Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213574.roa
File:                     AS213574.roa (raw, json)
Hash identifier:          9IeVpYJyLJjLF+30eTl0jvuWPLReNPtGjF3G9JjNrzI=
Subject key identifier:   F1:E5:43:D6:92:56:B7:EA:FD:52:0E:D0:B7:2D:23:43:04:C0:4C:57
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       18D02BF7F88A02A421F8560BED86E85E14595627
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213574.roa
Signing time:             Fri 12 Sep 2025 18:50:54 +0000
ROA not before:           Fri 12 Sep 2025 18:45:54 +0000
ROA not after:            Fri 11 Sep 2026 18:50:54 +0000
asID:                     213574
IP address blocks:        162.141.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d0:2b:f7:f8:8a:02:a4:21:f8:56:0b:ed:86:e8:5e:14:59:56:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Sep 12 18:45:54 2025 GMT
            Not After : Sep 11 18:50:54 2026 GMT
        Subject: CN=F1E543D69256B7EAFD520ED0B72D234304C04C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:d9:0f:ea:47:e3:3a:05:b2:a1:62:92:72:
                    a6:44:9f:15:10:cd:cb:d6:95:4f:52:a3:bd:17:4e:
                    23:b5:e4:67:4e:25:7f:98:27:24:5e:ee:58:e2:ce:
                    f1:c5:ad:8a:8b:0b:73:7f:e8:86:4b:5e:80:d4:f3:
                    00:b1:20:d5:51:98:8b:00:b3:da:94:c6:eb:e7:2c:
                    1a:62:b7:b9:41:87:e9:ee:37:b2:bf:18:1b:23:5f:
                    c7:dc:de:88:a7:cb:ed:61:87:f8:7d:eb:41:fe:4d:
                    e4:2f:f0:02:f2:eb:1b:59:f8:2c:47:06:93:f8:82:
                    99:37:f9:06:cf:41:6d:f3:bf:21:2f:cc:6d:e0:70:
                    53:5b:be:2b:54:6c:aa:3f:8c:2e:47:d9:72:b5:e8:
                    1d:a9:e5:f5:dc:e2:06:4a:48:9a:82:6c:b5:46:35:
                    53:e5:e9:89:e4:a7:59:49:71:94:3e:22:68:fe:4a:
                    a5:af:e1:88:49:61:1c:68:43:6c:dd:13:14:72:87:
                    e0:88:c6:b7:a6:96:79:d8:3d:a3:c6:2e:a1:70:36:
                    45:5a:df:4f:b1:5c:ec:47:01:df:ad:d3:e7:c9:c6:
                    e0:3b:c8:80:13:66:00:5d:15:f6:68:47:ad:b0:33:
                    51:e0:f8:34:f1:58:99:48:0f:d1:75:d9:a8:6c:8c:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E5:43:D6:92:56:B7:EA:FD:52:0E:D0:B7:2D:23:43:04:C0:4C:57
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213574.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.141.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:ce:92:91:c5:a8:ca:c1:5f:b9:db:5f:7d:87:ed:81:9a:0a:
         e3:40:8c:36:1e:db:e4:c0:eb:5f:89:c8:50:8e:33:e2:0c:bc:
         af:08:d7:65:11:75:fb:d9:5a:ad:20:0a:c0:a8:11:48:f9:6b:
         d4:e7:ac:ab:5b:d6:c9:45:6c:4b:de:40:a8:87:6b:cc:d9:7d:
         63:df:3c:97:ee:98:a7:a5:78:f5:37:f3:9d:ff:c4:1b:3c:83:
         72:a9:4a:bf:3c:22:03:2a:38:ee:55:ef:0d:a7:1b:e8:c4:7a:
         f6:89:e6:f0:ac:f4:f1:29:94:72:5f:52:3c:35:d4:79:be:0b:
         43:3c:d7:35:b7:f6:cf:28:93:5a:9f:96:df:e9:44:26:c2:a5:
         c6:a9:39:44:89:26:bf:7c:23:9e:81:35:42:bd:e8:d7:5b:7f:
         ca:44:d3:69:ed:ca:e7:bf:3a:63:5f:33:24:f3:a0:d6:14:4d:
         36:76:45:59:3e:3f:df:b0:64:9a:ea:7d:5c:82:ea:98:aa:bf:
         a7:74:8b:34:04:6c:cd:5e:fb:ca:ad:02:4a:58:4d:ad:3a:02:
         5b:8f:fb:2d:c5:79:77:e0:0a:0d:84:ac:e0:bf:fa:94:cc:3d:
         65:e9:af:82:5f:48:86:55:c8:69:26:17:55:63:c7:9c:6a:3f:
         8b:8e:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----