c2:e0:06:97:06:b7:
                    70:2d:6f:1e:92:c2:6f:6d:7e:c4:bc:c3:8d:4f:32:
                    d6:0e:c8:6c:a8:c0:b8:60:33:e5:05:d9:49:98:ab:
                    04:1d:6a:5a:b6:ab:2d:76:03:93:20:2b:48:81:7e:
                    f0:3f:46:c2:e7:88:f2:42:55:e0:19:43:36:c6:9b:
                    a0:ff:2d:37:9b:a3:0b:8c:68:2b:c8:32:a3:ff:bd:
                    a8:a9:f0:cf:f2:af:26:42:95:0b:50:f3:b1:ca:66:
                    ca:e8:3b:9d:c8:78:fa:d4:ec:e2:65:96:ca:3b:e3:
                    cd:b5:5b:05:53:3d:d3:2e:61:31:1b:b4:3a:0c:f2:
                    75:82:80:74:c2:16:49:7d:ce:bd:f1:60:77:b9:03:
                    92:c6:c4:4d:93:fa:c6:54:5e:4a:f3:a2:d7:76:8a:
                    f5:e3:53:07:f8:91:eb:b3:00:f5:60:17:4b:cc:e8:
                    3b:77:c9:50:1c:97:a5:8f:33:fe:7e:30:af:6e:d9:
                    68:2e:ec:f6:4e:e7:b0:70:5a:87:3c:a6:3e:1b:22:
                    0c:9a:40:77:53:e1:b9:20:cf:be:c0:61:e4:b1:04:
                    39:5f:e4:04:bd:9d:49:1c:d0:04:ca:00:6e:f1:7b:
                    b8:98:1b:17:f9:d0:e7:c2:dc:89:66:16:d2:69:24:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:50:AB:71:AA:89:BB:3C:89:21:72:49:D9:FC:EF:19:B2:82:42:CF
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TVCrcaqJuzyJIXJJ2fzvGbKCQs8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.27.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:69:eb:2b:fe:d7:97:24:f4:12:34:db:e7:af:31:06:ee:e6:
         7b:1b:d2:d9:18:30:b5:ca:86:07:60:39:db:60:bd:ce:aa:17:
         be:46:df:f5:7a:9b:57:30:a0:9d:96:98:75:d7:f1:af:67:3d:
         8e:15:94:07:91:b8:5f:04:ab:b5:fb:72:ae:68:2b:e7:15:96:
         94:20:bd:51:87:e3:ca:ca:34:18:18:aa:f1:9e:7a:6f:fc:da:
         2f:69:14:49:7e:2a:ba:69:5a:e3:c6:da:0c:df:fd:c6:d3:56:
         3b:b4:bf:ca:9d:ad:ad:b3:89:04:c1:63:31:24:37:d2:81:93:
         2c:d2:07:c5:e2:05:5c:12:da:fe:80:86:26:ed:34:b8:32:71:
         c3:3b:f4:20:91:1e:5f:98:9a:d7:01:5d:b4:03:78:26:00:37:
         ee:69:f4:ac:76:02:1d:47:43:18:8f:aa:5c:fe:52:f9:78:a1:
         de:01:e8:df:43:94:74:20:c6:de:a2:e0:79:d3:69:58:67:e0:
         60:3a:b5:1b:d0:97:04:2f:ec:35:e3:2c:5e:eb:74:2f:af:13:
         c7:27:9a:1f:fe:12:07:42:63:76:cc:aa:46:16:28:a8:cd:79:
         36:85:84:ef:f9:ca:aa:d0:3a:5e:66:30:8d:cb:bf:73:b8:3d:
         a9:ae:9a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----