Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210146.roa
File:                     AS210146.roa (raw, json)
Hash identifier:          ICDNpRMsP5dwIipaqGMHTeUZ/q+r9qHCWquATLvV+iU=
Subject key identifier:   1A:6A:0E:5A:F5:1D:C3:19:92:C3:EF:1B:4A:6E:34:5F:98:9F:38:67
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       42099741A1407C1AD162D13421395B2AC3F9D68B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210146.roa
Signing time:             Tue 24 Mar 2026 15:15:38 +0000
ROA not before:           Tue 24 Mar 2026 15:10:38 +0000
ROA not after:            Tue 23 Mar 2027 15:15:38 +0000
asID:                     210146
IP address blocks:        2a14:7581:fee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:09:97:41:a1:40:7c:1a:d1:62:d1:34:21:39:5b:2a:c3:f9:d6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Mar 24 15:10:38 2026 GMT
            Not After : Mar 23 15:15:38 2027 GMT
        Subject: CN=1A6A0E5AF51DC31992C3EF1B4A6E345F989F3867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:58:cd:55:5c:54:99:0e:7e:19:f1:a0:c1:
                    b2:2a:63:23:f4:fb:b6:fe:ac:00:b9:29:61:88:1e:
                    80:0b:07:4a:4b:59:fc:50:bf:8b:85:fa:aa:bc:89:
                    bc:6e:35:cc:d9:b4:36:99:41:07:88:a0:e1:0a:94:
                    c9:6e:0a:6f:26:80:ae:1e:e1:fe:dc:d8:e3:e7:31:
                    88:76:75:b5:f0:44:0e:78:2e:65:90:f6:11:a3:bf:
                    2a:1d:86:2d:87:ad:32:3b:ad:b8:66:22:e2:07:68:
                    d9:8d:78:f3:29:8f:4a:da:6b:f2:10:c4:84:d1:72:
                    68:48:52:76:2c:6c:5d:fa:d5:01:cc:af:e5:71:9f:
                    05:de:a0:dd:48:73:34:4b:e6:ad:a6:aa:4b:00:c0:
                    d7:21:9d:3a:12:dc:20:a4:e3:e5:95:86:46:fb:ae:
                    e2:50:df:03:3a:14:aa:b5:37:1d:4f:68:c2:85:d9:
                    36:38:98:cd:ae:7a:30:64:28:e5:63:5d:9a:bc:84:
                    10:a4:4b:b0:4b:00:8a:27:6d:0f:95:5d:ea:0f:7a:
                    e0:69:b9:85:8b:b8:02:e3:47:8b:f6:36:93:f4:2f:
                    e4:94:04:ee:cc:c6:60:fc:46:f5:bf:d7:9c:02:46:
                    08:80:20:59:d9:06:b1:f8:d0:5f:db:54:6a:40:87:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6A:0E:5A:F5:1D:C3:19:92:C3:EF:1B:4A:6E:34:5F:98:9F:38:67
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210146.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:fee::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:31:9c:35:c7:7c:cf:22:e1:83:33:f6:3b:17:8f:d4:bb:9a:
         dc:31:5f:9b:99:0f:7c:82:75:67:4e:18:06:fe:5d:72:83:7f:
         9b:cd:b1:2a:b2:09:c5:1e:36:4c:77:1a:e1:fe:c5:dc:52:08:
         c0:ee:df:4c:80:6d:43:26:64:e3:37:3b:2a:51:ff:83:f6:a4:
         da:65:aa:c7:e8:9c:3c:b0:f8:7b:c9:a0:1f:a9:2d:ca:b5:51:
         f1:9e:0b:f6:1a:f1:eb:95:ac:8b:e3:ab:2b:3d:20:9f:d0:a8:
         03:67:0c:21:24:e0:80:4a:fd:56:4f:84:33:42:2b:2e:ad:f4:
         14:b0:81:23:ab:e1:6c:86:27:0f:77:62:d1:ca:bb:45:9f:de:
         09:49:e1:a2:45:6c:fe:18:d2:d1:37:3a:b6:e2:d2:0d:82:64:
         f2:de:05:06:5d:bb:ab:01:0f:0b:ff:b4:4d:4e:11:b1:68:d7:
         5e:45:1c:7f:b8:b2:22:cc:d4:5f:c1:a7:1c:f6:b9:c4:87:1b:
         c3:ae:30:6d:f0:dc:f2:3a:38:b7:83:80:8a:99:b0:da:48:3c:
         fd:4c:84:77:1a:54:54:75:89:99:6a:1b:cb:b0:3d:a4:3c:9d:
         d4:01:cb:47:02:1a:86:c9:c2:57:03:2d:18:66:49:88:7b:98:
         f0:3c:0b:55
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUQgmXQaFAfBrRYtE0ITlbKsP51oswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjAzMjQxNTEwMzhaFw0yNzAzMjMxNTE1MzhaMDMxMTAvBgNV
BAMTKDFBNkEwRTVBRjUxREMzMTk5MkMzRUYxQjRBNkUzNDVGOTg5RjM4NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbP1jNVVxUmQ5+GfGgwbIqYyP0
+7b+rAC5KWGIHoALB0pLWfxQv4uF+qq8ibxuNczZtDaZQQeIoOEKlMluCm8mgK4e
4f7c2OPnMYh2dbXwRA54LmWQ9hGjvyodhi2HrTI7rbhmIuIHaNmNePMpj0raa/IQ
xITRcmhIUnYsbF361QHMr+VxnwXeoN1IczRL5q2mqksAwNchnToS3CCk4+WVhkb7
ruJQ3wM6FKq1Nx1PaMKF2TY4mM2uejBkKOVjXZq8hBCkS7BLAIonbQ+VXeoPeuBp
uYWLuALjR4v2NpP0L+SUBO7MxmD8RvW/15wCRgiAIFnZBrH40F/bVGpAh7FjAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUGmoOWvUdwxmSw+8bSm40X5ifOGcwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjEwMTQ2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
gQ/uMA0GCSqGSIb3DQEBCwUAA4IBAQByMZw1x3zPIuGDM/Y7F4/Uu5rcMV+bmQ98
gnVnThgG/l1yg3+bzbEqsgnFHjZMdxrh/sXcUgjA7t9MgG1DJmTjNzsqUf+D9qTa
ZarH6Jw8sPh7yaAfqS3KtVHxngv2GvHrlayL46srPSCf0KgDZwwhJOCASv1WT4Qz
QisurfQUsIEjq+FshicPd2LRyrtFn94JSeGiRWz+GNLRNzq24tINgmTy3gUGXbur
AQ8L/7RNThGxaNdeRRx/uLIizNRfwacc9rnEhxvDrjBt8NzyOji3g4CKmbDaSDz9
TIR3GlRUdYmZahvLsD2kPJ3UActHAhqGycJXAy0YZkmIe5jwPAtV
-----END CERTIFICATE-----