Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32392e36322e302f32342d3234203d3e203633343733.roa
File:                     3139332e32392e36322e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier:          xcfGq15VfbKyGWLAJvOGQW4JGcN9ILKNkwtSm8fe9cY=
Subject key identifier:   7F:5C:C3:5D:17:A1:A3:FC:B7:C5:F9:46:75:55:F1:88:B9:03:2C:58
Certificate issuer:       /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial:       6647674E080B1D1A0809CC9F19E7BCE105099908
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32392e36322e302f32342d3234203d3e203633343733.roa
Signing time:             Mon 06 Oct 2025 10:47:49 +0000
ROA not before:           Mon 06 Oct 2025 10:42:49 +0000
ROA not after:            Mon 05 Oct 2026 10:47:49 +0000
asID:                     63473
IP address blocks:        193.29.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:47:67:4e:08:0b:1d:1a:08:09:cc:9f:19:e7:bc:e1:05:09:99:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
        Validity
            Not Before: Oct  6 10:42:49 2025 GMT
            Not After : Oct  5 10:47:49 2026 GMT
        Subject: CN=7F5CC35D17A1A3FCB7C5F9467555F188B9032C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:74:b8:82:61:c1:64:c3:2a:16:27:b9:d0:
                    22:74:6b:45:24:45:92:c1:57:55:e8:9c:bd:a7:56:
                    70:f0:0b:59:91:08:a4:6e:83:69:31:43:0e:ee:25:
                    5f:34:ec:78:ad:83:a7:ea:1d:16:92:46:e5:3d:b5:
                    44:3e:62:75:a9:71:52:6e:48:25:28:f3:30:0b:cf:
                    93:42:33:e4:4c:46:b5:e6:21:7c:50:ae:13:ea:52:
                    30:78:e6:d0:dd:41:44:9b:b9:eb:ae:26:9b:f5:5f:
                    24:07:63:79:6c:ab:89:1c:44:dc:04:98:8f:7e:f5:
                    c8:cb:0e:3c:cf:2b:44:f2:c1:09:33:56:33:75:86:
                    e4:68:f5:e5:19:e6:98:68:e4:5b:8f:4a:50:3e:a6:
                    af:2e:b1:d9:4e:2d:ec:d4:c3:de:41:c5:9f:d4:f9:
                    e5:c2:26:d0:02:b1:bf:c1:7a:09:44:8a:4b:6e:13:
                    55:72:34:9d:15:85:0c:18:ab:96:33:47:db:8d:a9:
                    7d:ae:36:de:e1:11:c1:2b:9c:4c:be:3a:0b:64:17:
                    58:fd:d2:df:94:22:07:9e:a4:0e:01:f0:60:d5:b3:
                    ae:6b:47:e4:d4:6d:bb:1b:48:b7:a9:e6:62:9d:ba:
                    b7:f9:24:38:f7:3f:81:8a:23:4b:2c:86:9d:65:8c:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5C:C3:5D:17:A1:A3:FC:B7:C5:F9:46:75:55:F1:88:B9:03:2C:58
            X509v3 Authority Key Identifier:
                keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32392e36322e302f32342d3234203d3e203633343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:a1:41:8d:9a:8a:48:0d:c2:60:03:f3:08:72:75:cd:b1:d1:
         9c:07:44:5c:18:17:23:e3:42:d3:52:78:e4:34:f0:83:36:95:
         74:a2:37:52:ab:0c:e1:2f:6a:53:79:65:1a:1e:5c:50:58:63:
         3e:8a:1a:7e:ee:c5:dc:6e:64:cc:37:33:cf:32:36:53:e6:54:
         45:69:02:1c:c6:c6:49:c1:2b:55:ad:b0:6a:43:97:2f:25:43:
         78:30:d0:ac:dd:c0:08:a1:ac:27:c3:e5:41:9a:bb:72:ff:6c:
         a8:5a:8d:6e:3f:22:f9:af:c0:49:3e:ca:c2:02:30:da:eb:f0:
         57:30:b5:47:c7:08:69:1e:8e:53:93:e8:87:08:1e:96:3d:2d:
         b6:71:b1:07:c9:32:af:eb:de:aa:af:84:cb:58:fe:1b:d9:32:
         ec:c3:50:a4:64:31:0c:2e:b3:df:be:d1:aa:49:c1:a4:9d:7c:
         2e:b5:6b:cb:cd:04:ef:95:cd:94:bf:05:74:ee:49:51:46:7a:
         4a:9e:7f:ae:72:90:f0:23:f8:a7:2a:c1:9b:04:07:e9:86:ce:
         4a:f7:83:94:35:8b:25:5c:a0:3b:8b:16:cc:c7:44:9a:f1:78:
         5f:4d:77:6c:df:55:66:11:55:a2:bf:95:e6:54:15:58:d7:e8:
         3a:18:df:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:13 2025 by rpki-client