Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/BGv1PWma16f4ctAQJCrVoQubGBo.roa
File:                     BGv1PWma16f4ctAQJCrVoQubGBo.roa (raw, json)
Hash identifier:          pfWL3xKc+QttrMTYA6gs1NSPLhjXFXzGZMdIvCtI0fI=
Subject key identifier:   04:6B:F5:3D:69:9A:D7:A7:F8:72:D0:10:24:2A:D5:A1:0B:9B:18:1A
Certificate issuer:       /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial:       018CC6B94567BBCBFA8C971133639F4391AC
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/BGv1PWma16f4ctAQJCrVoQubGBo.roa
Signing time:             Mon 01 Jan 2024 20:31:19 +0000
ROA not before:           Mon 01 Jan 2024 20:31:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7195
IP address blocks:        103.57.250.0/24 maxlen: 24
                          2a03:f80:57::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b9:45:67:bb:cb:fa:8c:97:11:33:63:9f:43:91:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
        Validity
            Not Before: Jan  1 20:31:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=046bf53d699ad7a7f872d010242ad5a10b9b181a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:57:08:db:ff:ce:37:b7:2b:96:1e:93:55:30:
                    66:bf:d4:11:2d:64:77:a8:b7:9c:db:46:c3:96:fd:
                    51:61:a4:80:8a:3e:0a:88:a9:5f:4a:14:0b:75:d7:
                    c1:d6:fe:c3:3a:c6:09:91:3e:d0:c4:d0:0f:05:aa:
                    3e:e9:96:9c:78:6a:38:7e:b3:bc:95:e5:3e:2e:42:
                    fd:2f:5c:f9:d5:5b:87:b4:77:69:f4:98:90:cf:8e:
                    70:92:33:d2:c3:c7:4f:e4:7e:c7:cc:e7:78:74:3f:
                    29:60:f2:b8:0f:20:94:cc:70:c9:64:6d:e0:6c:65:
                    85:be:25:3f:ad:07:f1:25:84:65:4b:bc:5b:e2:dc:
                    2d:b9:e7:1c:74:78:4e:4a:41:10:0f:78:2e:14:69:
                    cd:14:57:5d:c9:d7:7b:84:d2:91:62:fc:f6:a1:63:
                    3e:e5:95:0f:22:19:17:22:86:cf:34:c3:40:11:7c:
                    a7:cb:79:8e:d4:97:4a:51:fb:23:5e:41:4a:3c:c2:
                    ec:0e:30:7a:fb:ff:6f:71:6e:37:90:50:4d:be:ee:
                    4c:cc:f4:f6:6a:c5:52:0e:f4:66:75:a4:66:a8:19:
                    a7:e4:0f:c7:51:2b:cc:dd:f5:6f:35:41:ba:31:3d:
                    ba:b6:c9:df:11:5c:c8:d6:d0:df:8e:e6:28:68:13:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6B:F5:3D:69:9A:D7:A7:F8:72:D0:10:24:2A:D5:A1:0B:9B:18:1A
            X509v3 Authority Key Identifier:
                keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/BGv1PWma16f4ctAQJCrVoQubGBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.57.250.0/24
                IPv6:
                  2a03:f80:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:35:ed:0c:b4:d5:c9:3e:3e:c5:06:33:d7:b2:c5:87:32:93:
         91:b0:86:f2:39:62:bf:af:9e:1b:40:44:33:e8:8c:bc:9f:63:
         ae:b6:84:c9:30:4c:b7:b9:6e:f8:23:d8:8f:a6:ad:f8:40:7b:
         a6:cf:84:41:13:00:ec:05:0b:6e:f6:06:6c:e9:b4:7b:01:bd:
         d1:62:4a:a0:f4:c6:28:40:49:81:71:ab:c9:dd:bc:31:3c:d4:
         9f:16:af:e1:68:43:ac:30:8c:db:cb:4d:4c:cc:f9:84:3d:d2:
         9e:1a:5b:c1:26:16:ff:c2:f9:b4:af:2a:9c:58:c8:45:5a:9a:
         4f:c2:a2:2a:bd:3e:ae:44:52:a2:ac:c2:d9:30:a1:71:6a:4a:
         ed:a1:bc:89:07:57:28:bd:74:70:71:27:51:83:53:fc:7b:fb:
         b6:5a:7d:d7:bd:f0:84:3f:1e:35:aa:86:cf:c3:9e:71:93:a6:
         97:c4:23:1b:fa:64:ec:cc:54:b6:49:97:6d:f4:d1:51:a5:65:
         b7:c5:b8:b2:f5:9d:23:7a:8c:ef:c8:0c:d8:41:8a:9f:85:c6:
         ef:45:bd:6e:13:48:00:0a:a8:76:b2:46:8f:29:a4:63:4a:e3:
         79:97:eb:05:d8:de:9f:4b:e8:87:61:62:84:74:d6:29:5f:66:
         bf:5c:6d:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzGuUVnu8v6jJcRM2OfQ5GsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjQwMTAxMjAzMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDZiZjUzZDY5OWFkN2E3Zjg3MmQwMTAyNDJhZDVhMTBiOWIxODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VcI2//ON7crlh6TVTBmv9QRLWR3
qLec20bDlv1RYaSAij4KiKlfShQLddfB1v7DOsYJkT7QxNAPBao+6ZaceGo4frO8
leU+LkL9L1z51VuHtHdp9JiQz45wkjPSw8dP5H7HzOd4dD8pYPK4DyCUzHDJZG3g
bGWFviU/rQfxJYRlS7xb4twtueccdHhOSkEQD3guFGnNFFddydd7hNKRYvz2oWM+
5ZUPIhkXIobPNMNAEXyny3mO1JdKUfsjXkFKPMLsDjB6+/9vcW43kFBNvu5MzPT2
asVSDvRmdaRmqBmn5A/HUSvM3fVvNUG6MT26tsnfEVzI1tDfjuYoaBN8uQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFARr9T1pmten+HLQECQq1aELmxgaMB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvQkd2MVBXbWExNmY0Y3RBUUpDclZvUXViR0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZzn6MA8E
AgACMAkDBwAqAw+AAFcwDQYJKoZIhvcNAQELBQADggEBADc17Qy01ck+PsUGM9ey
xYcyk5GwhvI5Yr+vnhtARDPojLyfY662hMkwTLe5bvgj2I+mrfhAe6bPhEETAOwF
C272BmzptHsBvdFiSqD0xihASYFxq8ndvDE81J8Wr+FoQ6wwjNvLTUzM+YQ90p4a
W8EmFv/C+bSvKpxYyEVamk/Coiq9Pq5EUqKswtkwoXFqSu2hvIkHVyi9dHBxJ1GD
U/x7+7Zafde98IQ/HjWqhs/DnnGTppfEIxv6ZOzMVLZJl2300VGlZbfFuLL1nSN6
jO/IDNhBip+Fxu9FvW4TSAAKqHayRo8ppGNK43mX6wXY3p9L6IdhYoR01ilfZr9c
bYQ=
-----END CERTIFICATE-----