Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/hopE5nbQY5r20JQ6uaXH5JYpOWc.roa
File:                     hopE5nbQY5r20JQ6uaXH5JYpOWc.roa (raw, json)
Hash identifier:          fzI2vMoCED9Ide/Md9CqSUe230wfYxn1MlpAm1WYjvo=
Subject key identifier:   86:8A:44:E6:76:D0:63:9A:F6:D0:94:3A:B9:A5:C7:E4:96:29:39:67
Certificate issuer:       /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial:       0197F983B97253B44953905F241B34F531FF
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/hopE5nbQY5r20JQ6uaXH5JYpOWc.roa
Signing time:             Fri 11 Jul 2025 12:44:08 +0000
ROA not before:           Fri 11 Jul 2025 12:44:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        185.219.146.0/23 maxlen: 24
                          2a0a:640::/29 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 16:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:f9:83:b9:72:53:b4:49:53:90:5f:24:1b:34:f5:31:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
        Validity
            Not Before: Jul 11 12:44:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=868a44e676d0639af6d0943ab9a5c7e496293967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:a1:da:a5:c0:91:06:9f:b1:b0:5c:a7:21:
                    09:91:5b:14:93:db:7c:44:25:a6:59:24:79:0a:95:
                    8a:a1:0b:8f:a3:bd:7f:af:b2:e1:e6:97:0e:8d:5b:
                    e0:75:10:f4:e5:d9:85:81:49:e1:d9:8b:c7:da:a7:
                    ef:c1:ce:c4:25:13:0f:5e:83:78:d7:71:0e:66:eb:
                    85:08:61:63:35:aa:b9:f3:f3:fb:84:a8:95:7e:71:
                    58:e2:b3:36:60:29:5c:3d:17:ad:bd:a7:41:6d:f0:
                    d7:3c:b7:5c:72:ca:0f:41:91:34:d8:09:44:29:7b:
                    22:42:ca:a0:80:bf:73:b9:9c:16:bc:a8:59:5c:2f:
                    70:41:ea:be:70:b0:e0:0e:51:5f:1b:c6:e9:b5:27:
                    37:dc:ea:8e:3f:65:54:f1:38:0a:97:ca:16:51:51:
                    dd:43:b7:5c:a3:b6:60:dd:08:01:61:23:80:d3:ac:
                    68:5d:ca:01:35:d9:ba:36:9d:71:12:42:9f:9a:bb:
                    46:60:c4:c2:87:33:86:c1:68:27:fb:d1:2a:ed:76:
                    4a:dd:55:b4:78:6b:3e:8d:dd:43:80:35:c2:17:45:
                    88:ae:e9:b0:10:61:0a:95:37:2e:c2:d7:ea:fd:6a:
                    18:d8:1e:e3:6e:40:b4:83:59:b0:00:70:54:db:20:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8A:44:E6:76:D0:63:9A:F6:D0:94:3A:B9:A5:C7:E4:96:29:39:67
            X509v3 Authority Key Identifier:
                keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/hopE5nbQY5r20JQ6uaXH5JYpOWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.146.0/23
                IPv6:
                  2a0a:640::/29

    Signature Algorithm: sha256WithRSAEncryption
         81:7b:c4:fc:4c:3e:3d:7d:77:29:a9:9e:4b:58:da:0a:b2:b1:
         d6:e2:89:a9:c8:10:1a:84:7d:61:6c:56:d9:73:1a:c7:c0:e8:
         4f:12:c5:7a:5c:fe:f1:f8:44:dd:1f:06:04:8c:6b:fd:c5:b4:
         e1:60:b5:e5:2f:49:48:f7:52:5a:33:58:90:3a:a8:55:ce:0e:
         48:32:a3:89:97:64:e0:f1:be:be:d1:e4:8b:ba:66:59:19:e2:
         b2:ef:ec:96:62:ff:75:21:c1:3f:58:17:d7:01:ca:52:a2:93:
         0c:84:89:e7:4c:1a:cf:d7:d5:75:13:e0:e0:14:17:57:20:a1:
         f5:ef:9d:24:96:70:ed:b3:66:ee:19:80:75:29:44:32:93:1b:
         17:80:86:9f:ac:f2:46:81:b3:d3:18:47:73:37:56:bf:ae:28:
         25:c1:53:33:38:4a:48:7d:c4:86:00:51:f7:89:1b:0c:24:f6:
         f4:cc:e0:7a:21:a0:99:4b:0f:66:1c:24:89:f6:f7:a4:4e:71:
         de:ba:95:0f:53:4a:c2:0d:35:97:eb:2c:f2:61:cc:7b:22:c2:
         42:ef:dd:e0:22:1d:41:fc:77:1d:fc:a4:54:37:48:ef:16:45:
         72:23:ff:66:5a:cc:1c:bc:d8:fe:7a:8d:81:87:0c:cc:06:75:
         66:85:50:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----