Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/bzqXpokQZM1aGs9ewZRks0hYHI4.roa
File:                     bzqXpokQZM1aGs9ewZRks0hYHI4.roa (raw, json)
Hash identifier:          hgSOUwN94Q7p6oexHTJXl0V0Ta0qXPc09UvqCMBYuIs=
Subject key identifier:   6F:3A:97:A6:89:10:64:CD:5A:1A:CF:5E:C1:94:64:B3:48:58:1C:8E
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       0199E2A12FA442A86BFFA7FB7982BC453067
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/bzqXpokQZM1aGs9ewZRks0hYHI4.roa
Signing time:             Tue 14 Oct 2025 12:10:38 +0000
ROA not before:           Tue 14 Oct 2025 12:10:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8311
IP address blocks:        194.143.192.0/24 maxlen: 24
                          194.143.193.0/24 maxlen: 24
                          194.143.194.0/24 maxlen: 24
                          194.143.195.0/24 maxlen: 24
                          194.143.196.0/24 maxlen: 24
                          194.143.197.0/24 maxlen: 24
                          194.143.198.0/24 maxlen: 24
                          194.143.199.0/24 maxlen: 24
                          194.143.200.0/24 maxlen: 24
                          194.143.201.0/24 maxlen: 24
                          194.143.202.0/24 maxlen: 24
                          194.143.204.0/24 maxlen: 24
                          194.143.208.0/24 maxlen: 24
                          194.143.211.0/24 maxlen: 24
                          194.143.212.0/23 maxlen: 23
                          194.143.214.0/24 maxlen: 24
                          194.143.215.0/24 maxlen: 24
                          194.143.216.0/24 maxlen: 24
                          194.143.219.0/24 maxlen: 24
                          194.143.220.0/24 maxlen: 24
                          213.220.1.0/24 maxlen: 24
                          213.220.10.0/24 maxlen: 24
                          213.220.12.0/24 maxlen: 24
                          213.220.15.0/24 maxlen: 24
                          213.220.17.0/24 maxlen: 24
                          213.220.19.0/24 maxlen: 24
                          213.220.21.0/24 maxlen: 24
                          213.220.24.0/21 maxlen: 24
                          213.220.32.0/22 maxlen: 22
                          213.220.36.0/23 maxlen: 23
                          213.220.38.0/24 maxlen: 24
                          213.220.40.0/24 maxlen: 24
                          213.220.43.0/24 maxlen: 24
                          213.220.44.0/22 maxlen: 22
                          213.220.48.0/23 maxlen: 23
                          213.220.52.0/23 maxlen: 23
                          213.220.55.0/24 maxlen: 24
                          213.220.56.0/23 maxlen: 23
                          213.220.59.0/24 maxlen: 24
                          213.220.60.0/23 maxlen: 24
                          213.220.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:e2:a1:2f:a4:42:a8:6b:ff:a7:fb:79:82:bc:45:30:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Oct 14 12:10:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6f3a97a6891064cd5a1acf5ec19464b348581c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:ca:2d:2f:b4:48:a9:90:06:55:4b:20:53:
                    aa:a3:e4:e0:e6:3e:ea:3c:ff:b1:0d:57:d7:48:45:
                    25:2a:b5:4b:d1:0c:db:76:9e:7e:20:51:8e:6c:e0:
                    0b:b2:4d:09:55:d3:8d:0f:65:52:04:89:4e:6f:16:
                    24:99:56:0f:81:27:2e:f7:82:15:71:02:fa:52:38:
                    9d:2a:58:bd:07:dd:6a:fb:ac:71:90:03:de:51:6a:
                    f2:79:96:4b:0b:8b:76:4d:43:aa:65:4c:ba:b3:02:
                    59:42:ea:02:94:26:de:0c:44:92:d4:31:24:63:ec:
                    12:5d:71:92:57:79:f8:16:30:1b:db:58:b3:61:14:
                    07:d9:6b:1f:4e:c2:bd:3f:0f:2c:ae:93:b0:29:2c:
                    09:64:1d:ed:5f:aa:85:fd:0d:9e:ec:7d:3d:c0:cb:
                    cc:86:16:96:a6:18:3d:55:ad:7b:4b:a3:eb:47:2b:
                    37:61:d0:cb:4e:30:8b:2a:f6:5f:8b:58:42:2f:24:
                    d4:53:22:3d:75:c2:e5:61:1a:7b:0c:3a:2c:cf:c6:
                    14:20:56:99:f6:08:47:ad:ec:3c:9e:ee:5b:59:f1:
                    54:dd:64:e6:3c:cd:42:d9:5b:bc:18:dc:6b:a2:18:
                    37:0d:97:28:49:65:ab:d5:ce:dd:ec:29:b2:5e:35:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3A:97:A6:89:10:64:CD:5A:1A:CF:5E:C1:94:64:B3:48:58:1C:8E
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/bzqXpokQZM1aGs9ewZRks0hYHI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.143.192.0-194.143.202.255
                  194.143.204.0/24
                  194.143.208.0/24
                  194.143.211.0-194.143.216.255
                  194.143.219.0-194.143.220.255
                  213.220.1.0/24
                  213.220.10.0/24
                  213.220.12.0/24
                  213.220.15.0/24
                  213.220.17.0/24
                  213.220.19.0/24
                  213.220.21.0/24
                  213.220.24.0-213.220.38.255
                  213.220.40.0/24
                  213.220.43.0-213.220.49.255
                  213.220.52.0/23
                  213.220.55.0-213.220.57.255
                  213.220.59.0-213.220.61.255
                  213.220.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:4d:9a:a9:f8:a5:6b:fd:19:16:d7:1b:63:e6:00:06:c6:
         84:55:16:5b:11:8f:96:06:3b:ab:67:88:5a:7b:83:12:32:a1:
         a3:fd:0b:12:33:a0:9b:20:e8:94:d5:bd:60:d2:9e:b5:96:39:
         33:28:78:86:14:0e:1a:cb:b7:66:67:e9:cf:e0:e8:95:98:b6:
         0f:cf:0b:a2:22:93:5a:ca:df:e5:7a:01:d5:dd:7a:f4:41:3a:
         0b:79:71:c4:bc:a7:70:63:1f:ce:52:68:2b:a4:05:f3:98:70:
         d3:bf:7e:7a:eb:cc:47:8a:bf:25:36:52:62:dc:e7:9c:b1:12:
         9e:56:c3:83:de:40:e8:b5:69:e4:01:e1:4f:f7:9f:3b:3a:70:
         4e:00:b3:c7:ef:5a:8f:7f:71:3a:fe:18:64:e5:ab:3d:fb:65:
         61:3c:97:db:5f:e4:f2:55:40:66:06:0c:cf:fe:b6:a2:b8:76:
         74:59:b2:64:6e:c4:28:4b:e2:4d:84:c8:35:00:b6:48:f5:2b:
         64:eb:5b:b9:83:0d:0a:27:d2:81:c7:d2:93:fe:b1:3c:f0:71:
         f3:5f:e9:cc:12:05:08:f6:49:87:b6:c1:70:ac:8d:f1:3f:9f:
         1d:75:88:21:f0:72:be:58:61:f8:e8:e0:7d:ae:7e:c5:88:10:
         74:12:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:49 2025 by rpki-client