Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206092.roa
File:                     AS206092.roa (raw, json)
Hash identifier:          oC9+vEkl6zj/oz6Pjc5lr9vT7UlrhmHQN4mWDjGjBoE=
Subject key identifier:   30:80:6C:5A:AD:AF:4D:6D:89:93:97:44:B7:13:A4:A3:6F:C3:EA:01
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       3CE852476864C5AF7EB90D9B57EB815031822C8C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206092.roa
Signing time:             Tue 30 Sep 2025 15:55:07 +0000
ROA not before:           Tue 30 Sep 2025 15:50:07 +0000
ROA not after:            Tue 29 Sep 2026 15:55:07 +0000
asID:                     206092
IP address blocks:        141.11.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e8:52:47:68:64:c5:af:7e:b9:0d:9b:57:eb:81:50:31:82:2c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Sep 30 15:50:07 2025 GMT
            Not After : Sep 29 15:55:07 2026 GMT
        Subject: CN=30806C5AADAF4D6D89939744B713A4A36FC3EA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:fa:01:8e:98:4a:23:34:48:39:58:78:0d:
                    bc:66:54:ae:06:ab:12:93:e3:5b:de:b5:ac:55:e4:
                    6b:af:7f:55:35:4e:d2:da:6a:ed:a4:58:1e:97:14:
                    7c:79:3c:46:c9:ee:12:94:58:28:f9:3e:e5:35:be:
                    6d:ac:4c:41:0a:73:9f:9e:9a:f7:fb:f5:32:d8:a9:
                    a4:4d:f8:da:b3:3a:52:79:d5:b4:7d:a1:83:15:46:
                    6d:1f:c6:fb:58:9f:fa:49:61:9b:b9:13:3f:75:38:
                    64:86:6d:c0:19:24:9f:82:ef:e9:03:7e:6e:bb:22:
                    0c:88:48:bf:21:cd:d6:97:05:db:51:d8:0e:73:37:
                    e7:a5:ac:b3:7b:8b:15:41:82:95:19:9c:ef:2e:b5:
                    5b:8e:bf:dd:0e:a0:13:c4:b1:e1:5f:cb:4d:4e:7b:
                    b1:c0:b8:42:1e:5e:50:f2:70:85:aa:03:51:cb:b2:
                    0d:d8:73:32:54:d0:96:62:76:8a:2a:0e:b6:80:94:
                    5c:20:42:98:1e:70:20:0b:49:0f:81:90:bd:8e:b7:
                    d1:24:3c:1f:bd:f4:f1:8b:24:4a:d0:3f:52:ff:85:
                    22:90:c8:93:08:dd:d8:7c:5d:2a:90:7e:3f:6c:15:
                    d6:60:63:64:89:e4:85:6d:d7:8b:b3:dc:15:1e:b5:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:80:6C:5A:AD:AF:4D:6D:89:93:97:44:B7:13:A4:A3:6F:C3:EA:01
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:3b:64:ff:9e:a4:41:c6:b5:32:e4:9e:fe:94:d6:c4:5b:f6:
         67:2d:44:5d:8c:bf:f8:97:88:3d:92:3c:2e:0f:8b:ab:22:36:
         04:e9:4f:1c:ef:a2:6a:35:d0:22:be:b3:ac:be:21:1c:48:cd:
         12:34:83:31:24:4e:1b:b9:33:ee:d5:37:88:5b:4f:dc:1f:54:
         6b:2f:2d:19:ba:fd:b2:eb:66:b2:b1:f6:2d:5b:2e:0a:12:f8:
         e3:9e:3a:14:d5:88:b8:12:0d:86:41:75:c0:1d:21:1e:e6:f8:
         74:50:55:40:8f:52:01:cf:ea:ba:59:66:53:dc:fb:e8:04:f3:
         59:16:91:31:52:c2:5c:e4:0f:e0:c8:49:46:ec:85:15:56:0a:
         8c:7b:81:96:c0:b5:4e:d7:69:ec:bb:12:97:62:4e:c1:6a:b6:
         4f:42:15:bc:6e:c4:3e:c0:27:8c:4e:08:c5:64:6e:71:f7:53:
         49:7a:33:1a:15:c8:fb:e8:24:6c:ba:90:eb:22:86:4d:53:b8:
         1a:08:2b:ff:e3:d9:33:2e:de:3c:7e:ce:d9:06:7e:0d:c8:38:
         6b:c3:64:35:21:9d:4c:2a:ae:c4:16:07:2f:2b:11:56:5f:d5:
         77:47:e4:43:9f:01:e6:1f:1d:58:2a:a2:9c:ef:c9:7b:cb:91:
         5b:d9:fb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:07:28 2025 by rpki-client