Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206023.roa
File:                     AS206023.roa (raw, json)
Hash identifier:          W/NrgKTasClWu2irTxosnEwv5bsRvAEq5V7EGPIleyc=
Subject key identifier:   54:89:DA:5E:BD:F8:09:66:7E:A7:61:43:A9:D5:9F:4D:EB:62:0A:99
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       37B4D094FDDACCD8B8283B899241E7B1F822E31F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206023.roa
Signing time:             Mon 18 Aug 2025 20:55:10 +0000
ROA not before:           Mon 18 Aug 2025 20:50:10 +0000
ROA not after:            Mon 17 Aug 2026 20:55:10 +0000
asID:                     206023
IP address blocks:        2a0f:85c1:cd4::/48 maxlen: 48
                          2a0f:85c1:d10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b4:d0:94:fd:da:cc:d8:b8:28:3b:89:92:41:e7:b1:f8:22:e3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Aug 18 20:50:10 2025 GMT
            Not After : Aug 17 20:55:10 2026 GMT
        Subject: CN=5489DA5EBDF809667EA76143A9D59F4DEB620A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:ed:cd:67:63:c5:a8:67:48:18:7a:db:2f:
                    9d:29:eb:a3:7a:fb:64:e2:ed:1f:95:0c:a5:cb:06:
                    a7:3f:e8:a3:96:a2:8e:08:34:6c:c3:bc:6a:20:91:
                    41:d9:88:df:ae:6f:23:6d:bb:c1:11:41:36:2d:2c:
                    45:57:6b:dd:10:dd:e7:4c:3f:49:45:61:d7:d4:3f:
                    72:e6:15:ea:52:51:07:43:de:29:1e:2a:35:0e:ce:
                    0c:95:07:81:3f:c0:fc:df:a8:d8:9a:3b:44:63:6d:
                    ed:15:7a:92:27:b1:54:ad:5d:96:32:07:7b:12:a6:
                    ff:ca:fb:17:bf:b3:fd:a6:18:aa:2f:5c:fe:e2:0c:
                    08:39:1b:1f:60:3e:bd:df:7d:7e:df:10:4f:51:fe:
                    d2:f3:c4:78:e3:bf:ba:85:69:e4:58:09:0b:8c:bd:
                    e5:46:cf:8c:86:1f:94:83:4a:80:c1:16:5f:2d:ba:
                    95:a8:c0:28:23:36:0b:54:56:44:14:64:07:41:f4:
                    e0:dc:32:77:b2:57:39:a9:22:1f:33:11:05:fb:8b:
                    1b:d0:4a:87:56:b0:bb:39:1a:39:47:5a:04:d6:b3:
                    ca:c0:de:a6:e2:e2:40:1f:8d:4e:e8:58:66:53:f1:
                    88:49:d9:29:ce:af:14:0f:5b:92:e1:86:ed:73:e8:
                    29:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:89:DA:5E:BD:F8:09:66:7E:A7:61:43:A9:D5:9F:4D:EB:62:0A:99
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:cd4::/48
                  2a0f:85c1:d10::/44

    Signature Algorithm: sha256WithRSAEncryption
         a3:b6:a8:92:cf:b3:eb:1d:c7:d3:37:ba:76:08:65:a1:c6:0f:
         25:ff:af:e9:18:8b:04:0c:47:12:f2:5e:f0:30:0a:6f:8b:e4:
         c6:91:b6:8e:30:68:90:3d:00:02:05:cd:fa:94:f9:1f:28:65:
         2f:70:44:58:f6:59:f9:0d:ee:15:08:7e:20:0d:be:79:17:8b:
         29:ac:17:50:94:41:5f:26:84:4b:59:68:4d:34:10:5a:ef:b8:
         2c:0c:cb:05:4d:3b:48:03:9e:f5:d7:0e:67:40:50:63:fa:c1:
         2d:f6:a5:84:65:50:0e:23:73:32:42:8f:ce:a5:80:6f:bb:56:
         ea:28:7b:64:39:72:1a:92:0d:e9:88:16:a3:03:6b:b4:d6:7f:
         34:e7:ff:88:c6:08:c2:5c:98:c3:ee:26:19:f7:35:aa:e0:27:
         88:d0:26:0b:80:f2:36:e1:2a:44:a1:50:cb:34:b6:8c:ff:e0:
         77:76:09:0b:b0:c8:15:b4:9a:b6:e9:8b:db:84:73:85:e5:ac:
         04:4d:f7:86:f7:98:76:db:2b:f3:41:49:0b:f8:19:13:6f:07:
         f6:eb:ad:0f:62:da:7a:31:02:82:77:1a:03:2b:a8:b7:80:39:
         38:14:25:6b:c9:30:0a:53:e7:23:f3:f2:e1:10:a9:e5:ba:84:
         ee:7b:ef:d3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUN7TQlP3azNi4KDuJkkHnsfgi4x8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA4MTgyMDUwMTBaFw0yNjA4MTcyMDU1MTBaMDMxMTAvBgNV
BAMTKDU0ODlEQTVFQkRGODA5NjY3RUE3NjE0M0E5RDU5RjRERUI2MjBBOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOO3NZ2PFqGdIGHrbL50p66N6
+2Ti7R+VDKXLBqc/6KOWoo4INGzDvGogkUHZiN+ubyNtu8ERQTYtLEVXa90Q3edM
P0lFYdfUP3LmFepSUQdD3ikeKjUOzgyVB4E/wPzfqNiaO0Rjbe0VepInsVStXZYy
B3sSpv/K+xe/s/2mGKovXP7iDAg5Gx9gPr3ffX7fEE9R/tLzxHjjv7qFaeRYCQuM
veVGz4yGH5SDSoDBFl8tupWowCgjNgtUVkQUZAdB9ODcMneyVzmpIh8zEQX7ixvQ
SodWsLs5GjlHWgTWs8rA3qbi4kAfjU7oWGZT8YhJ2SnOrxQPW5Lhhu1z6ClFAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUVInaXr34CWZ+p2FDqdWfTetiCpkwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA2MDIzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+F
wQzUAwcEKg+FwQ0QMA0GCSqGSIb3DQEBCwUAA4IBAQCjtqiSz7PrHcfTN7p2CGWh
xg8l/6/pGIsEDEcS8l7wMApvi+TGkbaOMGiQPQACBc36lPkfKGUvcERY9ln5De4V
CH4gDb55F4sprBdQlEFfJoRLWWhNNBBa77gsDMsFTTtIA5711w5nQFBj+sEt9qWE
ZVAOI3MyQo/OpYBvu1bqKHtkOXIakg3piBajA2u01n805/+IxgjCXJjD7iYZ9zWq
4CeI0CYLgPI24SpEoVDLNLaM/+B3dgkLsMgVtJq26YvbhHOF5awETfeG95h22yvz
QUkL+BkTbwf2660PYtp6MQKCdxoDK6i3gDk4FCVryTAKU+cj8/LhEKnluoTue+/T
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:15 2025 by rpki-client