Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/uSsFdkr0ggxz6PU9zbIc0D0hUuE.roa
File:                     uSsFdkr0ggxz6PU9zbIc0D0hUuE.roa (raw, json)
Hash identifier:          6Iib9DN0waf34q3WxnzYzfzIuMLPbev7vDiW9vn9WVQ=
Subject key identifier:   B9:2B:05:76:4A:F4:82:0C:73:E8:F5:3D:CD:B2:1C:D0:3D:21:52:E1
Certificate issuer:       /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial:       018CC6B7CC6D0EA3FA4507D13823E9E65D42
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/uSsFdkr0ggxz6PU9zbIc0D0hUuE.roa
Signing time:             Mon 01 Jan 2024 20:29:43 +0000
ROA not before:           Mon 01 Jan 2024 20:29:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47575
IP address blocks:        109.205.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:cc:6d:0e:a3:fa:45:07:d1:38:23:e9:e6:5d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
        Validity
            Not Before: Jan  1 20:29:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b92b05764af4820c73e8f53dcdb21cd03d2152e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:3a:8d:59:5d:ee:bc:d3:08:d9:56:77:71:
                    33:46:1a:fc:a5:81:1a:5f:b0:20:4c:91:d4:c4:70:
                    9f:81:bd:85:83:0a:8f:26:42:fa:46:c1:39:da:af:
                    e9:c9:71:17:7f:11:3d:20:8b:26:60:1b:08:33:8f:
                    df:ee:1b:47:0b:ad:e4:f8:f6:78:9e:9b:dd:3c:a9:
                    45:ef:34:d2:7a:71:1c:d1:b3:92:ff:8d:be:44:c6:
                    21:77:b9:87:41:78:69:4c:ef:29:13:72:97:84:8b:
                    ed:62:73:69:72:9d:3b:57:cb:ac:72:3b:d6:49:44:
                    0e:1d:2d:7a:08:d7:f4:bf:16:97:0b:98:d4:fe:05:
                    70:07:89:26:69:e2:07:47:5e:5d:e5:61:2e:67:7c:
                    43:2a:e1:c4:31:2b:d5:08:6d:2f:db:0a:5d:27:08:
                    20:14:1e:96:27:d4:9c:23:0e:c6:12:e2:05:88:de:
                    f9:58:c8:ef:c2:64:72:c2:84:98:31:5a:35:46:04:
                    8a:04:60:07:07:8b:19:71:d9:49:50:ec:fb:56:9e:
                    d6:de:99:17:c1:16:df:f9:5e:80:2a:58:e6:91:ae:
                    f3:0b:af:38:15:2f:1c:6a:12:47:2e:58:06:8e:c0:
                    c8:4a:d8:85:dc:73:ae:fc:c3:0c:61:a7:45:b5:d3:
                    9a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2B:05:76:4A:F4:82:0C:73:E8:F5:3D:CD:B2:1C:D0:3D:21:52:E1
            X509v3 Authority Key Identifier:
                keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/uSsFdkr0ggxz6PU9zbIc0D0hUuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:8a:7b:59:39:47:9d:60:b2:11:89:91:c0:d3:6e:68:70:66:
         3d:64:fc:7e:e1:de:e9:29:f3:b9:d0:ca:41:20:dc:a9:bc:8f:
         f0:77:27:c6:59:e7:60:2a:6c:55:6d:7e:76:8d:fb:7a:97:2d:
         35:97:ae:a5:cc:4a:35:38:1c:29:35:72:83:f2:d3:6a:47:8b:
         c6:ad:89:8a:67:83:ff:62:19:75:dd:37:91:75:5c:c9:a4:74:
         f2:4d:9c:17:d4:bc:5d:9b:f7:15:31:3c:01:00:32:09:78:29:
         13:b5:5f:6a:fc:4f:e4:f8:a0:36:98:c1:98:f6:bf:3f:bc:4a:
         ce:d5:4c:ab:3c:59:e3:0d:48:a6:50:f3:3f:dd:54:3c:fb:84:
         b7:8d:25:56:e8:cd:e5:db:28:b4:17:02:38:e7:e2:9a:e5:e3:
         55:fd:86:2d:1d:c0:ab:a5:3c:db:c3:46:78:66:b9:31:94:9a:
         e8:6a:7c:54:47:bc:e4:86:a1:c5:9d:4c:c8:22:66:82:42:9c:
         08:5c:eb:1e:06:6f:21:25:2b:10:dd:e1:d9:2e:bb:a7:66:ac:
         d7:b2:0c:7c:27:a0:65:c1:38:38:24:7a:af:18:b6:37:bf:db:
         21:84:08:10:b8:22:fc:60:63:fa:b3:ab:0e:33:8e:4f:a4:7e:
         ed:74:3d:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt8xtDqP6RQfROCPp5l1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNWE0MTIxMjdiNTE0ZjY0NTVlYzhhODZlMjlkMzhlYjBh
YmI1YWMwHhcNMjQwMTAxMjAyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTJiMDU3NjRhZjQ4MjBjNzNlOGY1M2RjZGIyMWNkMDNkMjE1MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknE6jVld7rzTCNlWd3EzRhr8pYEa
X7AgTJHUxHCfgb2FgwqPJkL6RsE52q/pyXEXfxE9IIsmYBsIM4/f7htHC63k+PZ4
npvdPKlF7zTSenEc0bOS/42+RMYhd7mHQXhpTO8pE3KXhIvtYnNpcp07V8uscjvW
SUQOHS16CNf0vxaXC5jU/gVwB4kmaeIHR15d5WEuZ3xDKuHEMSvVCG0v2wpdJwgg
FB6WJ9ScIw7GEuIFiN75WMjvwmRywoSYMVo1RgSKBGAHB4sZcdlJUOz7Vp7W3pkX
wRbf+V6AKljmka7zC684FS8cahJHLlgGjsDIStiF3HOu/MMMYadFtdOaFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLkrBXZK9IIMc+j1Pc2yHNA9IVLhMB8GA1UdIwQY
MBaAFEFaQSEntRT2RV7IqG4p046wq7WsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZwQklTZTFGUFpGWHNpb2JpblRqckNydGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iOGM3YmEtOTJmYS00YjczLWE5MjQt
M2QzM2U1NDE0ZDliLzEvdVNzRmRrcjBnZ3h6NlBVOXpiSWMwRDBoVXVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iOGM3YmEtOTJmYS00YjczLWE5MjQtM2QzM2U1NDE0ZDli
LzEvUVZwQklTZTFGUFpGWHNpb2JpblRqckNydGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbc0sMA0G
CSqGSIb3DQEBCwUAA4IBAQBpintZOUedYLIRiZHA025ocGY9ZPx+4d7pKfO50MpB
INypvI/wdyfGWedgKmxVbX52jft6ly01l66lzEo1OBwpNXKD8tNqR4vGrYmKZ4P/
Yhl13TeRdVzJpHTyTZwX1Lxdm/cVMTwBADIJeCkTtV9q/E/k+KA2mMGY9r8/vErO
1UyrPFnjDUimUPM/3VQ8+4S3jSVW6M3l2yi0FwI45+Ka5eNV/YYtHcCrpTzbw0Z4
ZrkxlJroanxUR7zkhqHFnUzIImaCQpwIXOseBm8hJSsQ3eHZLrunZqzXsgx8J6Bl
wTg4JHqvGLY3v9shhAgQuCL8YGP6s6sOM45PpH7tdD3+
-----END CERTIFICATE-----