Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204874.roa
File:                     AS204874.roa (raw, json)
Hash identifier:          MOFnu9q7h1XChhM2Ltli9LUNmeGsjiQ3IAG6MeDqsHk=
Subject key identifier:   67:35:87:94:2B:87:B3:94:EF:3A:77:C1:87:B8:0A:9E:31:C7:B1:8B
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       7A20427DE6F3CD701146FFBC8D0EBDE4E62C40F3
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204874.roa
Signing time:             Tue 14 Oct 2025 13:46:24 +0000
ROA not before:           Tue 14 Oct 2025 13:41:24 +0000
ROA not after:            Tue 13 Oct 2026 13:46:24 +0000
asID:                     204874
IP address blocks:        2a14:7580:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:20:42:7d:e6:f3:cd:70:11:46:ff:bc:8d:0e:bd:e4:e6:2c:40:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Oct 14 13:41:24 2025 GMT
            Not After : Oct 13 13:46:24 2026 GMT
        Subject: CN=673587942B87B394EF3A77C187B80A9E31C7B18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:e3:b9:57:4f:d8:9a:9a:16:d2:94:c2:9e:
                    41:30:6f:0b:61:3f:e9:38:fd:4c:40:46:4e:2c:45:
                    71:4f:ca:e1:d4:c7:f4:99:2e:84:a0:5d:56:74:aa:
                    50:57:c8:a0:eb:a5:5f:97:ef:83:cd:51:33:9d:bb:
                    98:a2:ce:4d:3e:71:a3:75:3e:6b:34:e9:e2:66:c7:
                    98:8b:e1:32:8a:3e:a1:c3:0c:88:3a:31:56:bb:11:
                    da:8b:09:ab:ba:bb:6c:15:e0:2a:01:43:4c:64:60:
                    14:b8:f0:20:1d:08:96:2b:64:9c:d1:eb:ac:ce:ac:
                    05:cb:8a:2f:88:51:63:e3:f5:3d:a6:01:ab:a1:2d:
                    04:4c:dc:3b:19:ca:be:bb:17:bb:69:ac:14:31:e3:
                    6c:da:fb:69:dd:b6:bc:8d:40:01:46:2d:56:7d:60:
                    58:c4:62:fd:f7:16:b0:90:a2:cb:a6:f7:6c:88:22:
                    39:9d:dc:ae:af:3a:1f:f0:33:55:38:ab:29:a5:60:
                    70:c9:23:18:f7:77:69:a6:fe:44:b8:66:66:25:78:
                    54:c7:d2:44:d4:63:9d:c3:d6:16:0c:4c:2a:0d:e8:
                    dd:a5:82:66:82:32:d8:25:74:e6:f2:cd:46:6f:66:
                    41:da:f2:87:21:3d:b8:34:5e:ca:75:4d:90:d1:32:
                    b8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:35:87:94:2B:87:B3:94:EF:3A:77:C1:87:B8:0A:9E:31:C7:B1:8B
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204874.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:c8:03:06:58:08:8b:cf:30:b7:16:30:c5:88:d8:0b:cd:20:
         f5:1a:26:3e:86:76:5c:93:4b:fa:6b:5b:ca:a8:fc:4e:e6:74:
         f7:04:bd:fe:3c:aa:a3:7b:c0:d4:21:a0:87:a9:bf:5c:3b:d6:
         09:dd:67:07:11:6c:69:6c:6c:c8:a1:4c:76:27:a5:75:92:d0:
         aa:57:8f:44:7c:7c:1a:ee:b5:81:54:8d:48:f3:3d:6b:d3:85:
         2c:f5:24:7d:99:94:8c:64:a4:b7:83:d3:14:85:12:4a:b8:b1:
         15:d0:c1:89:3a:aa:1c:fe:90:a7:93:b0:24:a6:88:20:01:32:
         d2:93:a0:6d:ae:d7:49:89:ee:50:3a:59:a0:d2:f0:cd:37:2a:
         aa:aa:ce:db:e4:f2:19:3e:10:c5:d5:5c:73:f6:87:35:bc:0e:
         9b:db:cc:2c:93:5d:b7:43:ce:14:cc:9f:2a:4c:d7:26:2c:e0:
         da:af:57:29:a4:9a:37:ac:77:81:46:3a:35:c8:b6:46:89:a7:
         ee:6d:89:77:68:5a:c9:42:78:ef:ff:46:36:d2:7e:1f:48:a0:
         cf:63:6c:f8:48:f7:7a:7c:64:72:8b:92:1c:97:9c:8a:c5:38:
         82:2d:14:85:79:ba:a6:14:bf:86:b4:23:b0:23:7a:f5:49:01:
         d9:21:52:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----