Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e352e302f32342d3234203d3e20323036303932.roa
File:                     38372e3235342e352e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier:          5AbdKFmtNdu0I9ZynCaAwms1EqYUPiTBICwx1LtjAT4=
Subject key identifier:   88:C3:B8:23:CA:D8:72:D6:C5:FA:7F:A9:AF:29:7A:B0:89:40:6F:56
Certificate issuer:       /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial:       6ABBA707408FCB6D0F901F4982C86C8798A0CC2D
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e352e302f32342d3234203d3e20323036303932.roa
Signing time:             Fri 25 Sep 2026 08:50:01 +0000
ROA not before:           Fri 25 Sep 2026 08:45:01 +0000
ROA not after:            Fri 24 Sep 2027 08:50:01 +0000
asID:                     206092
IP address blocks:        87.254.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bb:a7:07:40:8f:cb:6d:0f:90:1f:49:82:c8:6c:87:98:a0:cc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
        Validity
            Not Before: Sep 25 08:45:01 2026 GMT
            Not After : Sep 24 08:50:01 2027 GMT
        Subject: CN=88C3B823CAD872D6C5FA7FA9AF297AB089406F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:fd:83:e5:98:8c:11:9b:f6:20:4b:79:ea:
                    60:f5:7e:58:37:20:a4:13:38:92:7d:41:c5:cd:08:
                    a5:e0:40:22:86:ce:f8:5e:f3:a5:a5:92:06:50:ba:
                    33:f3:3f:26:e3:62:5b:21:f9:ec:0f:3f:d2:a6:41:
                    67:ce:37:4a:42:54:71:6c:e5:bc:a6:cd:e5:4a:a3:
                    7b:c9:7a:eb:61:80:dd:b8:0f:d4:92:6e:99:11:53:
                    ec:cf:f9:12:01:c0:f6:18:37:49:6f:f3:35:44:a5:
                    b6:3c:b9:d2:22:b8:8b:7d:0e:4b:b1:bc:11:6d:19:
                    34:fd:e3:f1:01:65:93:07:cb:56:0e:69:a1:35:90:
                    8e:5c:f3:c5:4d:e7:39:c8:4d:23:58:c7:fc:9d:da:
                    4f:b1:58:5e:34:e4:b2:f8:16:5b:61:58:1f:31:db:
                    9d:e7:b2:7c:1e:95:f6:03:65:6b:93:8f:25:32:72:
                    b8:91:6f:19:48:ec:8a:9b:28:aa:1c:55:4c:70:05:
                    cb:a8:67:9e:c8:12:c3:8c:09:70:7d:d2:6d:14:82:
                    ce:e1:bf:2e:42:13:07:55:ce:7b:0b:74:b6:59:a5:
                    aa:9c:4f:c2:99:f6:c0:2b:a5:45:66:43:67:4e:77:
                    96:6d:7c:4e:5d:99:0b:2d:4e:cf:c1:88:19:d5:e6:
                    b4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C3:B8:23:CA:D8:72:D6:C5:FA:7F:A9:AF:29:7A:B0:89:40:6F:56
            X509v3 Authority Key Identifier:
                keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e352e302f32342d3234203d3e20323036303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.254.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:16:5e:e6:a3:4b:21:bc:78:50:cc:b7:e4:7b:9a:9e:6f:96:
         b9:fc:07:56:ce:a1:dc:8b:07:95:a7:9e:44:32:3e:cf:21:85:
         7e:72:6d:69:ad:80:95:58:b6:01:7e:26:e4:69:e4:c1:e8:c3:
         39:17:12:57:7e:d5:61:76:ee:73:eb:f1:96:e8:7c:ac:fc:be:
         5e:64:1b:46:c2:f4:c8:a1:3b:50:0d:12:0e:c8:da:a1:ba:f6:
         42:10:b8:b3:b4:41:1a:f0:11:f6:38:b0:7e:17:85:c6:10:17:
         ea:40:95:f0:33:e2:40:b3:ea:09:40:b1:e7:b1:a0:2e:c6:d6:
         0c:55:25:b6:41:6b:fa:93:d9:8b:56:8e:3a:9e:14:51:92:25:
         1e:09:22:3f:3f:90:2f:50:4b:94:61:60:97:2b:b2:93:9c:8f:
         c1:e7:65:60:d5:ad:fb:93:ac:2d:98:5d:c8:1e:08:86:c4:29:
         b4:bd:80:7f:87:20:ac:ca:f7:2f:8a:cb:f9:4a:cd:9c:f7:25:
         2e:1f:73:bb:c4:1d:2e:0e:a2:dd:3c:f3:0a:ed:6b:4e:ad:4c:
         d3:7f:59:36:bd:3f:49:4e:59:ce:f5:39:e7:07:1d:db:fa:11:
         3e:12:22:db:95:c0:1f:6a:5e:e9:77:70:93:85:72:ae:61:31:
         fb:df:b7:38
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUarunB0CPy20PkB9Jgshsh5igzC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjA5MjUwODQ1MDFaFw0yNzA5MjQwODUwMDFaMDMxMTAvBgNV
BAMTKDg4QzNCODIzQ0FEODcyRDZDNUZBN0ZBOUFGMjk3QUIwODk0MDZGNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFH/2D5ZiMEZv2IEt56mD1flg3
IKQTOJJ9QcXNCKXgQCKGzvhe86WlkgZQujPzPybjYlsh+ewPP9KmQWfON0pCVHFs
5bymzeVKo3vJeuthgN24D9SSbpkRU+zP+RIBwPYYN0lv8zVEpbY8udIiuIt9Dkux
vBFtGTT94/EBZZMHy1YOaaE1kI5c88VN5znITSNYx/yd2k+xWF405LL4FlthWB8x
253nsnwelfYDZWuTjyUycriRbxlI7IqbKKocVUxwBcuoZ57IEsOMCXB90m0Ugs7h
vy5CEwdVznsLdLZZpaqcT8KZ9sArpUVmQ2dOd5ZtfE5dmQstTs/BiBnV5rRLAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUiMO4I8rYctbF+n+pryl6sIlAb1YwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzNTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNjMwMzkzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFf+
BTANBgkqhkiG9w0BAQsFAAOCAQEANRZe5qNLIbx4UMy35Huanm+WufwHVs6h3IsH
laeeRDI+zyGFfnJtaa2AlVi2AX4m5GnkwejDORcSV37VYXbuc+vxluh8rPy+XmQb
RsL0yKE7UA0SDsjaobr2QhC4s7RBGvAR9jiwfheFxhAX6kCV8DPiQLPqCUCx57Gg
LsbWDFUltkFr+pPZi1aOOp4UUZIlHgkiPz+QL1BLlGFglyuyk5yPwedlYNWt+5Os
LZhdyB4IhsQptL2Af4cgrMr3L4rL+UrNnPclLh9zu8QdLg6i3TzzCu1rTq1M039Z
Nr0/SU5ZzvU55wcd2/oRPhIi25XAH2pe6Xdwk4VyrmEx+9+3OA==
-----END CERTIFICATE-----