Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/rySq0elv3nKgzzBUgG2WJKXBTdw.roa
File:                     rySq0elv3nKgzzBUgG2WJKXBTdw.roa (raw, json)
Hash identifier:          7V4fk9Lk2Il9VjP0Gksc4pn+aLvYyRSsqaeA9AfQ0jI=
Subject key identifier:   AF:24:AA:D1:E9:6F:DE:72:A0:CF:30:54:80:6D:96:24:A5:C1:4D:DC
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       0199EC613ACEF063DB6C08B9FD4415F495B1
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/rySq0elv3nKgzzBUgG2WJKXBTdw.roa
Signing time:             Thu 16 Oct 2025 09:36:59 +0000
ROA not before:           Thu 16 Oct 2025 09:36:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206560
IP address blocks:        2a09:6281::/32 maxlen: 32
                          2a10:4102::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 09:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ec:61:3a:ce:f0:63:db:6c:08:b9:fd:44:15:f4:95:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Oct 16 09:36:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=af24aad1e96fde72a0cf3054806d9624a5c14ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d4:00:eb:83:46:12:56:ea:18:91:b5:a9:90:
                    d8:dd:a1:05:fa:85:57:1c:ae:7e:5a:e0:19:f0:93:
                    4a:72:50:33:1f:d4:35:e0:40:04:1e:0b:32:e9:c9:
                    e7:6b:11:85:a5:03:f1:ff:0d:a9:a7:92:78:60:77:
                    4a:c5:1f:39:c6:01:4f:4e:dd:f8:f0:27:66:d0:01:
                    b4:d0:cd:8a:29:72:d9:0a:56:6b:83:49:8e:aa:2b:
                    71:b9:9d:2d:a1:74:79:c3:bd:a0:a1:a4:08:49:d0:
                    dc:99:6a:a7:71:d5:b4:77:b1:70:46:0f:81:ea:3b:
                    16:bb:70:9b:e8:20:e7:6b:fb:b1:b7:d6:72:96:99:
                    a2:a2:10:ac:4e:d0:50:33:de:aa:0b:b3:01:45:20:
                    d0:20:a4:94:01:9c:e2:5b:78:75:56:f4:bb:7b:80:
                    cf:27:e1:49:70:22:b9:88:18:80:4d:b9:98:28:b8:
                    df:30:7b:d3:5e:08:90:63:69:81:00:8e:b9:ce:f7:
                    e7:bf:66:da:ef:28:e4:4e:70:47:a9:52:f5:16:47:
                    dc:a3:c0:86:ac:e1:89:24:d4:1e:7e:f2:75:a4:4a:
                    85:d5:1a:e7:6f:14:59:fe:79:5e:7a:f5:71:b7:59:
                    a6:6b:44:8d:c9:db:94:e3:e6:84:7e:b0:bc:de:e1:
                    a6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:24:AA:D1:E9:6F:DE:72:A0:CF:30:54:80:6D:96:24:A5:C1:4D:DC
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/rySq0elv3nKgzzBUgG2WJKXBTdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:6281::/32
                  2a10:4102::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:21:a1:6e:ea:fa:4c:d8:d2:94:40:9e:b9:df:7c:2d:90:b4:
         2f:91:e3:46:41:eb:62:b2:6f:6c:6e:ec:0b:6a:d1:00:6a:44:
         21:db:4d:2d:3c:89:a6:5a:39:15:bf:b5:db:0c:00:87:64:a1:
         f5:fe:d1:d8:1b:17:7e:42:01:1d:1b:26:91:3c:55:cf:b0:46:
         82:ef:40:5e:a5:a6:6f:72:7f:2a:c8:84:cd:b0:32:3b:11:f0:
         54:82:bb:1c:23:c9:78:91:a7:15:8c:92:a2:59:f3:01:69:b8:
         35:c4:21:a9:63:01:d3:a0:b1:9d:3d:de:2d:ff:aa:18:43:7b:
         b9:c6:9d:6c:56:6a:ee:4a:cf:4a:e4:47:85:19:6b:69:6c:a7:
         6c:19:92:eb:e2:e5:c0:2a:56:87:ca:25:83:b6:a2:45:87:cb:
         b2:59:71:b9:76:28:e2:0f:68:cb:f2:d4:32:5b:6e:8d:37:ca:
         f5:68:1f:89:2a:3a:fe:ec:8b:7a:bb:27:1e:3a:c5:ae:53:94:
         83:66:18:ef:0d:a5:b6:b1:01:5a:3b:9c:5d:df:67:21:31:83:
         84:bd:c8:99:7c:de:b0:db:a0:c2:02:be:ef:8c:f7:c9:84:6a:
         0d:7a:d1:cc:2b:f4:a7:df:a7:71:a7:e7:f9:04:0d:3b:44:63:
         89:e9:bb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:01 2025 by rpki-client